Display store policies

You can surface links to your store policies—your terms and conditions, privacy policy, refund policy, shipping policy, and warranty policy—directly within Zonos Checkout, and require shoppers to agree to them before they can complete a purchase. A required consent checkbox with links to your policies appears on the payment step, and the shopper's acceptance is recorded as order metadata for your records.

This helps you meet your legal and compliance requirements and gives international shoppers confidence in your store.

How policies appear to shoppers 

Once you've turned on Require policy consent at checkout and added at least one policy URL, a consent checkbox is shown on the payment step of Checkout. The checkbox label links to each policy you've configured, and the policy links open in a new tab so shoppers don't lose their place in checkout. For example:

"I agree to [merchant name]'s Terms and conditions, Privacy policy, and Refund policy."

The shopper must check the box before they can:

• Pay with a card
• Pay with PayPal
• Place a staging (test mode) order

If a shopper tries to place the order without checking the box, payment is blocked and an inline error is shown:

"You must accept the policies to place this order."

Shoppers are asked to agree each time they open Checkout—if they close it and reopen it, they'll need to check the box again before they can pay.

Customize displayed policies 

To choose which policies appear to your shoppers and require consent for them:

1. Go to Dashboard → Settings → Checkout settings.
2. Find the Merchant policies section.
3. Turn on Require policy consent at checkout.
4. Add a URL for each policy you want to include. You can configure any combination of:
   • Terms and conditions
   • Privacy policy
   • Refund policy
   • Shipping policy
   • Warranty policy
5. Click Save.

A few things to keep in mind:

• Each URL must be a full, absolute link that starts with http:// or https://.
• At least one policy URL is required when policy consent is turned on.
• Leave a field blank to remove that policy from the consent prompt. Only the policies that have a valid URL are shown to shoppers.
• Turning off Require policy consent at checkout and saving clears all configured policy URLs and removes the consent prompt from Checkout.

How consent is recorded 

When a shopper agrees and places the order, their consent is recorded as order metadata under the key merchantPolicyConsent. You can retrieve it through the order on the checkout session:

query getPolicyConsent {
  checkoutSession(id: "checkout_session_...") {
    order {
      metadata {
        key
        value
      }
    }
  }
}

The merchantPolicyConsent entry's value is a JSON-encoded string. Parsed, it captures:

• acceptedAt — an ISO timestamp of the moment the shopper accepted.
• locale — the language/locale the shopper saw the policies in.
• policies — a map of each policy that was shown to the exact URL the shopper agreed to.

{
  "acceptedAt": "2026-06-03T17:42:08.123Z",
  "locale": "en-US",
  "policies": {
    "termsAndConditions": "https://example.com/terms",
    "privacyPolicy": "https://example.com/privacy",
    "refundPolicy": "https://example.com/refunds"
  }
}

Supported policies 

• Terms and conditions
• Privacy policy
• Refund policy
• Shipping policy
• Warranty policy