Sector guide · E-commerce & retail
What buyers pay a premium for in an online business sale
Across every online business sale, the same five qualities separate businesses that attract multiple offers from businesses that sit on the market..
Nothing on this page is legal, financial or taxation advice. Free confidential appraisal, no cost and no obligation. Last updated 15 September 2026.
Get my free appraisal, in writingCall 0431 124 128
No obligation. Nothing is published. Nobody is contacted.
What buyers pay a premium for in an online business sale
Across every online business sale, the same five qualities separate businesses that attract multiple offers from businesses that sit on the market. Each one is buildable inside 12 to 24 months.
Financials a buyer's accountant can verify in a week
Business and personal spending fully separated. Revenue in the accounts reconciling to Shopify, Amazon and payment gateway reports. A clean set of add backs: the legitimate normalisation adjustments for owner salary, one off costs and personal expenses that establish the true earnings of the business. Documented, defensible add backs directly increase the earnings figure your price is calculated from. Undocumented ones get struck out in due diligence and take price with them.
Revenue the buyer keeps after you leave
Repeat purchase behaviour, subscription programs, reorder cycles and a strong owned database all tell a buyer the revenue survives the handover. So does branded search volume: people typing your brand name into Google are customers the business owns, not customers the algorithm lends you.
An operation that runs without you
If you personally run the ads, source the stock, answer the tickets and pack the orders, a buyer is not purchasing a business, they are applying for your job, and they will price it like a job. Documented SOPs, a VA or small team holding the daily workload, a 3PL or systemised fulfilment process, and agency or freelancer relationships that transfer all shift value from your head into the asset being sold.
Traffic that survives an algorithm change
A store living entirely off one Meta ad account is one policy change away from a crisis, and buyers know it because they have watched it happen. A healthy mix of organic search, email, paid and marketplace revenue does not need to be evenly balanced. It needs to prove the business is resilient enough that no single platform decision can gut it.
Everything transfers cleanly
Shopify store ownership, the Amazon Seller Central account, Meta Business Manager and ad accounts, the domain, trademarks, supplier agreements, the customer database and review profiles all need to move to a new owner without drama. Buyers have walked away from otherwise excellent businesses because a critical account sat in a founder's personal name and could not be assigned, or because the hero product's supply rested on a handshake with one overseas factory.
Marketing consent does not simply follow the customer list to a new owner
Handing over the database and handing over the right to email it are two different transactions. They are governed by two different statutes, and the answer to one does not settle the other. Generic sale guides treat the email list as an asset that arrives at settlement with its permissions attached. The Spam Act 2003 (Cth) does not work that way.
The ACMA’s published position on acquired lists puts the responsibility on the sender rather than the source. The ACMA states that you are still responsible for making sure you have consent for any addresses you use. The buyer sending the first campaign after settlement is the sender, and the buyer carries the compliance risk for every address on the file.
What decides whether that risk is real is the wording you used when you captured the consent. The ACMA Statement of Expectations on the use of consent states that consent terms should cover who will use it, including affiliates and partners. A list built on wording that names only your trading entity is materially weaker than a list whose terms contemplated affiliates, partners or successors. That is a diligence item with a direct price consequence, and it is why you check the signup wording before you go to market rather than after a buyer’s lawyer reads it.
The Statement of Expectations adds three further constraints that bear on a sale. Do not place contact details on marketing lists or marketing databases without consent. Do not use consent that is old, where a consumer would not expect it to still apply. The ACMA gives the example that consent to receive telemarketing more than 3 months old becomes stale, unless the consumer agreed to a longer period under terms and conditions. Do not use bundled consent, being a single request for consent covering multiple purposes without allowing a choice about each purpose. The ACMA also states that businesses are responsible for their consent related compliance obligations regardless of whether they outsource marketing or consent gathering through third party or affiliate arrangements, and that obligations under the spam and telemarketing laws cannot be outsourced.
One honest limitation. I could not locate an ACMA page that addresses the sale of a business directly. The verified statements are that responsibility sits with the sender for any addresses used, and that consent terms should disclose who will use the data including affiliates and partners. The conclusion above applies those published expectations to a sale. Have your solicitor confirm the position against your own consent records before you warrant anything about the list in a contract.
What the Privacy Act allows you to hand over, before and after settlement
The Privacy Act 1988 (Cth) answers a different question from the Spam Act. The Spam Act asks whether the buyer may send. The Privacy Act asks whether the file may change hands at all. The OAIC publishes guidance specifically on selling a business, and it states that the Privacy Act does not specifically address business sales but applies to Australian Privacy Principle entities handling personal information during the transaction.
During due diligence, the OAIC states that a vendor should only provide a prospective purchaser with personal information if the provision of that information is consistent with the vendor’s obligations. The OAIC’s view is that this disclosure will usually fail the Australian Privacy Principle 6 test, because the use or disclosure for the purpose of a sale is unlikely to be related to the purpose for which the information was collected. On customer lists specifically, the OAIC states that when providing information about its customer base, a vendor should avoid providing a prospective purchaser with the names and other identifiers of its customers, and that aggregated statistical customer information may be provided. Where information cannot be de-identified and consent is not available, the OAIC states that the vendor should generally avoid giving the information to the prospective purchaser.
Obligations run on the buyer’s side too. The OAIC expects a prospective purchaser to comply with privacy clauses included in the confidentiality agreement and to follow the Australian Privacy Principles, and states that after due diligence the purchaser should either destroy or return the personal information they collected. Write that destruction or return obligation into the confidentiality agreement before the data room opens, not into the sale contract afterwards.
There is a sting for anyone relying on the small business exemption. Trading in personal information without the required consent is a listed exception that removes the exemption regardless of turnover. Structuring the deal so that the customer database is sold as a distinct asset is the conduct that raises it. Where the marketing list is genuinely valuable, that is one more reason a share sale, which moves the entity rather than the data, is worth modelling against an asset sale before you commit to a structure.
What you can safely give a buyer is a full commercial picture without a single customer name. Cohort tables by first purchase month, repeat purchase rate stated with its window, average order value, contribution margin by channel, subscriber counts, open and click rates, unsubscribe rate, list growth by month, and the exact consent wording used at each capture point. That last item is the one a serious buyer will ask for, and having it ready is worth more than the file itself.
Ask what it is worth
Free, in writing, and nobody finds out you asked. Tell me the trade and the suburb and I will do the rest.
Nobody finds out you are selling. This goes to me only, into my own database in Sydney. I will not contact your accountant, your landlord, your bank or your staff, ever, unless you ask me to.
If you would rather not put anything in writing yet, ring 0431 124 128. Prefer to pick a time yourself? Book a time in my diary.
Find out what your online business is worth
Thirty minutes, on the phone or in person, at a time that suits you including evenings. You will get a straight read on where the business sits today and what would move the number. It costs nothing, there is no obligation, and nobody finds out you asked.