The 30 terms of the right of withdrawal, defined and sourced.

Right of withdrawal

Also: withdrawal, to withdraw, product return

The right of withdrawal lets a consumer cancel a distance purchase within 14 calendar days, with no reason and no penalty. Harmonised across the 27 EU member states by the Consumer Rights Directive (2011/83/EU), it applies to contracts concluded at a distance or off-premises, except for the cases listed in art. 16 of that directive.

The right of withdrawal is a mandatory consumer protection harmonised by the Consumer Rights Directive (2011/83/EU). It allows any natural person acting for non-professional purposes (a "consumer") to change their mind about a purchase without having to give a reason or bear any cost other than the return costs (art. 14). The period is 14 calendar days running, for goods, from physical delivery (or from the last item where there are several deliveries), and for services, from the conclusion of the contract. Since 19 June 2026, Directive (EU) 2023/2673 requires traders to offer a permanent digital function for exercising this right. Where the pre-contractual information does not comply, the period is automatically extended to 12 months and 14 days (Directive 2011/83/EU, art. 10). The trader then has 14 days from receipt of the request to refund the consumer using the same means of payment, except for goods: the trader may withhold the refund until the goods are recovered or proof of their dispatch is provided (art. 13).

Withdrawal period

Also: 14 days, legal period, withdrawal window

The withdrawal period is 14 calendar days, harmonised across the EU by the Consumer Rights Directive (2011/83/EU). It starts running on delivery of the goods, or on the conclusion of the contract for services. Where the pre-contractual information obligation is breached, this period is automatically extended to 12 months and 14 days (Directive 2011/83/EU, art. 10).

The withdrawal period is set by the Consumer Rights Directive (2011/83/EU): 14 calendar days (not working days), including Saturdays, Sundays and public holidays. The starting point varies with the nature of the contract: for goods, it runs from physical delivery to the consumer or to a third party designated by them; for services and digital content, from the conclusion of the contract. Where there are multiple or staggered deliveries, the period starts on the last delivery. To exercise the right, the consumer must send the request BEFORE the period expires (date of sending, not date of receipt). If compliant information on this right is not given (Directive 2011/83/EU, art. 6), the period is automatically extended to 12 months and 14 days (art. 10): a sale then remains challengeable for more than a year. This is one of the major legal risks for non-compliant traders.

Withdrawal button

Also: withdrawal function, withdraw button

The withdrawal button is the digital function that has been mandatory since 19 June 2026 across the 27 EU member states, under Directive (EU) 2023/2673, for every trader selling at a distance to individuals. It must let the consumer exercise their right of withdrawal free of charge, from any page of the site, with an unambiguous label ("Withdraw from the contract") and generate an acknowledgement of receipt on a durable medium.

The withdrawal button is the concrete expression of the online "function" required by Directive (EU) 2023/2673 (which inserts art. 11a into the Consumer Rights Directive 2011/83/EU). Six cumulative criteria apply: (1) permanent accessibility, the button must be present on every page of the site or via a constant entry point (header, footer, customer account area); (2) free of charge, no direct or indirect cost (account creation, subscription) may be required, and guest customers must be able to use it without logging in; (3) unambiguous label, the wording "Withdraw from the contract" (or "Withdraw from the contract here") is recommended; "Cancel", "Return" or "Contact" are not enough and would be held inadmissible by the courts; (4) two-click procedure, a first click to a form, a second click on a "Confirm withdrawal" button that gives effect to the consumer's intention; (5) acknowledgement of receipt on a durable medium, an automatic email with a timestamp, reference number and summary of the request, kept by the consumer; (6) immediate transmission to the trader, with no queue or manual validation. The button applies to all online sellers in the EU targeting consumers (B2C), regardless of turnover, size or legal form of the business. Non-compliance exposes the trader to a fine set by the national regulator (in Ireland, the CCPC, up to €60,000, and up to 4% of turnover for widespread infringements under the Omnibus Directive (EU) 2019/2161) and to the extension of the withdrawal period to 12 months and 14 days on all sales (Directive 2011/83/EU, art. 10).

