EU Withdrawal Button: The Deadline Has Already Passed

The deadline for EU Directive 2023/2673 was 19 June 2026. It is now July. If you sell to customers in the EU and you have not implemented a withdrawal button on your store, you are already non-compliant. This is not a future obligation to add to the roadmap. It is in force now.

What the Directive Actually Requires

The directive amends the EU Consumer Rights Directive and requires any online store selling to EU consumers to provide an electronic withdrawal function — a button or clearly labelled link — that customers can use to exercise their 14-day right to cancel a purchase directly from your website. It is more specific than it sounds.

• The button or link must be prominently displayed, visually distinct from standard navigation, and accessible throughout the entire 14-day withdrawal period
• It must trigger a two-step process: the customer confirms they want to withdraw, then provides their name, order details, and an email address for confirmation
• Once submitted, your store must automatically send a confirmation to the customer on a durable medium — email counts
• This applies to goods, services, and digital content, including subscriptions
• The function must be reachable without difficulty. Buried in a FAQ or behind a generic contact form does not meet the requirement.

The directive does not mandate an exact location on your site. An account page, order confirmation page, or dedicated returns page all work. But it must be easy to find, not something a customer has to go looking for.

The Penalty Most Merchants Haven't Thought About

The headline fine is up to 4% of annual turnover in some EU member states, and enforcement varies by country. Germany, which introduced an equivalent requirement (the Widerrufsbutton) back in 2022, has been active in enforcing it. That is a useful signal for how seriously the rest of the EU will approach this.

But the consequence with the biggest operational impact is less talked about. If your store does not provide the required withdrawal function, the standard 14-day cooling-off period automatically extends to 12 months and 14 days. Every EU customer who orders from your store while you are non-compliant can potentially cancel their purchase up to a year after buying. You have no legal ground to refuse.

If you haven't implemented the withdrawal button, your EU customers technically have 12 months and 14 days to cancel any order. Not 14 days. 12 months.

For anyone selling goods with seasonal relevance, perishables, or anything with complex fulfilment — that is a significant and very real exposure.

UK Merchants: You Are in Scope

The directive applies to any business selling online to EU consumers, regardless of where the business is based. If you are a UK brand shipping to Germany, France, the Netherlands, or anywhere else in the EU, this applies to you.

Post-Brexit, UK consumer law has its own framework and has not introduced an equivalent requirement yet. But that does not exempt you from EU rules when you are selling into EU markets. The GDPR situation is the obvious precedent here. UK businesses learned that lesson in 2018. This is the same principle.

What You Need to Do on Shopify

Shopify does not build this for you. The platform's guidance acknowledges the requirement but puts compliance squarely on the merchant. Your options:

• A third-party app: Tools built specifically for this directive (Rescindly is one) handle the two-step flow, data capture, and confirmation email automatically. This is the quickest path to compliance for most stores.
• Custom implementation: Add a form to your account page or order confirmation page that captures the required fields and triggers a confirmation email. Doable with a developer, but make sure the implementation genuinely meets the spec rather than approximating it.
• Check your existing returns app: If you use Loop, Returnly, or a similar returns management tool, check whether they have added withdrawal compliance. Some have, some have not — worth a direct check rather than assuming.

Whatever route you take, test it against the actual requirement: two steps, name and order details captured, confirmation email sent automatically and immediately. A generic 'contact us to cancel' page does not meet the bar.

The Throughline

I think this one has slipped under the radar for a lot of UK merchants because the framing has been 'EU regulation' and it's easy to assume post-Brexit that means someone else's problem. It isn't. If you have EU customers, you have EU obligations.

The 12-month cooling-off consequence is not theoretical. It is the kind of thing that surfaces in a customer dispute or a regulatory complaint, and at that point the fact that you were not aware of the directive is not a defence. The implementation is not particularly complex. A good developer or the right app gets this done in a day. The risk of leaving it unaddressed is not worth it.

If you want to talk through what compliance looks like for your specific store setup, we're happy to help.