What the law says about shopping online