Tags: Withdrawal Button · Cancellation Button · Right of Withdrawal · E-commerce · Consumer Protection · Legal Compliance · Lawwwing
If you run an online store, a subscription platform, or any digital business selling to consumers in Spain or the EU, there's one question you should be able to answer in under ten seconds: can your customers exercise their right of withdrawal easily, visibly, and without any friction directly on your website?
If it took you longer than ten seconds to answer, or if the answer involves a contact form, an email address, and a three-day wait, you have a legal problem on your hands — one that could cost you anywhere from a modest fine to a sanction running into hundreds of thousands of euros.
The withdrawal button is one of the most overlooked and most closely scrutinised obligations in e-commerce across Spain and the European Union. This is not a best-practice recommendation. It is a fundamental consumer right backed by European and Spanish legislation that has been in force for years — and whose requirements have been tightening steadily ever since.
In this article, we break down exactly what the withdrawal button is, what the law requires, what mistakes businesses keep making, what the consequences of non-compliance look like, and how tools like Lawwwing make it easy to get it right.
Before we talk about the button, it's worth understanding the right it exists to protect.
The right of withdrawal is the entitlement any consumer has to back out of a purchase made at a distance — online, by phone, or through any other remote channel — without giving any reason and without any penalty.
This right is enshrined in EU Directive 2011/83 on Consumer Rights, transposed into Spanish law through Royal Legislative Decree 1/2007, also known as the General Law for the Defence of Consumers and Users, or LGDCU.
The window for exercising this right is 14 calendar days from the date the product is received, or from the date the service contract is concluded. During that period, the consumer can withdraw freely, and the business is legally required to issue a full refund within a maximum of 14 days of receiving the request.
Important: the right of withdrawal is not a commercial courtesy. It is a non-waivable right established by law. Businesses cannot limit it, add conditions to it, or make it contingent on the consumer providing a justification.
Simply acknowledging the right of withdrawal in your terms and conditions is not enough. The law requires that exercising this right be easy, accessible, and not demand disproportionate effort from the consumer.
The problem the European legislator set out to solve is straightforward: many businesses were deliberately burying the withdrawal process, turning it into something long and frustrating, or simply ignoring requests altogether. The result was that consumers, in practice, could not exercise a right the law granted them on paper.
The fix was to require businesses to provide a clear, visible, and direct mechanism allowing consumers to initiate the process without any obstacles. This is what has come to be known as the withdrawal button or cancellation button — two names for the same legal obligation.
Germany led the way with its Kündigungsbutton (cancellation button), which came into force in July 2022, requiring that any contract that can be signed online must also be cancellable online with an equal or smaller number of steps. The EU regulatory trend is pointing clearly in the same direction for all member states.
The cancellation button does not emerge from thin air. It is underpinned by a body of legislation that any business selling in Spain is legally obliged to know and comply with.
Royal Legislative Decree 1/2007 (LGDCU). The primary reference text for consumer protection in Spain. It sets out the right of withdrawal, the 14-day period, the exceptions to the right, pre-contractual information obligations, and the consequences of non-compliance.
Law 4/2022 of 25 February. Amends the LGDCU with particular attention to customer service obligations. It introduces stricter requirements around easy access to complaint and withdrawal mechanisms, and strengthens oversight by the relevant authorities.
EU Directive 2019/2161 (Omnibus Directive). Expands and tightens transparency obligations for digital platforms, marketplaces, and online services. Increases penalties for non-compliance and reinforces consumer rights in digital environments.
EU Regulation 2022/2065 (Digital Services Act). While broader in scope, the DSA imposes specific transparency and accessibility obligations on intermediary platforms operating in the EU, including requirements around how easily users can manage their contracts and subscriptions.
The legal conclusion is unambiguous: this is not a single rule but a permanently evolving regulatory ecosystem, and it always points in the same direction. Making cancellation as easy as the original purchase.
The right of withdrawal applies to any business or sole trader that enters into distance contracts with end consumers in Spain or the European Union. This includes e-commerce stores selling physical or digital products, SaaS and software platforms with subscription plans for end users, streaming services, digital content providers and entertainment platforms, online learning platforms offering enrolments or subscriptions, mobile apps with in-app purchases or subscriptions, insurance companies, financial service providers and telecoms that sign up customers online, and marketplaces that intermediate between sellers and consumers.
⚠️ If you sell exclusively to other businesses in a B2B model, the consumer right of withdrawal does not apply. But if any portion of your user base consists of end consumers, even a minority, the obligation is fully in force.
Reviewing the checkout and cancellation flows of hundreds of digital businesses reveals a pattern of errors that repeats with striking regularity.
Burying the process in the FAQs or terms and conditions. The withdrawal mechanism cannot sit three clicks deep in a FAQ page that nobody reads. The law requires the process to be easily accessible, which in practice means visible and findable without effort.
Requiring the customer to send an email or call a phone number. Forcing a consumer to draft an email, hunt down the right contact address and wait for a manual response is not a withdrawal mechanism. It is a deliberate obstacle. If the contract was formed online, the withdrawal must be exercisable online.
Failing to inform the consumer before the purchase. The LGDCU requires that consumers be informed of their right of withdrawal before completing the transaction, clearly and in plain language. Omitting this information from the checkout flow is an infringement in its own right, regardless of what the terms and conditions say.
Not confirming receipt of the withdrawal request. When a consumer exercises their right of withdrawal, the business is required to confirm receipt of the request immediately. Leaving a customer without any response can itself be treated as a breach.
