Frequently Asked Questions

It may apply. The determining factor is not where the business is established, but whether it targets consumers residing in the European Union. For example, an online store based in the United States, the United Kingdom, or Latin America may still be required to comply with EU consumer protection rules if it markets products or services to EU consumers.

As a general rule, consumers have 14 days from receipt of the product or from the conclusion of the service contract. If the company fails to properly inform consumers about this right, the withdrawal period may be extended by up to 12 months.

No. Consumers may exercise their right of withdrawal without providing any justification and without incurring any penalty. The right of withdrawal is unconditional. While businesses may optionally ask for feedback for statistical or customer experience purposes, providing a reason can never be a condition for processing the withdrawal request.

The withdrawal mechanism must be clearly visible and easy to find on the website. Placing it exclusively within the Terms and Conditions, the Returns Policy, or lengthy FAQ sections could be considered an obstacle to the exercise of the consumer's rights. It is recommended to place it in intuitive locations, such as the customer account area, order history section, or website footer.

Yes. From 19 June 2026, it will no longer be sufficient for consumers to exercise their right of withdrawal through a generic contact form, email address, or other general communication channel. Whenever a right of withdrawal applies, businesses must provide a specific, direct, and easily accessible online mechanism that allows consumers to exercise this right. The purpose is to ensure that users do not have to search for alternative procedures or complete unnecessary steps to cancel a contract.

Yes. We include a cookie banner and consent mechanisms adapted to the requirements of the Mexican data protection law and compatible with international standards.

Yes. If you sell through platforms, you still need to comply with Mexican regulations.
Lawwwing generates legal texts adapted to your sales model, whether you have your own website or use third-party channels.

Yes. If your website receives visits from users in Brazil or sells there, you must comply with laws such as the LGPD, the CDC, and the Marco Civil, regardless of where your company is registered.

Yes, but most generic policies do not meet Brazil’s specific legal requirements.
Lawwwing ensures everything is updated and aligned with local legislation.

You may face legal penalties, financial fines, service blocks, or loss of user trust. Authorities like the ANPD or Procon can even intervene preventively.

Yes. If your website receives visits from users in Brazil or sells there, you must comply with laws such as the LGPD, the CDC, and the Marco Civil, regardless of where your company is registered.

Yes, but most generic policies do not meet Brazil’s specific legal requirements.
Lawwwing ensures everything is updated and aligned with local legislation.

You may face legal penalties, financial fines, service blocks, or loss of user trust. Authorities like the ANPD or Procon can even intervene preventively.

Yes. We include a cookie banner and consent mechanisms adapted to the requirements of the Mexican data protection law and compatible with international standards.

Yes. If you sell through platforms, you still need to comply with Mexican regulations.
Lawwwing generates legal texts adapted to your sales model, whether you have your own website or use third-party channels.

Yes. Lawwwing adapts your legal texts to comply with the national regulations applicable throughout Mexico, regardless of the state or city where you operate.

You could face fines of up to $7,500 per violation. You also risk losing user trust or receiving complaints if you don’t respect their privacy rights.

Probably yes. The CPA requires very specific information, and many generic policies are not compliant.
Lawwwing ensures your privacy notice is clear, up to date, and legally valid in Colorado.

Yes. If you offer products or services to users in Colorado, Lawwwing adapts your website to comply with the law, no matter where your business is registered.

Yes. We include mechanisms that allow users to opt out of data sales or personalized advertising, and we’re preparing for universal opt-out, which will become mandatory as of July 2024.

We create and update your privacy notice, audit cookies, activate opt-out mechanisms, and configure consent for sensitive data, as required by law.

You could face fines of up to $7,500 per violation. You also risk losing user trust or receiving complaints if you don’t respect their privacy rights.

Probably yes. The CPA requires very specific information, and many generic policies are not compliant.
Lawwwing ensures your privacy notice is clear, up to date, and legally valid in Colorado.

Yes. If you offer products or services to users in Colorado, Lawwwing adapts your website to comply with the law, no matter where your business is registered.

Yes. We include mechanisms that allow users to opt out of data sales or personalized advertising, and we’re preparing for universal opt-out, which will become mandatory as of July 2024.

We create and update your privacy notice, audit cookies, activate opt-out mechanisms, and configure consent for sensitive data, as required by law.

Your website must include clear legal texts, a valid cookie banner, forms with first-layer information that allow for explicit consent, mechanisms for users to exercise their rights, and appropriate security measures.

