Running financial due diligence on a retail acquisition target

# Running financial due diligence on a retail acquisition target

A private equity associate opens the data room for a 140-store apparel chain and finds something the seller's investment banker didn't highlight: $180 million in off-balance-sheet lease commitments, a single supplier providing 40% of inventory, and an unresolved card-network chargeback dispute worth $6 million. None of that showed up in the headline EBITDAEBITDAEBITDA (Earnings Before Interest, Taxes, Depreciation, and Amortization) measures a company's operating profitability before financing and accounting decisions, used to compare core performance across firms.Voir la définition complète → multiple. All of it changes the price.

This is the reality of retail financial due diligence (DD): the risks that move valuation are rarely in the income statement. They're buried in leases, supplier contracts, payment processing terms, and compliance files.

Why retail DD is different

Retail businesses look simple (sell goods, collect cash) but carry structural risks that other sectors don't:

• Heavy fixed lease obligations tied to physical stores
• Concentrated supplier and logistics dependencies
• High-volume card transactions exposed to chargeback and fraud rules
• Multi-jurisdiction consumer protection and labor regulation

A generic M&A checklist (revenue quality, working capitalworking capitalWorking capital is the difference between a company's current assets and current liabilities, measuring short-term liquidity and the funds available to run daily operations.Voir la définition complète →, debt schedule) misses all four. A retail-specific DD process has to test them explicitly.

Red flag 1: lease liabilities

Since ASC 842 (US GAAP lease accounting standard, effective for most companies since 2019) and IFRS 16 (the equivalent international standard, effective 2019), operating leases must appear on the balance sheet as a "right-of-use asset" and a corresponding lease liability. This closed the old loophole where retailers kept billions in store leases off-balance-sheet.

But DD still needs to go deeper than the balance sheet number:

• Lease term vs. store performance: A 10-year lease on a declining-sales location is a liability the buyer inherits, not an asset.
• Renewal options and escalators: Many US retail leases include annual rent escalators (commonly 2 to 4%, as an estimate) that compound over a decade.
• Change-of-control clauses: Some landlords can terminate or renegotiate leases when ownership changes. This is critical in a buyout and often missed.
• Percentage rent: Common in shopping malls, where rent scales with store sales, meaning a rent bill can rise even without a lease renewal.

Worked example: Target has 140 stores, average annual rent $220,000, average remaining term 6 years, no early termination rights.

Total remaining fixed lease liability ≈ 140 × $220,000 × 6 = $184.8 million.

If 20 of those stores are loss-making and locked in for the full term, that's a genuine liability a buyer should price into the deal, not just a note in the appendix.

Red flag 2: supplier concentration

Retail margins depend on supply chain terms. DD should quantify:

• % of cost of goods sold (COGS) from top 3 suppliers. Above 30 to 40% (a common informal threshold used by DD teams) signals pricing power risk.
• Payment terms drift. If days payable outstanding (DPO) has been quietly extended to prop up cash flow, that's a working capitalworking capitalWorking capital is the difference between a company's current assets and current liabilities, measuring short-term liquidity and the funds available to run daily operations.Voir la définition complète → risk that reverses post-close.
• Exclusive or single-source contracts. A private-label supplier relationship without a backup manufacturer is a single point of failure.

A useful public reference for benchmarking supply chain and working capitalworking capitalWorking capital is the difference between a company's current assets and current liabilities, measuring short-term liquidity and the funds available to run daily operations.Voir la définition complète → norms is CFI's guide to working capital metrics, which is free and retailer-relevant.

Red flag 3: chargeback and payment exposure

Retailers processing card payments operate under rules set by the card networks (Visa, Mastercard) and, in the US, oversight touching the Durbin Amendment (part of the Dodd-Frank Act, which regulates debit card interchange fees) and PCI DSS (Payment Card Industry Data Security Standard, a private-sector security requirement for handling card data, not a government law but contractually mandatory).

Chargebacks (customer-initiated payment reversals, often for fraud or disputed transactions) matter in DD because:

• High chargeback ratios (commonly a red flag above 1% of transaction volume, per card network guidelines) can trigger network fines or processor account termination.
• E-commerce and BNPL (buy-now-pay-later) heavy retailers carry higher chargeback exposure than in-store-only chains.
• A pending processor dispute is a contingent liability that should be escrowed or price-adjusted, not ignored.

Check to run: pull 24 months of chargeback data by channel, and confirm no processor has issued a warning notice or reserve requirement. A processor holding a rolling reserve (withholding a percentage of sales pending dispute resolution) is a real cash flow drag that reduces the target's usable working capitalworking capitalWorking capital is the difference between a company's current assets and current liabilities, measuring short-term liquidity and the funds available to run daily operations.Voir la définition complète →.

Red flag 4: regulatory fines and compliance exposure

Retail regulation spans several bodies depending on geography:

• FTC (Federal Trade Commission) in the US: enforces advertising, pricing, and data privacy rules.
• CFPB (Consumer Financial Protection Bureau) in the US: relevant if the target offers store credit, financing, or BNPL products.
• CMA (Competition and Markets Authority) in the UK and European Commission DG COMP in the EU: enforce competition law and consumer protection, including the EU's Unfair Commercial Practices Directive.
• GDPR (General Data Protection Regulation) in the EU/UK: fines for mishandled customer loyaltycustomer loyaltyYour customers' propensity to repeatedly purchase from you and resist competitive offers, driven by satisfaction, habit, trust, and switching costs.Voir la définition complète → or payment data can reachreachThe number of unique people exposed to your message in a given period. Unlike impressions, reach counts each person once, no matter how often they see it. up to 4% of global annual turnover.

DD should request:

1. All regulatory correspondence and consent decrees from the past 5 years.

2. Any pending class actions (common in US retail around labor classification or accessibility, e.g. ADA, Americans with Disabilities Act, website compliance suits).

3. Data breach history and associated notification costs, since breach remediation in the US commonly runs into millions once notification, credit monitoring, and legal costs are included (estimate, varies widely by breach size).

Unresolved fines or open investigations should be treated as a holdback (a portion of purchase price withheld in escrow) rather than assumed away.

Building the DD checklist

A workable retail financial DD checklist condenses to five modules:

| Module | Core Question | Typical Data Requested |

|---|---|---|

| Lease liability | What are total fixed and contingent rent obligations? | Lease schedule, escalators, change-of-control clauses |

| Supplier concentration | How dependent is COGS on few vendors? | Top 10 supplier list, contract terms, DPO trend |

| Payment/chargeback | What is contingent processor liability? | 24-month chargeback data, processor agreements, reserve balances |

| Regulatory exposure | What fines or suits are open or probable? | Correspondence with regulators, litigation log, breach history |

| Working capitalWorking capitalWorking capital is the difference between a company's current assets and current liabilities, measuring short-term liquidity and the funds available to run daily operations.Voir la définition complète → quality | Is cash flow real or manufactured pre-sale? | Inventory aging, DPO/DSO trend, return reserves |

Each red flag should map to a