Exercise of withdrawal & the online function (art. 11 / 11a, Directive 2011/83/EU)

Also: art. 11a, online withdrawal function, Directive 2011/83/EU

Article 11 of the Consumer Rights Directive (2011/83/EU) governs how the consumer exercises the right of withdrawal for distance contracts. As amended by Directive (EU) 2023/2673, which inserts art. 11a, it requires the trader, since 19 June 2026, to provide the consumer with a dedicated online function for exercising the right of withdrawal free of charge, across all 27 EU member states.

Article 11 of the Consumer Rights Directive is the legal basis for exercising withdrawal: the consumer may use the model form or make "any other unambiguous statement expressing their wish to withdraw". Directive (EU) 2023/2673 inserts art. 11a, requiring traders operating an online interface (e-commerce site, mobile app, marketplace) to provide an "online function for exercising the right of withdrawal" that is permanent, free of charge, identifiable by an unequivocal label, and guarantees the transmission of a timestamped request. The precise technical arrangements (label, accessibility, acknowledgement of receipt) are set out in each member state's national implementing measure. The obligation applies from 19 June 2026 for all existing interfaces. Breach is punishable by a fine imposed by the national regulator (in Ireland, the CCPC) and triggers the extension of the period to 12 months and 14 days (art. 10).

Extended withdrawal period (art. 10, Directive 2011/83/EU)

Also: extended withdrawal period, extension of the period, 12 months and 14 days

Article 10 of the Consumer Rights Directive (2011/83/EU) automatically extends the withdrawal period to 12 months and 14 days where the information about this right has not been given to the consumer as required. This extension is automatic: no formal notice, no procedure. For the trader, it means that every sale remains challengeable for more than a year.

This civil consequence must be distinguished from the administrative sanction (a fine from the national regulator): the first lengthens the withdrawal period, the second imposes a fine; they are cumulative. The exposure is concrete: every order concluded without compliant information remains cancellable for more than a year, which destabilises accounting and stock management. Since 19 June 2026, the absence of the online withdrawal function (Directive (EU) 2023/2673) constitutes a typical information failure that triggers the extension. The good news: the extension is cleared. As soon as the trader supplies the missing information, or puts the compliant button in place, a fresh 14-day period runs from that remedial step.

Exceptions to the right of withdrawal (art. 16, Directive 2011/83/EU)

Also: art. 16, withdrawal exceptions, excluded cases, made to measure

Article 16 of the Consumer Rights Directive (2011/83/EU) lists the cases in which the right of withdrawal does not apply: goods made to measure, perishable goods, digital content downloaded with express consent, fully performed services, sealed goods that cannot be returned for reasons of hygiene, accommodation and transport for a fixed date, and others. The precise classification is delicate and warrants legal advice.

Article 16 of the Consumer Rights Directive lists the cases in which the right of withdrawal is excluded, including: services fully performed before the end of the period with the consumer's prior express consent and acknowledgement that they lose their right of withdrawal; goods whose price depends on fluctuations in the financial market; goods made to the consumer's specifications or clearly personalised; goods liable to deteriorate or expire quickly; sealed goods that cannot be returned for reasons of hygiene or health protection and that were unsealed after delivery; goods which, after delivery and by their nature, are inseparably mixed with other items; alcoholic drinks whose delivery is deferred and whose value depends on market fluctuations; urgent maintenance or repair work at the home; unsealed audio/video recordings and computer software; newspapers, periodicals or magazines (except subscriptions); accommodation, transport, car hire, catering or leisure services for a specific date or period; contracts concluded at a public auction; digital content supplied on a non-material medium whose performance has begun with the consumer's prior express consent and acknowledgement that they lose their right of withdrawal. The classification of each case is strictly governed by case law and often requires legal advice: a wrong classification exposes the trader to sanctions. The trader must inform the consumer that the right does not apply BEFORE the contract is concluded (Directive 2011/83/EU, art. 6).