You will find all the information in this blog

Lawwwing automatically adapts your website to the regulation by generating customized legal texts, Privacy Policy and Cookie Policy, a cookie banner in accordance with the GDPR and ePrivacy, consent collection clauses in the first layer, and the rights management or DSAR form. All from a single, easy-to-use tool.

If your website does not comply with the GDPR, you can face very high financial penalties (up to 20 million euros or 4% of your global turnover). In addition, you run the risk of losing the trust of your users, which can directly affect your conversions and online reputation.

Yes. Even if you do not sell directly, if you use cookies, tracking tools, contact forms or tools such as Google Analytics, this regulation applies. Lawwwing helps you to comply, whatever your type of website.

You may face financial penalties and lose the trust of your users. A poorly configured banner or emails sent without consent can be grounds for a complaint from your customers or users. Lawwwing helps you to prevent it easily.

With Lawwwing you can automatically scan your website to detect cookies, forms or legal texts that do not comply. This way you avoid risks and know where you need to act.

You can scan your website here and see what level of risk you are facing.

It may apply. The determining factor is not where the business is established, but whether it targets consumers residing in the European Union. For example, an online store based in the United States, the United Kingdom, or Latin America may still be required to comply with EU consumer protection rules if it markets products or services to EU consumers.

No. Exercising the right of withdrawal must be completely free of charge for consumers. Any costs associated with implementing, maintaining, or managing the withdrawal mechanism must be borne entirely by the business.

Certain exceptions are established by law. These include customised or personalised products, perishable goods, sealed products that cannot be returned for health or hygiene reasons once unsealed, and certain digital content where performance has begun with the consumer's prior express consent. In such cases, businesses must clearly inform consumers in advance that the right of withdrawal does not apply or will be lost under specific circumstances.

No. Consumers may exercise their right of withdrawal without providing any justification and without incurring any penalty. The right of withdrawal is unconditional. While businesses may optionally ask for feedback for statistical or customer experience purposes, providing a reason can never be a condition for processing the withdrawal request.

The withdrawal mechanism must be clearly visible and easy to find on the website. Placing it exclusively within the Terms and Conditions, the Returns Policy, or lengthy FAQ sections could be considered an obstacle to the exercise of the consumer's rights. It is recommended to place it in intuitive locations, such as the customer account area, order history section, or website footer.

Yes. From 19 June 2026, it will no longer be sufficient for consumers to exercise their right of withdrawal through a generic contact form, email address, or other general communication channel. Whenever a right of withdrawal applies, businesses must provide a specific, direct, and easily accessible online mechanism that allows consumers to exercise this right. The purpose is to ensure that users do not have to search for alternative procedures or complete unnecessary steps to cancel a contract.

No, the widget has been designed to be very user friendly and allow the compliance of the website in accordance with art. 50 of the AI Act. You will see a floating widget that will accompany the user while navigating through the website. You can edit the look and feel.

Yes. Lawwwing’s AI Sentinel is compatible with any website or CMS, including WordPress, Shopify, WooCommerce, PrestaShop, Squarespace, Webflow, and any custom-coded website. Installation takes less than 2 minutes using a snippet or plugin.

If you already have Lawwwing installed, you simply need to activate it from the dashboard. No additional installation is required.

Lawwwing’s AI Sentinel can be purchased as a standalone solution, added to a Starter, Growth, or Professional plan, and is already included in the Comfort Pack at no additional cost. If you’re already a Comfort customer, you simply need to activate it from your dashboard. It’s also available as a standalone service for businesses that don’t need the rest of Lawwwing’s tools.

AI Sentinel is built to handle both large and small catalogs. We’ve designed flexible, modular plans so you can choose exactly what your website needs. It scans all images progressively and in the background, without slowing down your site. It also automatically detects when new content is uploaded and analyzes it instantly.

If you’re unsure which plan is right for you, contact us via chat or at hola@lawwwing.com — we’ll be happy to help you find the plan that best fits your website’s needs.

Lawwwing’s AI Sentinel uses proprietary detection models trained on millions of images. It analyzes visual patterns and characteristics that are invisible to the human eye and that distinguish real images from AI-generated ones, achieving over 98,5% accuracy.

It may apply. The determining factor is not where the business is established, but whether it targets consumers residing in the European Union. For example, an online store based in the United States, the United Kingdom, or Latin America may still be required to comply with EU consumer protection rules if it markets products or services to EU consumers.

