What Your Website Must Say to Be Legal in Romania: Company Details, ANPC, Terms and Cookies in Plain Language

To be legal in Romania, a business website has to show who runs it (legal name, CUI tax code, Trade Register number, registered office, working contact details and, for an SRL, the share capital), carry the ANPC SAL badge linking to reclamatiisal.anpc.ro, have a privacy policy if it collects personal data, and ask for consent before loading any non-essential cookies. If you sell online, you also need proper terms with the 14-day right of withdrawal, an order button that makes clear the customer is agreeing to pay, and, since 19 June 2026, a visible "withdraw from contract" button.

That's the short version. Below is the checklist we use when we build or review a site, in plain language and updated for the 2026 changes (the SOL badge is gone and the withdrawal button is new). It isn't legal advice, and if you work in a regulated sector (pharmacy, alcohol, finance, medical) your sector has extra rules on top of these.

Quick overview: what applies to your site

1. Company details: the footer line that saves you

Anyone dealing with you online must be able to see, without digging, who they're dealing with. Two laws say so: the e-commerce law (Law 365/2002, art. 5) and the companies law (Law 31/1990, art. 74, which says the details on your invoices must also be on your website). The natural home for them is the footer, which shows on every page, plus a clear Contact page. Include:

• The full legal name, exactly as registered at the Trade Register (e.g. "Example Trading SRL", not just your brand)
• The Trade Register number (the "J" number)
• The unique registration code (CUI/CIF)
• The registered office: county, town, street, number, plus the address of the work point where you actually operate, if it's a different place
• The share capital if you're an SRL; an SA shows both subscribed and paid-up capital
• Contact details that actually work: an email address and a phone number, not only a form
• Permits and licences: if your activity needs an authorisation, ANPC Order 225/2023 asks you to show its series, number and issuer, in plain view before the customer places an order
• Professional details if you practise a regulated profession (lawyer, doctor, architect): your professional title, the professional body you belong to and the rules that apply to you

If you're a sole trader (PFA/II), the same logic applies: full name, CUI, registration number and address. The rule we work by: if an upset customer can't work out who you are in 10 seconds, you have a problem before ANPC ever shows up.

2. The ANPC SAL badge: what changed in 2026

A lot of sites still run on outdated information here. For years, Romanian commercial sites had to show two badges: SAL (alternative dispute resolution, run by ANPC) and SOL (the European Commission's online dispute resolution platform, known in English as ODR).

The EU platform no longer exists. Under Regulation (EU) 2024/3228 it stopped accepting complaints on 20 March 2025 and was abolished on 20 July 2025. Romania followed with ANPC Order 270/2026, published in the Official Gazette on 19 May 2026, which amends Order 449/2022, removes the SOL references and keeps a single SAL badge. If the old SOL link is still on your site, it points to a platform that has closed: take it out.

What the rules ask for now:

• The SAL pictogram at 250×50 pixels, which you download free from anpc.ro
• A working link on the badge to the national platform at reclamatiisal.anpc.ro. An image with no link isn't enough
• Placement: on the homepage. The original 2022 wording also named the menu bar, but since the 2023 amendment (ANPC Order 32/2023) the text only asks for the homepage. So a clearly visible badge in a footer that also shows on the homepage fits the wording
• Who it covers: merchants running sites for sales, online orders and/or advertising of products or services. So a presentation site that promotes what you sell to consumers is within scope, not just online shops. Merchants in sectors that have their own dispute resolution body, such as banking or insurance, are exempt from this order
• Physical premises: a shop or office open to the public also needs the SAL plaque, at least 16×16 cm, also free from ANPC

3. Privacy policy: the short GDPR part

GDPR deserves its own article, but one page is non-negotiable: if your site collects any personal data (a contact form, a newsletter sign-up, an order), you need a privacy policy. It says who collects the data, why and on what legal basis, how long you keep it, who you share it with, and what rights people have, including the right to complain to the data protection authority (ANSPDCP). Link it in the footer and next to every form. We cover what it must contain in our privacy policy guide.

4. Cookie policy and the banner: consent first, scripts second

Romania's Law 506/2004 only lets you store cookies on a visitor's device with their consent, except for what is strictly necessary to run the site or deliver a service they asked for. So if you use Google Analytics, the Meta (Facebook) pixel, embedded maps or embedded videos, you need:

• A consent banner that asks before those cookies are set, not one that just announces "we use cookies, OK?"
• A real way to refuse, ideally a "Refuse" button as visible as "Accept", not hidden on a second screen
• A Cookie Policy page that lists the cookies you use, what each one is for and how long it lasts
• A way to change your mind later, such as a "Cookie settings" link in the footer

The detail most people miss: if the banner shows up but the analytics script fires from the first second anyway, the banner is decoration, not compliance. In 2026 a bill to amend Law 506/2004 went before Parliament that would explicitly require an equally prominent "refuse all" option and ban pre-ticked boxes. The Senate rejected it in June 2026 and the Chamber of Deputies, which has the final vote, had not adopted it by early October 2026, so it isn't law. Building your banner that way today still costs nothing.