Cancellation (not to be confused with withdrawal)

Also: right of cancellation, cancellation button, contract termination, cancel a subscription

Cancellation ends an ONGOING subscription, after the withdrawal period, under the terms of the contract (renewal date or legitimate reason). It is governed by national contract-termination rules, distinct from the right of withdrawal (Directive 2011/83/EU, 14 days after signing up, full refund). The two rights can both apply but are not the same: BackToMe covers the withdrawal button, not the cancellation button (which is a matter for your billing provider).

Cancellation and withdrawal are two distinct rights that are too often confused. WITHDRAWAL (Consumer Rights Directive 2011/83/EU) allows a distance contract to be cancelled within 14 days of signing up, with no reason and a full refund; the online withdrawal function required by Directive (EU) 2023/2673 has been mandatory since 19 June 2026. CANCELLATION allows an already-committed subscription to be ended, once the withdrawal period has passed, at the renewal date or for a legitimate reason, with no retroactive refund; it is governed by national contract law rather than by EU withdrawal rules. For a SaaS or subscription service sold to consumers (B2C), BOTH mechanisms may be required: the withdrawal button (provided by BackToMe) AND, where national law imposes it, an easy way to cancel a subscription (a matter for the subscription platform, such as Stripe Billing or Chargebee).

Pre-contractual information

Also: information obligation, mandatory disclosures, terms and conditions

Pre-contractual information is all the information the trader must give the consumer before a distance contract is concluded: identity, price, payment terms, the right of withdrawal and how to exercise it. Any breach of this obligation triggers the extension of the withdrawal period to 12 months and 14 days (Directive 2011/83/EU, art. 10).

Article 6 of the Consumer Rights Directive (2011/83/EU) sets out its detailed content: the trader's identity and contact details, the essential characteristics of the goods or service, the total price, the payment and delivery terms, the existence and arrangements of the right of withdrawal, the model withdrawal form, the existence of legal guarantees, the term of the contract, and so on. This information must be communicated in a legible and comprehensible manner before the order is placed, then confirmed on a durable medium. Since 19 June 2026, providing the online withdrawal function (Directive (EU) 2023/2673) is added to this base. The consequence of breach is twofold: civil (automatic extension of the withdrawal period to 12 months and 14 days, art. 10) and administrative (a fine from the national regulator, in Ireland the CCPC).

"Withdraw from the contract"

Also: button label, withdrawal wording, unambiguous label, Withdraw from the contract here

"Withdraw from the contract" (or "Withdraw from the contract here") is the recommended label for the withdrawal button under the withdrawal-function requirements of Directive (EU) 2023/2673. It must be unambiguous, legible, and clearly identify the button's function. Vague labels such as "Cancel", "Return" or "Contact" do not meet the requirement and would be held inadmissible by the courts. The label must remain permanently accessible, not only during the checkout flow.

Directive (EU) 2023/2673 does not require a single set wording, but a legible, unambiguous label that clearly identifies the button's function. "Withdraw from the contract" is the recommended wording because it echoes the legal vocabulary. Conversely, vague or misleading labels ("Cancel", "Return", "Contact", "Write to us") do not meet the requirement: they dilute the withdrawal function into customer service or navigation. A poorly labelled button is a clear breach, just like a missing button. The label sits within a two-stage journey: "Withdraw from the contract" opens the form, "Confirm withdrawal" submits the request.

"Confirm withdrawal"

Also: confirmation button, second withdrawal click, withdrawal validation

"Confirm withdrawal" is the label of the second button required by the withdrawal-function requirements of Directive (EU) 2023/2673. The process runs in two clicks: (1) the consumer clicks "Withdraw from the contract" and reaches a form pre-filled with their details; (2) they confirm by clicking "Confirm withdrawal". Only after this second click is the withdrawal legally recorded and must the trader send the acknowledgement of receipt on a durable medium. This two-stage procedure prevents accidental withdrawals and gives unambiguous effect to the consumer's intention.

