D2C Brand Registration and Compliance Checklist for India 2026

D2C brand registration in India requires a Private Limited Company (recommended), GST registration (mandatory for all e-commerce sellers), and a stack of product-specific licences depending on whether you sell food, electronics, cosmetics, or apparel. The complete compliance setup costs ₹15,000 to ₹50,000 and takes 30 to 60 days. India's D2C market crossed $60 billion in 2025, with brands like Mamaearth, boAt, and Lenskart proving the model works at scale. But behind every successful D2C brand is a compliance checklist that most founders discover too late. From the Legal Metrology Act labelling requirements that invite ₹25,000 fines to the DPDP Act, 2023 data protection rules carrying ₹250 crore penalties, the regulatory surface area for a D2C brand is wider than most founders expect. This checklist covers every registration, licence, and compliance requirement you need before (and after) your first order ships.

What is a D2C Brand? Definition and Business Model

A D2C (Direct-to-Consumer) brand is a business that manufactures or sources products and sells them directly to end customers through its own digital channels, without relying on traditional retail middlemen like distributors, wholesalers, or brick-and-mortar stores. The D2C model relies on owned channels: a branded website, a mobile app, social media storefronts (Instagram Shop, WhatsApp Business), and sometimes third-party marketplaces like Amazon or Flipkart as supplementary channels.

The operational advantage is control. D2C brands own their customer data, pricing, branding, and post-purchase experience. The regulatory consequence? They also own every compliance obligation that a traditional retailer would have shared with distributors and retailers in the supply chain. When you are the manufacturer, the brand, and the retailer all at once, the compliance checklist gets long. India crossed 800+ funded D2C brands by the end of 2025, according to Inc42's D2C Market Report, spanning categories from personal care and food to electronics and fashion. Whether you are bootstrapping a skincare line from your kitchen or raising Series A for a pet food brand, the compliance requirements are identical.

Step 1: Choose the Right Business Entity

The entity you choose determines your tax treatment, liability exposure, ability to raise funding, and capacity to integrate with payment gateways and logistics partners. For D2C brands, this is not a casual decision; it is foundational.

Entity Comparison for D2C Brands

Recommendation: If you are building a D2C brand that will need payment gateways, logistics partners, and potentially investors, register as a Private Limited Company. If you are a solo founder testing a product with no plans to raise external capital, an LLP is the lighter alternative. Sole proprietorships work for weekend hobby sellers on Etsy, not for brands planning a Shark Tank pitch.

Step 2: GST Registration (Mandatory for All D2C Sellers)

This is non-negotiable. Section 24 of the CGST Act, 2017 explicitly lists persons making taxable supplies through e-commerce operators as requiring compulsory GST registration, regardless of turnover. If you sell a single product through a website with a payment gateway, you need a GSTIN.

Why the ₹20 Lakh Exemption Does Not Apply

The standard GST exemption threshold of ₹20 lakh (₹10 lakh for special category states) does not apply to e-commerce sellers. The rationale is straightforward: e-commerce transactions cross state boundaries, making it difficult to enforce the threshold on a state-by-state basis. Whether you sell through Amazon, your own Shopify store, or a WhatsApp catalogue with a Razorpay payment link, the compulsory registration provision kicks in from your very first sale.

GST Compliance Checklist for D2C

One advantage of selling exclusively through your own D2C website (rather than marketplaces): you avoid the 1% TCS deduction under Section 52 of the CGST Act. Marketplace operators deduct 1% TCS on the net value of supplies. While this is adjustable in your GST return, it ties up working capital. Selling D2C keeps your cash flow cleaner.

Step 3: Trademark Registration (Protect Your Brand)

Your brand name is your most valuable asset in D2C. Unlike a retailer selling 50 brands, your entire business identity rests on one name, one logo, one colour palette. If someone registers your brand name as a trademark before you do, the consequences range from a forced rebrand to litigation that burns through your runway faster than a failed Facebook ad campaign.