No. Exercising the right of withdrawal must be completely free of charge for consumers. Any costs associated with implementing, maintaining, or managing the withdrawal mechanism must be borne entirely by the business.

Certain exceptions are established by law. These include customised or personalised products, perishable goods, sealed products that cannot be returned for health or hygiene reasons once unsealed, and certain digital content where performance has begun with the consumer's prior express consent. In such cases, businesses must clearly inform consumers in advance that the right of withdrawal does not apply or will be lost under specific circumstances.

As a general rule, consumers have 14 days from receipt of the product or from the conclusion of the service contract. If the company fails to properly inform consumers about this right, the withdrawal period may be extended by up to 12 months.

No. Consumers may exercise their right of withdrawal without providing any justification and without incurring any penalty. The right of withdrawal is unconditional. While businesses may optionally ask for feedback for statistical or customer experience purposes, providing a reason can never be a condition for processing the withdrawal request.

The cookie banner must follow an opt-in model, meaning that no non-essential cookies may be activated by default. Users must take a clear and affirmative action to accept cookies. The options to accept, reject, and configure cookies must be presented in an equally visible and accessible manner. Consent must be informed, granular, and reversible.

Data subjects must submit their requests to the organisation responsible for processing their personal data through the available channels, such as an online form, email address, or equivalent communication method. The organisation has 30 calendar days to respond, which may be extended by an additional 30 days if necessary.

An important exception applies to requests for temporary blocking. In these cases, the organisation must respond within two business days and may not continue processing the affected data while the request remains unresolved.

If the organisation rejects the request, either wholly or partially, the individual may file a complaint with the Personal Data Protection Agency.

The APDP is the new independent public authority created by Law No. 21,719 to oversee compliance with data protection legislation. Its powers cover three main areas:

• Regulatory Powers: It may issue binding regulations, interpret legal provisions, and propose legislative reforms.
• Supervisory Powers: It may request documentation from data controllers, summon individuals with relevant information, and audit compliance programmes.
• Enforcement Powers: It may impose fines, resolve complaints submitted by data subjects, and order the temporary suspension of data processing activities for up to 30 days in the most serious cases.
• The Agency is also responsible for maintaining the National Register of Sanctions and Compliance.

Any security incident that poses a risk to the rights of data subjects must be reported to the Personal Data Protection Agency. Although the law does not establish a specific number of hours or days for notification, it requires organisations to report breaches “through the most expeditious means possible and without undue delay.” This means companies must act as quickly as reasonably possible. Concealing or failing to report a breach is classified as a very serious infringement and may result in fines of up to 20,000 UTM.

The main obligations include:

• Compliant Cookie Banner: Use an opt-in model, ensure that non-essential cookies are disabled by default, and provide clear information about their purposes.
• Active Consent: Remove pre-ticked boxes and provide free and accessible mechanisms for withdrawing consent.
• Accessible Privacy Policy: Publish clear information regarding who processes personal data, for what purposes, for how long, with whom the data is shared, and how users can exercise their rights.
• Data Subject Rights Channels: Establish communication channels through which individuals can exercise their rights of access, rectification, erasure, objection, portability, and blocking, and respond within 30 calendar days, extendable by a further 30 days.
• Privacy by Design: Collect only the personal data strictly necessary for the intended purpose and implement safeguards such as encryption or pseudonymisation before processing begins.

In order for the legal texts to be displayed on your website, the subscription must be active. Follow the instructions in the installation guide to implement Lawwwing on your website, from the platform of your choice.

Lawwwing can be installed on any website, either by directly copying our widget to your website or by using one of our plugins for web creation platforms. If you have any doubt, please contact us.

• Access the "Plugins" tab in your WordPress Administration Panel.
• Click on add a new plugin and search for "Lawwwing"
• Install our plugin by clicking on Install.
• Once installed and activated, go to the WordPress Administration Panel in the new Lawwwing tab.
• You will need to fill out the form with 2 values that you can obtain in your user panel on our website https://lawwwing.com

No, at Lawwwing we want you to stay with us, so when your subscription ends you can always unsubscribe without penalty.

To ensure that your website always complies with the regulations and changing criteria of the courts, tribunals, or data protection authorities, our team of specialized lawyers keeps all the texts up to date and updates them automatically because they are hosted on our server, so you can relax about the legal issues of your website.