The two-click journey serves a double purpose: to avoid accidental withdrawals and to give effect to a clear, confirmed intention, as required by the notion of an "unambiguous" statement in the Consumer Rights Directive (2011/83/EU). Between the two clicks, a pre-filled form shows the consumer's details and their order, which they can check. It is at the point of confirmation that the request is timestamped and transmitted to the trader, triggering the sending of the acknowledgement of receipt on a durable medium. This sequencing protects both parties: the consumer against an accidental click, and the merchant against any challenge to the fact or the date of the request.

Function (within the meaning of the directive)

Also: withdrawal function, withdrawal feature

The "function" within the meaning of Directive (EU) 2023/2673 is an interactive, self-contained digital mechanism, distinct from a mere line of text or an email. It must be permanently accessible on the site, free of charge, identifiable by an unambiguous label, and trigger the transmission of a timestamped withdrawal request to the trader.

In practice, the function is distinct from a simple contact form or a "write to us" link: it must be dedicated to withdrawal, produce a structured request (identifying the customer and the order) and generate a dated acknowledgement of receipt. Non-compliant set-ups are common: an email shown in the legal notices, a generic customer-service form, a box available only after logging in to the customer account, or a paid channel (premium-rate number). Directive (EU) 2023/2673 requires permanent accessibility from the site's pages, an unequivocal label ("Withdraw from the contract" or equivalent), and above all a timestamp: it is the date, which can be relied on, that protects the merchant in the event of a dispute. That is precisely the role of a dedicated solution like BackToMe.

Durable medium

Also: confirmation email, lasting medium

A durable medium is any instrument that enables the consumer to store information addressed to them personally, to access it later and to reproduce it unchanged. In practice, an email with a PDF attachment meets this requirement; a message that disappears after a few days in a customer account does not. The withdrawal-function requirements of Directive (EU) 2023/2673 call for a durable medium for the withdrawal acknowledgement of receipt.

The notion is defined by the Consumer Rights Directive (2011/83/EU) and interpreted strictly by the Court of Justice of the European Union: the medium must let the consumer keep the information so as to be able to refer back to it for an appropriate period, without the trader being able to change it unilaterally. An email, a PDF or an archivable SMS meets this condition. By contrast, a mere display on a web page, a message in a customer account liable to be altered or deleted, or an ephemeral notification are not enough. For the withdrawal acknowledgement of receipt, the choice of channel is therefore decisive: it is what guarantees that the consumer, and where relevant the court, will be able to find the dated record of the request.

Acknowledgement of receipt

Also: withdrawal confirmation, withdrawal receipt

The acknowledgement of receipt is the confirmation the trader must send automatically to the consumer as soon as a withdrawal request is submitted, on a durable medium. It certifies that the request has been taken into account, states its date and reference number, and marks the starting point of the trader's obligations (in particular the refund within 14 days).

Under the withdrawal-function requirements of Directive (EU) 2023/2673, as soon as a request passes through the withdrawal function, the trader must acknowledge receipt on a durable medium, stating the date. This acknowledgement is not a mere courtesy: it sets the starting point of the 14-day refund period (Directive 2011/83/EU, art. 13) and, together with timestamped archiving, provides proof that the merchant did indeed receive and process the request. It is distinct from a marketing email or an order confirmation: its subject is unique and can be relied on. In the event of an inspection by the national regulator (in Ireland, the CCPC) or a dispute, the absence of a dated acknowledgement weakens the trader's position and can amount to an information failure that opens the extension of the period to 12 months (Directive 2011/83/EU, art. 10).

Timestamped archiving with evidential value

Also: proof of withdrawal, timestamping, enforceability, evidential archiving, 5-year retention

Timestamped archiving with evidential value is the retention, by a reliable proof system, of the withdrawal requests received and their acknowledgements of receipt, with a server timestamp and a cryptographic fingerprint (typically a SHA-256 hash) of the content to detect any later alteration. It is useful in the event of an inspection by the national regulator (in Ireland, the CCPC) or a dispute: it lets the trader show that their function was operational on a given date. Its evidential weight is governed by the eIDAS Regulation (EU) 910/2014, under which electronic records are admissible as evidence across all 27 member states; for a qualified electronic timestamp in the strict sense, a certified trust service provider would be required. BackToMe uses a standard server timestamp, sufficient in the majority of cases but not equivalent to a qualified timestamp. The standard retention period at BackToMe is 5 years, aligned with the applicable limitation period for commercial claims; beyond that, any further retention would need to be justified by a specific purpose (GDPR, data-minimisation principle, art. 5.1.e).