Why Trademark Registration is Critical for D2C

Trademark registration under the Trade Marks Act, 1999 gives you exclusive legal rights to use your brand name and logo across India for 10 years (renewable indefinitely). Registered trademark holders can file infringement suits, demand damages, and block counterfeit listings on Amazon and Flipkart through their Brand Registry programmes. Without registration, you only have common law rights (limited to your geography and hard to enforce online).

Trademark Application Essentials

• Class selection: Choose the correct Nice Classification class for your products. D2C brands commonly need Class 25 (apparel), Class 3 (cosmetics), Class 29/30 (food), Class 9 (electronics), or Class 35 (retail/e-commerce services)
• Government fee: ₹4,500 per class for Startup India recognised entities, ₹9,000 for others
• Filing timeline: Application filed in 1 to 2 working days. Examination in 30 to 45 days. Publication in Trademark Journal, followed by a 4-month opposition window
• Total registration time: 6 to 18 months from application to registration certificate
• TM symbol: You can use the ™ symbol from the date of application. The ® symbol is only permitted after registration is granted

Step 4: FSSAI Licence (Food and Beverage D2C Brands)

If your D2C brand sells anything that can be consumed, including packaged food, beverages, dietary supplements, health drinks, protein powders, or even pet food, you need an FSSAI licence under the Food Safety and Standards Act, 2006. The type of licence depends on your annual turnover.

FSSAI Licence Types for D2C Food Brands

D2C food brands must also comply with the Food Safety and Standards (Packaging and Labelling) Regulations, 2011, which mandate nutritional information panels, allergen declarations, vegetarian/non-vegetarian symbols, FSSAI logo with licence number on packaging, and best-before dates. The 14-digit FSSAI licence number must appear on every product label and your website.

Step 5: Legal Metrology Act Compliance (Packaging and Labelling)

If you thought FSSAI labelling rules were only for food brands, the Legal Metrology Act has news for you: every pre-packaged product sold in India must comply with the Legal Metrology (Packaged Commodities) Rules, 2011, regardless of product category. Skincare, electronics, clothing, stationery, home decor, pet products: if it is packaged and sold, it falls under this Act.

Mandatory Label Declarations

Every D2C product package must display the following:

1. Name of the commodity: The product name as defined by applicable standards
2. Net quantity: In standard units (grams, millilitres, metres, or units count)
3. Maximum Retail Price (MRP): Inclusive of all taxes, preceded by "MRP ₹" or "Maximum Retail Price ₹"
4. Manufacturer/Packer name and address: Full registered address, not just a city name
5. Country of origin: Mandatory for imported products and products with imported components
6. Month and year of manufacture or packing: Must be legible and permanent
7. Customer care details: Phone number, email, or address for consumer complaints
8. Consumer complaints officer details: Name and contact information (for e-commerce, this can be on the website)

Step 6: Consumer Protection and E-Commerce Rules

The Consumer Protection (E-Commerce) Rules, 2020 were designed with D2C and marketplace brands in mind. These rules, issued under the Consumer Protection Act, 2019, impose specific obligations on every entity that conducts business through a "digital or electronic network." If you have a website with a "Buy Now" button, these rules apply to you.

Key Obligations Under E-Commerce Rules

• Entity disclosure: Display legal name, registered address, contact details, and Grievance Officer details prominently on the website
• Product information: Show total price (inclusive of taxes, delivery charges, handling fees), refund timeline, return policy, warranty/guarantee terms, and delivery estimate before checkout
• Grievance Officer: Appoint and prominently display the name, contact number, and email of a Grievance Officer who must acknowledge complaints within 48 hours and resolve them within 30 days
• Cancellation and return policy: Must be clearly visible before the consumer makes a purchase. Pre-ticked consent boxes for additional purchases are prohibited
• No manipulation: Sellers cannot manipulate product prices to create an artificial sense of urgency (e.g., fake "limited time offer" countdown timers that reset)
• Country of origin: Must be displayed for all products listed on the platform

The Consumer Protection Act, 2019 also enables consumers to file complaints online through the National Consumer Helpline against e-commerce entities. Complaints can be filed at the consumer's location (not the seller's), making it easier for buyers nationwide to take action against non-compliant D2C brands.