5. If you sell online: the extra rules for shops

This is where most of the legal work is. The core law is Government Emergency Ordinance (OUG) 34/2014 on consumer rights, alongside Law 365/2002 on e-commerce, and ANPC's 2026 good-practice guide for online commerce walks through the same points. In practice you need:

• Terms and conditions written for your shop, not copied from someone else's: who you are, prices with VAT shown, delivery costs, payment methods, delivery time (by law, no more than 30 days after the contract is concluded, unless you agreed otherwise), warranty and how complaints are handled, including the route to ANPC's SAL service. Customers must be able to save and print them.
• The 14-day right of withdrawal: the customer can cancel without giving a reason, and you refund within 14 days of being told. Say up front who pays for the return; if you don't, the cost is yours. List the legal exceptions that apply to you, such as made-to-measure products.
• A clear order button: it must make it explicit that placing the order means paying, for example "Order with obligation to pay" ("comandă ce implică o obligație de plată" in Romanian). The main features, the total price and any contract duration must be visible right before that button, and the customer must be able to review and correct the order before sending it.
• The withdrawal button, mandatory since 19 June 2026: OUG 18/2026 added a "withdrawal function" to OUG 34/2014. It must be labelled "withdraw from contract here" ("retrageți-vă din contract aici" in Romanian) or equally clear wording, and stay visible and easy to reach for the whole withdrawal period. The customer enters their name, the order details and where to send the confirmation, then submits it with a clearly labelled "confirm withdrawal" button. You then send, without undue delay, an acknowledgement on a durable medium, such as an email, with its content and the date and time. Not having it can be fined between 5,000 and 15,000 lei.
• Honest discounts: the "before" price you strike through must be the lowest price you charged in the 30 days before the reduction (Government Decision 947/2000, applied since 28 May 2022).
• Genuine reviews: if you show customer reviews, say whether and how you check that they come from real buyers, and never present fake or paid-for reviews as genuine.
• The 2-year legal guarantee for goods. Since 27 September 2026, the same OUG 18/2026 also requires shops to show the harmonised EU notice about this guarantee in a visible way, using the official EU design without changes.

We go deeper on the shop side in which legal pages an online store needs.

6. Language and accessibility

Two rules that English-language and foreign-owned sites often miss:

• Romanian language: if you sell to consumers in Romania, all information about the products and services you offer, and your contracts, including standard terms, must be written in Romanian (Government Ordinance 21/1992, art. 20). Other languages can sit alongside it, but an English-only shop aimed at Romanian buyers doesn't meet this rule.
• Accessibility: Law 232/2022, Romania's version of the European Accessibility Act, has covered e-commerce services to consumers since 28 June 2025. Microenterprises (fewer than 10 employees and an annual turnover or balance sheet total of no more than €2 million) are exempt for services. Above that size, your shop has to be usable by people who navigate with a keyboard or a screen reader.

What it costs to put things in order (and who does it)

You can do many of these yourself in an afternoon. The catch is that "an afternoon" often turns into three evenings hunting for templates on forums. When we build a site, basic compliance is part of the job from the start; we don't sell it as an add-on.

For a shop, where the legal stakes are highest (withdrawal, the new withdrawal button, SAL, detailed terms), the gap between "looks good" and "passes a check" is exactly the work we do.

For more context, see why your business needs a website and how much a website costs in Romania.

The 60-second checklist

Open your site now and check:

• Does the footer show the legal name, CUI, Trade Register number, registered office and, for an SRL, the share capital?
• Is the 250×50 SAL badge on the homepage, linking to reclamatiisal.anpc.ro, and is the old SOL link gone?
• Is there a privacy policy linked from every form?
• Does the cookie banner block analytics until someone clicks Accept, with a Refuse option that's just as easy?
• If you sell: real terms, clear 14-day withdrawal information, an "order with obligation to pay" button and a "withdraw from contract here" button?
• Do the email address and phone number in the footer actually reach someone?

If you ticked everything, you're in good shape. If not, it's usually a few hours of work, not a drama.

Let's check your site

We'll build you a free demo version of your site with the compliance part handled from the start: a correct footer, the SAL badge with the new link, and the structure for terms and cookies. You see it live, then you decide. Message us on WhatsApp: wa.me/40750257140.