Its legal force rests on the eIDAS Regulation (EU) 910/2014: an electronic record may not be denied legal effect or admissibility as evidence solely because it is electronic, and it carries full evidential value across all 27 member states provided its author can be identified and its integrity guaranteed. The server timestamp fixes the date, the cryptographic fingerprint (SHA-256 hash) detects any later change, and chaining the fingerprints (a Merkle tree) makes it possible to prove that a record was not inserted after the fact. In a dispute over the date of a withdrawal, or during an inspection by the national regulator, it is this chain of proof that decides between the parties: far more robustly than a screenshot or an email, which can be contested. The retention period is aligned with the applicable limitation periods.

Online interface

Also: website, web application, platform

An online interface, within the meaning of Directive (EU) 2023/2673 (art. 11a of Directive 2011/83/EU), is any software, including a website or a mobile-app module, operated by or on behalf of a trader and enabling consumers to access its goods or services with a view to a transaction. The withdrawal-button obligation applies to all such interfaces.

The definition is deliberately broad: it covers an e-commerce site, a mobile app, a module embedded in a marketplace, and even a commercial conversational interface. What matters is that a consumer can conclude a transaction there. The obligation to provide the withdrawal function falls on whoever operates the interface: the marketplace operator for the technical function, the third-party seller for the actual handling of the request. Each interface must meet the EU withdrawal-function requirements: permanent accessibility, an unequivocal label, a timestamped request, and an acknowledgement of receipt on a durable medium. A "headless" or multi-store architecture excuses nothing: the button must be present and working on every interface exposed to consumers in the EU.

Distance contract

Also: distance selling, online purchase

A distance contract is any contract concluded between a trader and a consumer without their simultaneous physical presence, through the exclusive use of one or more means of distance communication (website, email, telephone). The online purchase is the classic example: it always triggers the application of the right of withdrawal, save for the cases in art. 16 of Directive 2011/83/EU.

The classification presupposes an organised distance selling or service-provision scheme: a private individual who occasionally sells online does not fall within its scope. It covers e-commerce, mail order, telephone selling and selling via a marketplace. A distance contract always triggers the 14-day right of withdrawal (Directive 2011/83/EU), unless it falls within one of the exceptions in art. 16. It is distinct from an "off-premises" contract (concluded in physical presence but away from the trader's premises, for example during doorstep selling), which gives rise to a right of withdrawal on similar terms. Since 19 June 2026, any distance contract concluded with a consumer requires the online withdrawal function to be provided (Directive (EU) 2023/2673).

Manual entry of a withdrawal

Also: off-widget withdrawal, withdrawal by post, withdrawal by telephone, withdrawal by email, secondary channel, manual logging

The obligation applicable since 19 June 2026 (Directive (EU) 2023/2673) requires the trader to provide an online withdrawal function (the button), but it does not remove the other channels for exercising the right. A consumer may still send their request by post, direct email, telephone or in person in store, and the trader remains legally bound to log it with an acknowledgement of receipt on a durable medium, just like requests received via the button. In practice, the trader must be able to enter these off-channel requests manually into their intake tool to reconstruct the complete register. On the BackToMe side, a dedicated form (customer identity, reference number, channel of arrival, actual date of receipt up to 30 days in the past) generates a SHA-256 hash and a server timestamp identical to a withdrawal received via the button, triggers the automatic acknowledgement to the customer and the internal notification to the merchant.

