Blog · Compliance
Compliance
on the BackToMe blog.
Legal news, decree breakdowns, practical guides and field notes to navigate the withdrawal button obligation in force since 19 June 2026. Written by Anis Mokadym, founder of BackToMe.
5 articles
Very small businesses and the withdrawal button: no exemption
Many sole traders and small workshops hope for some leniency for small structures. EU law provides none: the withdrawal button obligation (Directive (EU) 2023/2673) applies with no turnover threshold and no minimum number of orders. Here is what that means in practice when you sell on a small scale.
How long must you keep proof of withdrawal?
A withdrawal request can be proved, but for how long must you keep that proof? The answer comes down to the limitation period and evidential value, in tension with GDPR minimisation. What to keep, and for how long.
Withdrawal button: 7 points to check compliance
Installing a button is not enough: it must also meet the EU requirements (permanent visibility, free of charge, unambiguous label, acknowledgement of receipt on a durable medium). The checklist to audit your own button in five minutes.
GDPR and withdrawal: what to do with the form data?
The withdrawal button collects personal data: name, email, order reference, timestamp. What legal basis, what data to collect, how long to keep it, how to reconcile archiving the proof with the right to erasure. The GDPR point that many forget.
Withdrawal acknowledgement: why the screen is not enough
EU law requires you to acknowledge receipt of the withdrawal on a 'durable medium'. A 'your request has been sent' message shown on screen is not one. What the notion of durable medium really covers, what European case law says about email, and the proof you must be able to produce.