Right of Withdrawal in WooCommerce: What EU Law Requires from Your Store

The EU right of withdrawal has been part of online selling for years. Most WooCommerce store owners already handle it informally, through support tickets, email refund requests, and manual order cancellations.

What changed on June 19, 2026, is not the right itself, but how customers must be able to use it. A policy page in your footer is no longer enough. Your store now needs a functioning digital withdrawal button built into the order flow and accessible to every customer.

In this blog post, we will explain everything you need to know about the EU Right to Withdrawal law and its requirements.

The right of withdrawal gives EU consumers the legal right to cancel a purchase made online or at a distance, with no reason required and no penalty charged, within a set cooling-off period.

The standard window is 14 calendar days. Weekends count. Public holidays count. The clock starts differently depending on what was purchased:

• Physical goods: 14 days from the day the customer receives the item
• Services: 14 days from the day the contract was concluded
• Digital content: 14 days from the date of purchase, unless the customer explicitly consented to immediate delivery and waived the right to upfront payment

During this window, a customer can simply change their mind. They don’t owe you an explanation. They don’t pay a fee. The only cost they may incur is return shipping, provided you informed them of this before the purchase was completed.

This right applies to distance contracts: purchases made online, by phone, or by mail order. It does not apply to in-store purchases.

Don’t confuse it with your refund policy (which is your own rules, above the legal baseline), warranty (which covers defective products), or a returns process (which is the logistics of sending goods back). The right of withdrawal is a legal floor that applies regardless of your store policy.

Almost certainly yes, if you sell to EU consumers, regardless of where your business is based.

You’re in scope if:

• You operate a WooCommerce store that sells physical goods, digital services, or subscriptions to customers located in any of the 27 EU member states
• Your business is based outside the EU, but your online store actively targets EU customers

That last point catches many store owners off guard. A store based in the US, UK, India, or Australia that sells to customers in Germany or France is subject to this requirement. The consumer’s location is what determines applicability, not where your business is registered.

You’re out of scope if:

• Your store is B2B only, selling exclusively to registered businesses, not individual consumers
• All your transactions happen in person (brick-and-mortar only)

Platform doesn’t matter. Store size doesn’t matter. The rule applies the same way whether you’re running a 10-product WooCommerce store or a 50,000-SKU operation.

The right of withdrawal doesn’t apply to all product types. If your store sells any of the following, the 14-day cooling-off period doesn’t apply to those items — but you still need to inform customers of the exemption before they purchase.

Products and services excluded from the right of withdrawal:

• Perishable goods, like food, flowers, and anything that deteriorates quickly
• Personalized or custom-made products and items are produced to a specific customer’s specification
• Sealed goods that can’t be returned for hygiene reasons, once opened, like cosmetics, underwear, for example
• Digital content where the customer consented to immediate delivery and acknowledged losing the withdrawal right before purchase
• Services that have been fully performed before the 14 days elapsed, where the customer requested and consented to this
• Travel, hotel bookings, car rentals, event tickets, and similar time-specific services

For WooCommerce stores selling downloadable products, you can legally exclude them from the withdrawal flow, provided you obtain the customer’s prior consent at checkout. This can be configured as a product exclusion in your withdrawal settings.

If your store sells a mix of physical goods and downloads in the same order, partial withdrawal (covering only the physical items) becomes relevant. More on that below.

When in doubt about a specific product type, check with a legal advisor familiar with the relevant member state’s transposition of the directive, some countries apply stricter rules on top of the EU baseline.

The right of withdrawal itself isn’t new. The Consumer Rights Directive (2011/83/EU) has required it for over a decade. What EU Directive 2023/2673 introduced is a new requirement for how customers must exercise it.

The old standard: inform customers of their right to withdraw, provide a model withdrawal form, and make it available on your site. Most stores did this with a PDF link or a clause in their T&Cs.

The new standard: if a customer can conclude a contract through your online interface, they must also be able to withdraw from it through the same interface. The principle is direct — canceling should be as easy as buying.

This is now codified in Article 11a of Directive 2011/83/EU (as amended by Directive 2023/2673). It applies to all online consumer contracts where a statutory right of withdrawal exists — not just financial services contracts, which were the directive’s original focus.

What the withdrawal function must do:

• Be clearly labeled with wording like “withdraw from contract here” or an unambiguous equivalent — the directive is specific about this
• Be continuously available throughout the entire withdrawal period, not only at certain stages of the order flow
• Be prominently displayed and easy to find without unnecessary hurdles
• Allow the customer to identify which contract (or which specific items, in a partial withdrawal) they want to withdraw from
• Walk the customer through a two-step process: a withdrawal statement followed by a clearly labeled “confirm withdrawal” button
• Send the customer an acknowledgment of receipt immediately after submission, on a durable medium such as email, including the date and time of submission

One thing the directive is explicit about: if a customer is already logged into their account, you cannot require them to re-identify themselves to access the withdrawal function. No extra login screens, no verification walls.

The 14-day window isn’t fixed if you don’t provide the required information.

Under the directive, if you fail to inform a customer about their right of withdrawal — or fail to provide the required pre-contractual information — the withdrawal period extends to 12 months and 14 days from the date the contract was concluded. And if the customer was never informed about the right at all, the withdrawal period has no expiry.

That means a customer could legitimately withdraw from a purchase made over a year ago if your store never gave them the required information at the time.