Deferred deletion and restoration (soft-delete)

Also: soft-delete, recovery window, 30-day period, undelete, account recycle bin, site recycle bin

A mechanism whereby a deleted user account or site is not immediately purged from the database but marked as deleted with a date (soft-delete), kept for a grace period, at BackToMe thirty (30) days, during which the holder can reverse their decision and fully restore the data. Beyond the period, a hard-purge cron permanently deletes the records and sends a final dated proof email to the holder's last known address (useful as a GDPR attestation for the archives). The mechanism dovetails with article 17 of the GDPR (right to erasure): it preserves the possibility of erasure without making the operation irreversibly triggered by mistake. Withdrawals attached to the site or account are still kept for 5 years as commercial proof (the applicable commercial limitation period) and then purged separately, even after restoration.

Consumer (B2C)

Also: individual, end customer, B2C, business to consumer

A consumer is any natural person acting for purposes that do not fall within the scope of their commercial, industrial, craft, professional or agricultural activity (Directive 2011/83/EU, art. 2). The right of withdrawal is a consumer protection: it does not apply to sales between traders (B2B). A single sale to a consumer is enough to trigger the withdrawal-function obligation (Directive (EU) 2023/2673).

The classification can be delicate in mixed cases. Where a contract pursues a dual purpose, professional and personal, case law treats the person as a consumer if the professional purpose is marginal. Non-profit legal persons may, depending on the case, be treated as non-professionals. For the merchant, the issue is simple: as soon as part of their customer base is B2C, the withdrawal-button obligation applies across the EU: there is no turnover or volume threshold below which one would be exempt.

Trader

Also: seller, e-tailer, online merchant

A trader is any natural or legal person, public or private, acting for purposes falling within the scope of their commercial, industrial, craft, professional or agricultural activity, including when acting in the name of or on behalf of another trader. Any trader selling at a distance to consumers in the EU is subject to the withdrawal-button obligation since 19 June 2026, with no turnover threshold.

The status of trader is assessed broadly and covers the sole trader as much as the large chain. Several configurations deserve attention: the marketplace operator bears the technical obligation of the withdrawal function, while the third-party seller remains responsible for the actual handling of the request; the dropshipper is the trader responsible towards the customer, whatever the delivery time from the supplier; a seller targeting consumers in another member state (language, currency, delivery there) is subject to that country's consumer law (Rome I). No threshold provides exemption: a single distance sale to a consumer in the EU is enough to trigger the withdrawal-button obligation since 19 June 2026.

National consumer regulator (in Ireland, the CCPC)

Also: national regulator, consumer protection authority, supervisory authority

Enforcement of consumer law is not harmonised across the EU: each member state designates its own authority to check compliance with the withdrawal-function and information obligations. In Ireland, that authority is the CCPC (Competition and Consumer Protection Commission). It can carry out inspections, issue compliance notices and pursue penalties in the event of breach of the withdrawal-button obligation.

In practice, a national regulator acts in several ways: scheduled or unannounced inspections, investigations following consumer complaints, and targeted sector operations. Faced with a breach, the procedure is typically graduated: first a request to comply within a set period; if there is no action, a penalty; and, in addition, publication of the decision, whose reputational effect often outweighs the fine. Regulators cooperate with their counterparts within the EU Consumer Protection Cooperation (CPC) network, which exposes cross-border sellers; for widespread infringements, the Omnibus Directive (EU) 2019/2161 lets them impose fines of at least 4% of annual turnover. In Ireland, the CCPC can pursue penalties of up to €60,000, or up to 4% of turnover / €2,000,000 for widespread infringements, under the Consumer Rights Act 2022. For the merchant, a swift remediation after a warning generally avoids the financial penalty.

Formal notice

Also: injunction, compliance notice

A formal notice is the act by which the national regulator (in Ireland, the CCPC) orders a trader to bring themselves into compliance within a set period. It is generally the first step of the enforcement procedure: only where the breach persists after that period can a penalty be imposed.

The term covers two realities that should not be confused. On the public-enforcement side, the formal notice is the regulator's request to comply before any penalty. On the customer-relationship side, the formal notice is the act by which a consumer still not refunded after the 14-day period formally demands that the merchant pay: the usual step before court proceedings, often sent by recorded delivery. In both cases, the formal notice sets an enforceable starting point and gives concrete form to any bad faith on the part of the recipient. For the consumer, our formal-notice generator produces a complete letter; for the merchant, the best defence remains to handle the request within the time limits.

