Does EU law require an on-site withdrawal button, or is an email link enough?

Directive (EU) 2023/2673 added Article 11a to the Consumer Rights Directive, requiring traders to provide an electronic withdrawal function built into their own website or app, continuously available and easily accessible. An email link alone is not considered sufficient on its own.

Since when does the EU withdrawal button requirement apply?

Member states had to transpose Directive (EU) 2023/2673 into national law by 19 December 2025, and the withdrawal button obligation under Article 11a applies from 19 June 2026.

Features: EU Withdrawal & Cancel Button for OpenCart

Built for the EU withdrawal button rule

Directive (EU) 2023/2673 added Article 11a to the Consumer Rights Directive: an on-site electronic withdrawal function is now required for EU consumers, effective from 19 June 2026. Here's how this module lines up against that, point by point.

✓

An on-site function An account-page button for logged-in customers, plus a public storefront form for guests. Both live on your own site.

✓

Accessible without login or registration Guests can use the secure e-mail link or the public lookup form; no account is ever required. Goes further: logged-in customers get a dedicated account panel listing every eligible order and the status of past requests, not just a one-off button.

✓

Continuously available and prominently placed The configurable button/card layout module supports automatic footer placement, so it stays visible site-wide instead of being buried in a menu.

✓

A two-step process: provide details, then confirm The request form shows order details first, then a clear, separate confirmation step before anything is submitted.

✓

Automatic acknowledgement of receipt Customers get an immediate acknowledgement e-mail with a request reference number. Goes further: customers also get a status-update e-mail later when admin reviews the request, and can check status anytime from their account panel.

✓

Distinguishes between multiple orders Every request is tied to one specific order; the account panel and public form both work per order.

This is a feature comparison, not legal advice. It summarizes publicly reported guidance on Directive (EU) 2023/2673 / Article 11a of the Consumer Rights Directive as of mid-2026. Member states had to transpose it into national law by 19 December 2025, with the obligation applying from 19 June 2026. Confirm the exact requirements for your own market with your own legal counsel.

👤Customer Experience

Cancellation / withdrawal action shown right on the customer's order page when eligible, plus a separate account page listing eligible orders and request history.
Request form shows order details, products, and totals before submission, with an optional reason dropdown and free-text comment field.
Duplicate open requests for the same order are automatically blocked.

📧Guest Order Handling

Guest customers can act without creating an account: via a secure, expiring link in their order confirmation e-mail, or a public storefront form where they look up their order by order number and email.
The public form is protected with honeypot fields, lookup rate-limiting, and adaptive captcha, and is restricted to guest orders; registered customers use their account area.
Public-form requests stay flagged for admin review rather than automatically changing the order status, since identity isn't confirmed by a secure token.
Creating a new secure guest link automatically deactivates older links for that order.

🎨Configurable Public Button

A dedicated layout module for the withdrawal button or card, placeable anywhere your theme supports layout modules, with automatic footer placement in the default OpenCart theme.
Four styles (card, filled button, outline, text link), five sizes (XS to XL), four corner styles, and left, center, or right alignment.
Full color control for background, border, text, and the button itself, plus a custom CSS class field if your theme CSS should take over completely.
Live preview in the admin settings page while you edit.

⚙️Admin Tools

Compact settings page with toggles, translatable help text, and per-status control over when cancellation and withdrawal actions appear, including whether a reason is required.
Optional automatic move to a holding order status when a cancellation request comes in, preventing accidental shipping. Never refunds, restocks, or touches payments automatically.
An Order Status Updates tab lets you map an optional whole-order OpenCart status to each request status in advance, then confirm or override it per request from the detail page, with a clear stock-effect warning before anything changes.
Dedicated, filterable request list (by order, type, status) with a "needs work" quick filter and an admin top-bar alert while requests are unresolved.
Request detail page for adding internal notes, updating status, and optionally notifying the customer, with a full history of every change.

✉️E-mail Notifications

Customer acknowledgement on submission, and an optional status-update e-mail when admin changes the request status.
Merchant/admin notification for every new request.
Guest and registered-customer order confirmation e-mails can include their respective access links.
All customer-facing e-mail text is translatable.

🔒Security & Data Safety

CSRF protection, race-condition-safe request creation, and duplicate-open-request prevention.
Cryptographically random guest tokens verified by password hashing; raw tokens are never stored, and guest links are scoped to one order.
Customers can only access their own orders; all comments and names are escaped in templates.
All request and guest-link data lives in the module's own database tables, isolated from your existing orders and customers.
Its only footprint on existing tables is its own settings entry and layout routes, plus, only if enabled, the automatic order-status move described above.
Request and audit tables are preserved on uninstall. Safe to install on a busy live store; as with any extension, take a backup first.

🌐Compatibility & Languages

Built for OpenCart 3.0.x.x; source-compatible with PHP 7.0+.
Works with the default OpenCart theme out of the box. The optional Journal 3 compatibility add-on is now available for the source-verified Journal 3.1.14, 3.1.15, 3.2.8, and 3.2.10 account-page patterns, adding its own Journal Theme settings tab with placement instructions.
Using another custom theme? The account route can be added manually, and a free compatibility patch is provided on request.
Customer-facing language files included: English, Finnish, German, French, Estonian, Dutch, Polish, Czech, Slovak, Hungarian, Greek, Italian.

⚠️What this module deliberately does not do

Does not automatically refund orders, restock products, or cancel/void payments.
Does not decide legal eligibility automatically. The merchant reviews every request.
Does not replace your store's terms, refund policy, or legal review.
Does not track actual delivery date automatically.
Does not provide product-level partial return handling.

Everything inside EU Withdrawal & Cancel Button