Step 7: Data Protection and Privacy (DPDP Act, 2023)

D2C brands collect customer data at every touchpoint: names and addresses during checkout, email IDs for newsletters, phone numbers for delivery updates, payment information through gateways, browsing behaviour through analytics scripts, and preferences through recommendation engines. The Digital Personal Data Protection Act, 2023 regulates how you collect, process, store, and delete this data.

DPDP Act Compliance Checklist for D2C Brands

1. Consent management: Obtain explicit, informed consent before collecting personal data. Pre-checked boxes and buried consent clauses are not valid consent under the DPDP Act
2. Privacy policy: Publish a clear, accessible privacy policy stating what data you collect, why you collect it, how long you retain it, and who you share it with. Avoid 15-page legal documents that nobody reads; the Act requires "clear and plain language"
3. Data minimisation: Collect only the data you actually need. If you are selling socks, you do not need a customer's date of birth
4. Right to erasure: Implement a mechanism for customers to request deletion of their personal data. You must comply unless retention is required by another law (e.g., tax records)
5. Breach notification: Report data breaches to the Data Protection Board and affected users within 72 hours
6. Children's data: If your D2C brand targets customers under 18 (kids' clothing, toys, etc.), verifiable parental consent is required before processing their data

Step 8: BIS Certification (Electronics and Consumer Goods)

D2C brands selling electronic products, IT accessories, or certain consumer goods in India must obtain BIS (Bureau of Indian Standards) certification. The Bureau of Indian Standards Act, 2016 and the Electronics and Information Technology Goods (Requirements for Compulsory Registration) Order, 2012 mandate that specific product categories cannot be sold in India without BIS registration.

Products Requiring BIS Certification

• Electronics: Mobile chargers, power banks, LED lights, batteries, adapters, cables, smart home devices
• IT products: Laptops, tablets, printers, scanners, monitors (under CRS scheme)
• Safety equipment: Helmets, gas cylinders, electrical appliances
• Household goods: Pressure cookers, water purifiers, microwave ovens
• Toys: All toys sold in India must carry the ISI mark under the Toys (Quality Control) Order, 2020

The BIS registration process involves submitting an application on the BIS portal, providing test reports from a BIS-recognised laboratory, and paying the application fee (₹1,000 per product plus testing charges of ₹10,000 to ₹50,000). Registration is valid for 2 years and must be renewed. Selling products without the mandatory BIS mark attracts a penalty up to ₹2 lakh plus imprisonment up to 2 years under the BIS Act, 2016.

Step 9: MSME Registration and Startup India Benefits

Two free registrations that most D2C founders overlook, despite offering tangible financial benefits: MSME (Udyam) registration and Startup India recognition. Neither costs a rupee to apply for, and both unlock benefits that directly impact your D2C brand's bottom line.

MSME/Udyam Registration Benefits for D2C

• Priority sector lending: Banks must allocate a portion of their lending to MSMEs, making loan approvals faster
• Interest subsidy: 3% interest subvention under the Credit Linked Capital Subsidy Scheme (CLCSS)
• GST reimbursement: Select states reimburse SGST for MSMEs (check your state's industrial policy)
• Trademark fee reduction: 50% discount on trademark filing (₹4,500 instead of ₹9,000) with Startup India recognition
• Payment protection: Buyers must pay MSMEs within 45 days under the MSMED Act, 2006. Interest at 3x bank rate applies on delayed payments
• Government e-marketplace access: Sell directly to government departments on the GeM portal

Startup India Benefits for D2C

• Tax exemption: 3-year income tax holiday under Section 80-IAC of the Income Tax Act, 1961 (must be approved by the Inter-Ministerial Board)
• Self-certification: Compliance self-certification for 9 labour laws and 3 environmental laws for 3 years
• Fund of Funds: Access to ₹10,000 crore corpus managed by SIDBI (via SEBI-registered AIFs that receive Fund of Funds capital)
• Patent fast-tracking: 80% rebate on patent filing fees and expedited examination

Eligibility: Pvt Ltd or LLP, under 10 years old, annual turnover below ₹100 crore, and working on an innovative product or process. Most D2C brands qualify comfortably.