Administrative penalty

Also: administrative fine, penalty, Omnibus penalties

Penalties for breach of the pre-contractual information and withdrawal-function obligations are not harmonised across the EU: each member state sets its own. For widespread infringements, the Omnibus Directive (EU) 2019/2161 lets national authorities impose fines of at least 4% of annual turnover. As a national example, in Ireland the CCPC can pursue fines of up to €60,000 (Consumer Rights Act 2022). This penalty is distinct from the extension of the withdrawal period, which is automatic.

A penalty is typically imposed following an adversarial procedure: the trader is informed of the complaints and can make representations before a decision is taken. For large-scale infringements falling under European cooperation, the fine can be raised to at least 4% of the average annual turnover (Omnibus Directive (EU) 2019/2161). In Ireland, that means up to €60,000, or 4% of turnover / €2,000,000 for widespread infringements, under the Consumer Rights Act 2022, enforced by the CCPC. The decision may be published. This administrative penalty is cumulative with the civil consequences specific to the right of withdrawal, in particular the automatic extension of the period to 12 months (Directive 2011/83/EU, art. 10).

Directive (EU) 2023/2673

Also: European withdrawal directive, 2023 directive

Directive (EU) 2023/2673 of 22 November 2023 harmonises at European level the requirements relating to the online withdrawal function. It requires Member States to ensure that consumers have, on online interfaces, a withdrawal function that is easy to find, free of charge and permanent. It is transposed by each of the 27 EU member states and applies since 19 June 2026.

Often presented as a "modernisation" directive, it amends the Consumer Rights Directive (2011/83/EU) to adapt it to online commerce, inserting a new art. 11a. Its central contribution is the requirement of a withdrawal function that is easy to find and use directly on the online interface, where the previous law was satisfied with a model form or a statement. Being a directive, it does not apply directly: each Member State transposes it into national law. In Ireland, the right of withdrawal already sits in S.I. 484/2013 and enforcement under the Consumer Rights Act 2022, with the CCPC as regulator. The harmonisation objective aims for a comparable level of protection throughout the Union and fewer distortions between European merchants.

Consumer law (EU and national)

Also: consumer law, consumer protection law

Consumer law governs the relationship between consumers and traders. At EU level, the core text is the Consumer Rights Directive (2011/83/EU), which harmonises pre-contractual information, distance contracts and the right of withdrawal. Each member state transposes it into national law (in Ireland, the 2013 Regulations and the Consumer Rights Act 2022). The withdrawal-button obligation comes from Directive (EU) 2023/2673.

EU directives set a harmonised floor of protection; national law transposes them and designates the enforcement authority. The right of withdrawal is set by the Consumer Rights Directive (2011/83/EU): the 14-day period (art. 9), the pre-contractual information (art. 6), the exceptions (art. 16), the extension where information is missing (art. 10). It is read together with the cross-border conflict-of-laws rules (Rome I, Regulation (EC) 593/2008) and with the rules on electronic evidence (eIDAS Regulation (EU) 910/2014). In Ireland, these provisions are transposed and enforced by the CCPC under the Consumer Rights Act 2022.

National transposition of Directive (EU) 2023/2673

Also: national transposition, transposition 2023/2673

Directive (EU) 2023/2673 is transposed by each member state into national law, adding the obligation, for traders, to provide a dedicated online function for exercising the right of withdrawal free of charge. Member States had to transpose it by 19 December 2025, and the obligation applies from 19 June 2026. In Ireland, the right of withdrawal sits in S.I. 484/2013, with enforcement under the Consumer Rights Act 2022 (CCPC).

A directive does not apply directly: each Member State must transpose it through a national measure. That national measure rewrites the country's consumer legislation to include the obligation of an online withdrawal function and articulates the consequences (civil extension of the period; administrative penalty). It is inseparable from its technical implementing rules, which set out the label, accessibility and acknowledgement of receipt. The obligation applies from 19 June 2026 for all existing interfaces, with no specific transitional period: on that date, compliance is required across the 27 EU member states.