To ensure that your website always complies with the regulations and changing criteria of the courts, tribunals, or data protection authorities, our team of specialized lawyers keeps all the texts up to date and updates them automatically because they are hosted on our server, so you can relax about the legal issues of your website.

• Access the "Plugins" tab in your WordPress Administration Panel.
• Click on add a new plugin and search for "Lawwwing"
• Install our plugin by clicking on Install.
• Once installed and activated, go to the WordPress Administration Panel in the new Lawwwing tab.
• You will need to fill out the form with 2 values that you can obtain in your user panel on our website https://lawwwing.com

It may apply. The determining factor is not where the business is established, but whether it targets consumers residing in the European Union. For example, an online store based in the United States, the United Kingdom, or Latin America may still be required to comply with EU consumer protection rules if it markets products or services to EU consumers.

No. Exercising the right of withdrawal must be completely free of charge for consumers. Any costs associated with implementing, maintaining, or managing the withdrawal mechanism must be borne entirely by the business.

Certain exceptions are established by law. These include customised or personalised products, perishable goods, sealed products that cannot be returned for health or hygiene reasons once unsealed, and certain digital content where performance has begun with the consumer's prior express consent. In such cases, businesses must clearly inform consumers in advance that the right of withdrawal does not apply or will be lost under specific circumstances.

As a general rule, consumers have 14 days from receipt of the product or from the conclusion of the service contract. If the company fails to properly inform consumers about this right, the withdrawal period may be extended by up to 12 months.

No. Consumers may exercise their right of withdrawal without providing any justification and without incurring any penalty. The right of withdrawal is unconditional. While businesses may optionally ask for feedback for statistical or customer experience purposes, providing a reason can never be a condition for processing the withdrawal request.

Yes, you can install only the Cookie Banner, but to comply with privacy and cookie regulations, you need to make the Privacy Policy and Cookie Policy available to users of your website, and with Lawwwing you can get everything together. Why limit yourself to installing the Cookie Banner if you can ensure that your website complies with regulations?

It includes a Privacy Notice, Terms and Conditions (with return policies, supplier identification, warranty clauses, and more), and an optimized Cookie Banner.
Everything is aligned with the LFPDPPP, the LFPC, and the NMX-COE-001.

It may apply. The determining factor is not where the business is established, but whether it targets consumers residing in the European Union. For example, an online store based in the United States, the United Kingdom, or Latin America may still be required to comply with EU consumer protection rules if it markets products or services to EU consumers.

No. Exercising the right of withdrawal must be completely free of charge for consumers. Any costs associated with implementing, maintaining, or managing the withdrawal mechanism must be borne entirely by the business.

Certain exceptions are established by law. These include customised or personalised products, perishable goods, sealed products that cannot be returned for health or hygiene reasons once unsealed, and certain digital content where performance has begun with the consumer's prior express consent. In such cases, businesses must clearly inform consumers in advance that the right of withdrawal does not apply or will be lost under specific circumstances.

As a general rule, consumers have 14 days from receipt of the product or from the conclusion of the service contract. If the company fails to properly inform consumers about this right, the withdrawal period may be extended by up to 12 months.

No. Consumers may exercise their right of withdrawal without providing any justification and without incurring any penalty. The right of withdrawal is unconditional. While businesses may optionally ask for feedback for statistical or customer experience purposes, providing a reason can never be a condition for processing the withdrawal request.

It may apply. The determining factor is not where the business is established, but whether it targets consumers residing in the European Union. For example, an online store based in the United States, the United Kingdom, or Latin America may still be required to comply with EU consumer protection rules if it markets products or services to EU consumers.

No. Exercising the right of withdrawal must be completely free of charge for consumers. Any costs associated with implementing, maintaining, or managing the withdrawal mechanism must be borne entirely by the business.

Certain exceptions are established by law. These include customised or personalised products, perishable goods, sealed products that cannot be returned for health or hygiene reasons once unsealed, and certain digital content where performance has begun with the consumer's prior express consent. In such cases, businesses must clearly inform consumers in advance that the right of withdrawal does not apply or will be lost under specific circumstances.

As a general rule, consumers have 14 days from receipt of the product or from the conclusion of the service contract. If the company fails to properly inform consumers about this right, the withdrawal period may be extended by up to 12 months.

No. Consumers may exercise their right of withdrawal without providing any justification and without incurring any penalty. The right of withdrawal is unconditional. While businesses may optionally ask for feedback for statistical or customer experience purposes, providing a reason can never be a condition for processing the withdrawal request.