Step 10: Payment Gateway and Digital Payment Compliance

Your D2C brand's revenue flows through a payment gateway. Whether you use Razorpay, Cashfree, PayU, or CCAvenue, the compliance obligations are shared between the gateway provider and your brand.

D2C Payment Compliance Requirements

• PCI-DSS compliance: Your payment gateway handles this, but you must not store card data on your servers. If your website captures card details before passing them to the gateway, you need your own PCI-DSS certification
• Two-factor authentication: RBI mandates 2FA (OTP or biometric) for all domestic card transactions. International cards are exempt but may require 3D Secure
• Refund timelines: RBI mandates that refunds for cancelled transactions be processed within 5 to 7 working days for digital payments and within 14 days for other modes
• Data localisation: All payment data must be stored within India as per RBI's April 2018 circular. Your payment gateway handles this, but verify with your provider
• Recurring payments: For subscription-based D2C models (meal kits, grooming boxes), RBI's framework for card-on-file (September 2021) requires explicit customer consent for each recurring charge above ₹15,000

Most D2C brands use third-party payment gateways that handle the technical compliance. Your responsibility is ensuring your website's checkout flow does not capture or store sensitive payment information, your refund policy matches RBI timelines, and your terms of service clearly explain how payment data is handled.

Complete D2C Compliance Checklist: Summary Table

Here is the master checklist. Print this, pin it to your wall, and check off each item before your first sale:

Common Compliance Mistakes D2C Founders Make

After working with hundreds of D2C brands, these are the mistakes we see on repeat. Every one is avoidable with a 30-minute compliance review before launch.

1. Launching Without GST Registration

The most common mistake. Founders assume the ₹20 lakh threshold applies and start selling. When a GST officer issues a notice, they discover the e-commerce exemption exclusion and face back-dated tax liability plus penalties. Register for GST before accepting your first order.

2. Ignoring Legal Metrology Labelling

Minimalist, Instagram-worthy packaging that omits the MRP, manufacturer address, or net quantity declaration. Legal Metrology officers do not care about your brand aesthetic; they care about compliance. Design beautiful packaging that also meets every labelling requirement.

3. Not Filing a Trademark Application Early

Founders spend ₹5 lakh building a brand identity and ₹0 on trademark registration. Then a competitor files the name, and the rebranding cost is 10x the original trademark fee. File the trademark application on the same day you register the company.

4. Skipping the Privacy Policy

A D2C website collecting emails, addresses, and payment data without a DPDP Act-compliant privacy policy is not just a regulatory risk; it is a trust signal failure. Customers, particularly post-COVID digital shoppers, check for privacy policies. Search engines and AI engines consider it an E-E-A-T signal.

5. Confusing GST Composition Scheme Eligibility

The GST Composition Scheme (1% to 6% flat rate, no ITC) is not available to e-commerce sellers under Section 10(2)(d) of the CGST Act. D2C brands selling online cannot opt for the Composition Scheme, even if their turnover is below ₹1.5 crore. This catches many first-time founders off guard.

Summary

Building a D2C brand in India is easier than it has ever been. The compliance part is not complicated; it is just comprehensive. Register a Private Limited Company, get your GST registration, file a trademark application, obtain product-specific licences (FSSAI, BIS as applicable), comply with the Legal Metrology Act and E-Commerce Rules, and implement basic data protection practices under the DPDP Act. Total cost: ₹15,000 to ₹50,000. Total time: 30 to 60 days. The compliance checklist above is your roadmap. Complete it before your first sale, and you will never have to deal with a surprise notice, a seized shipment, or a forced rebrand.