Withdrawal-function requirements (implementing rules)

Also: withdrawal-function requirements, button requirements, implementing rules

The implementing rules specify the technical requirements of the online withdrawal function under Directive (EU) 2023/2673: permanent visibility on the site, free of charge, an unambiguous label ("Withdraw from the contract"), a two-click procedure ("Withdraw from the contract" then "Confirm withdrawal"), automatic generation of an acknowledgement of receipt on a durable medium, and access without account creation for guest customers. They apply across the 27 EU member states since 19 June 2026.

Where the directive lays down the principle of the withdrawal function, the implementing rules set out its concrete characteristics. They require permanent accessibility from the site's pages, that it be free of charge, an unambiguous label, the collection of the information identifying the customer and their order, and an acknowledgement of receipt on a durable medium bearing the date. These are the criteria the national regulator (in Ireland, the CCPC) checks during an inspection. The most demanding point is the timestamped acknowledgement on a durable medium: it is what turns a simple form into an enforceable mechanism, able to prove the date of the request in the event of a dispute.

The Consumer Rights Directive (2011/83/EU)

Also: Consumer Rights Directive, 2011/83/EU, CRD

Directive 2011/83/EU (the Consumer Rights Directive) is the foundational EU text of the modern right of withdrawal. It harmonises the 14-day period, defines distance and off-premises contracts, and organises pre-contractual information across the 27 member states. It was later amended by Directive (EU) 2023/2673, which added the online withdrawal function mandatory since 19 June 2026.

Before the Consumer Rights Directive, withdrawal periods and consumer information varied between member states. The 2011 directive set a harmonised 14-day period, generalised the model withdrawal form, strengthened pre-contractual information and framed refund times. It is the foundation on which the 2026 reform builds: that reform does not rewrite the right of withdrawal, it adds an obligation of means, the online function of art. 11a, to make exercising the right as easy as buying. In Ireland, the Consumer Rights Directive is transposed by S.I. 484/2013 and enforced under the Consumer Rights Act 2022. To understand the Consumer Rights Directive is to understand the framework of the right of withdrawal that the 2026 button makes effective.

Rome I Regulation (article 6)

Also: Rome I, applicable law, CELEX 32008R0593

Article 6 of Regulation (EC) 593/2008 (Rome I) determines the law applicable to contracts concluded with consumers. Where a trader actively targets consumers in a member state (a local-language site, delivery there, prices in euros, targeted advertising), that country's consumer law applies, including the withdrawal-button obligation (Directive (EU) 2023/2673).

The mechanism protects the consumer against the circumvention of local law by a foreign choice-of-law clause. Even if a seller's terms and conditions designate another law, article 6 of Rome I guarantees the consumer the benefit of the mandatory provisions of the law of their habitual residence, as soon as the trader directs its activity towards that country. In practice, a foreign merchant who actively sells into a member state (local-language site, prices in euros, delivery there) cannot escape that country's consumer law, including the withdrawal-button obligation. In Ireland, that means Irish consumer law enforced by the CCPC. The Rome I Regulation is thus the gateway through which the consumer's national law applies to cross-border sellers targeting that market.

GDPR (link with withdrawal)

Also: data protection, GDPR, form personal data

The General Data Protection Regulation (EU 2016/679) governs the processing of personal data. The withdrawal form collects data (name, email, order reference) that must be processed on a legal basis, kept for a proportionate period and secured. Keeping it for 5 years for evidential purposes (aligned with the applicable commercial limitation period) is permitted, provided the consumer is informed in the privacy policy.

The processing of the withdrawal form's data finds its legal basis in the performance of the contract and compliance with a legal obligation (article 6 of the GDPR): the trader must keep proof of the request to comply with consumer law. The principles of minimisation (collecting only what is necessary: identity, order) and storage limitation (a proportionate period, aligned with the limitation periods) apply. Timestamped archiving with evidential value and the GDPR do not conflict: keeping dated proof serves a legitimate and specified purpose. BackToMe is published and hosted in the European Union, which simplifies compliance.