For WooCommerce store owners, this is why the technical setup matters beyond just avoiding fines. Having a visible withdrawal button, a dedicated withdrawal page, a footer link, and confirmation emails all create a documented trail that you met your disclosure obligations. It’s protection for the store, not just for the customer.

Here’s what a WooCommerce store needs to have in place to meet the directive’s requirements.

1. The withdrawal button on the orders page

Customers need to see a “Request Withdrawal” button directly on the My Account orders list. The button should only appear for eligible orders — ones that fall within the active withdrawal period and contain withdrawable product types.

2. A withdrawal request form

When a customer clicks the button, they should be taken to a form where they can:

• Select the specific order (pre-populated if coming from the orders page)
• Choose which items to withdraw — the full order or individual products (partial withdrawal)
• Confirm their name and email
• Optionally provide a reason (you can make this required or optional in settings)

3. A two-step confirmation flow

After filling out the form, the customer should see a confirmation step before the request is submitted. This satisfies the directive’s requirement for a distinct “confirm withdrawal” action and prevents accidental submissions.

4. An acknowledgment email

Once submitted, the customer must receive a confirmation email that includes the content of their withdrawal statement and the date and time of submission. This is the “durable medium” receipt the directive requires.

5. Footer link to the withdrawal page

The withdrawal function needs to be easy to find. A link in your store footer pointing to the withdrawal page is the standard way to meet the visibility requirement. The link text should be clear — “Request Withdrawal” or similar.

6. Admin dashboard to manage requests

On your end, you need a way to review incoming withdrawal requests, see their status (pending, approved, rejected), and take action. Each request should show the order details, customer information, request type, and a full activity log.

Building everything described above from scratch means custom development, edge case handling, and ongoing maintenance. The EU Withdrawal Button for WooCommerce plugin by WebToffee handles all of it out of the box, with no coding required.

This Order Withdrawal button plugin adds a withdrawal button directly to the customer’s My Account orders page, walks them through a two-step confirmation flow, and sends an acknowledgment email the moment the request is submitted. It also supports partial withdrawals, so customers can withdraw individual items from a mixed order without canceling everything.

On the admin side, all requests land in a dedicated dashboard under WooCommerce → Withdrawals, where you can filter, review, and approve or reject with one click. Once installed, configure your preferences, publish the auto-created withdrawal page, and your store is compliant.

Key features:

• Withdrawal button on the My Account orders page
• Partial withdrawal support for individual items
• Two-step confirmation flow
• Acknowledgment email with timestamp
• Configurable withdrawal period (2, 7, 14, or 30 days)
• Product exclusions for digital downloads and exempt items
• Automatic footer link for visibility compliance
• Admin dashboard with one-click approve or reject

The enforcement picture depends on which member state your customers are in, since each EU country transposes the directive into national law. But the direction is consistent across the bloc.

Germany, one of the first countries to implement the directive, gives you a clear benchmark. Non-compliance can result in:

• Cease-and-desist actions under the unfair trade practices law
• Fines of up to €2 million or 4% of annual turnover, whichever is higher

Beyond fines, there’s a practical operational risk. A customer who can’t find a digital way to withdraw their order may file a complaint with their national consumer protection authority, raise a chargeback with their payment provider, or contact the European Consumer Center in their country. For smaller WooCommerce stores, a chargeback dispute or a negative consumer authority investigation causes more immediate damage than a fine.

There’s also the extended withdrawal period risk covered above. A store that never implemented the withdrawal function and never properly disclosed the right could find itself facing valid withdrawal requests from purchases made well beyond the standard 14-day window.

Does the right of withdrawal apply to digital products?

Generally no, provided you obtained the customer’s prior consent to immediate delivery and explicitly informed them they were waiving their withdrawal right before the purchase was completed. If you didn’t capture that consent, the standard 14-day right applies.

My store is based in the UK. Do I still need to comply?

If your WooCommerce store actively sells to customers in EU member states, yes. The UK has its own consumer contract regulations post-Brexit, but EU Directive 2023/2673 applies based on where your customers are located, not where your business is incorporated.

Can I charge a restocking fee or handling charge for withdrawals?

No. The directive explicitly prohibits penalties on the customer for exercising the right of withdrawal. The only permitted deduction is a proportional charge for services already provided, and only if the customer was informed of this amount before the contract was concluded.

How quickly do I need to process the refund?

Within 14 calendar days of receiving the withdrawal notification. The refund must cover the full purchase price, including standard delivery costs. You can withhold the refund until you receive the goods back or the customer provides proof of return shipment.

What if a customer tries to withdraw after the 14-day window?

If your store properly disclosed the right of withdrawal and met all pre-contractual information requirements, you’re not obligated to accept late withdrawal requests. The key phrase is “properly disclosed,” which is why having the withdrawal button visible, the page published, and the confirmation email going out creates that record.

The EU’s updated right of withdrawal requirements make one thing clear: compliance is no longer just about publishing a policy page. If your WooCommerce store sells to EU customers, you now need a visible, functional withdrawal flow that customers can access directly from your website.

While the new rules may sound technical, the goal is straightforward: give customers a simple, transparent way to exercise their rights. For WooCommerce store owners, implementing a proper withdrawal system not only helps avoid compliance risks and extended withdrawal periods but also builds trust with customers by making the post-purchase experience more transparent.

The good news is that once the right setup is in place, including a withdrawal button, request form, confirmation flow, and acknowledgment emails, ongoing compliance becomes much easier to manage. Whether you sell physical products, digital downloads, or subscriptions, now is the right time to review your store’s withdrawal process and ensure it meets the latest EU requirements.