Applying incorrect conditions or timelines. Some businesses set withdrawal windows of 7 or 10 days on their websites when the law mandates 14 calendar days. Others add conditions the law does not permit. These clauses are void as a matter of law.
Misapplying the exceptions. The right of withdrawal does have legal exceptions, for example for digital content that has been downloaded with the user's express prior consent, or for personalised goods. But applying these exceptions incorrectly, or using them as a pretext to deny a right that does apply, is a serious infringement.
A well-known digital content platform was sanctioned by the consumer authority of an EU member state for making its subscription cancellation process deliberately convoluted. Regulators characterised the website's design as a dark pattern. The fine exceeded €500,000 and triggered a media campaign that caused serious lasting damage to the brand's reputation.
A Spanish online course platform received dozens of complaints to the Catalan Consumer Agency for refusing to honour the right of withdrawal for students who had requested cancellation within the statutory 14-day window. The company argued that access to digital content excluded the right — but without having obtained the user's explicit prior consent as the law requires. Outcome: enforcement proceedings and an obligation to refund all affected users in full.
A study by the Organisation of Consumers and Users (OCU) found that more than 40% of Spanish consumers who have had difficulty exercising their right of withdrawal never purchase from that business again. The damage is not limited to the administrative fine. It translates directly into lost customers, negative reviews, and long-term erosion of brand equity.
One of the areas under closest regulatory scrutiny across Europe in recent years is the use of dark patterns — deliberately confusing or frustrating design choices that make it harder for consumers to exercise their rights.
In the context of withdrawal, the most common offenders are the following.
Roach motel. Easy to subscribe, nearly impossible to cancel. The cancellation flow involves far more steps than the sign-up process.
Confirmshaming. Confirmation messages written to make users feel guilty for wanting to cancel. For example: "Are you sure you want to lose all your benefits?" set against a button reading "Yes, I want to cancel and give up my discounts."
Hidden cancellation. The cancellation option simply does not exist on the website, or is buried so deep as to be practically invisible, leaving the phone line as the only option — typically with long wait times.
Forced continuity. Subscriptions that renew automatically with no prior reminder and no clear information provided to the consumer at the time of sign-up.
The Digital Services Act and the Omnibus Directive have made these patterns a regulatory enforcement priority. Platforms that rely on them are exposed to inspections, enforcement proceedings, and fines that can reach 4% of their total annual global turnover.
Administrative fines. Spain's Autonomous Communities are responsible for sanctioning consumer protection infringements. Fines can range from €3,000 for minor violations to €100,000 or more for serious breaches, depending on the applicable regional legislation.
European-level sanctions. Under the Omnibus Directive, maximum penalties must amount to at least 4% of the infringer's annual turnover in the affected member state, or €2 million where turnover data is unavailable.
Void contract clauses. Any contractual clause that limits, excludes, or obstructs the exercise of the right of withdrawal is void as a matter of law and not binding on the consumer.
Class actions. Consumer associations are legally entitled to bring collective actions on behalf of groups of affected individuals, which can multiply the financial and reputational impact of a single infringement exponentially.
Reputational damage. Beyond formal sanctions, a well-documented public complaint on social media or a viral negative review can inflict brand damage that no administrative fine adequately captures.
✅ Do you inform consumers of their right of withdrawal before they complete their purchase, clearly and visibly?
✅ Does your website have an accessible online mechanism for initiating the withdrawal process without requiring a phone call or email?
✅ Does your cancellation flow involve an equal or smaller number of steps than your sign-up flow?
✅ Do you confirm receipt of the withdrawal request without undue delay?
✅ Do you issue refunds within a maximum of 14 calendar days of receiving the request?
✅ Are the exceptions to the right of withdrawal that you apply on your website the ones provided for by law, and have you obtained the user's explicit prior consent where required?
✅ Have you reviewed your website for dark patterns that may obstruct the exercise of the right of withdrawal?
⚠️ If you answered "no" or "not sure" to any of these questions, your business has an active legal risk that needs addressing sooner rather than later.
Step 1. Review your checkout flow. Make sure that at some point in the purchase process, ideally immediately before the final confirmation, the consumer receives clear information about their right of withdrawal, the 14-day window, and how to exercise it.
Step 2. Create a dedicated withdrawal or cancellation page. Set up a page accessible from the customer area, the order history, or the website footer that walks through the process step by step, with a form or button allowing the consumer to initiate it directly.
Step 3. Build the online mechanism. The consumer must be able to start the process without leaving your website. It can be a form, a button that automatically generates a request, or a guided flow in the customer area — but it must be online, clear, and fully functional.
Step 4. Set up automatic confirmation. The moment a consumer submits the request, they must receive a confirmation by email or on-screen notification acknowledging receipt and stating the timeframe within which they will receive their refund.
Step 5. Review your refund timelines. Make sure your internal processes allow you to execute refunds within a maximum of 14 calendar days of receiving the request. If you use third-party payment gateways, check their processing timescales.
Step 6. Train your customer service team. Anyone handling withdrawal requests must know the rules, the deadlines, and the correct procedures. A poor response to a legitimate request can easily escalate into a formal complaint.
Consumer protection and e-commerce compliance is complex, changes frequently, and has direct implications for your website design, your checkout flows, and your customer contracts.
Lawwwing is the tool built for digital businesses that want to comply with the law without needing to become experts in consumer law themselves.
📄 Always up-to-date legal documents. Automatically generates the correct legal texts for your withdrawal policy, tailored to your type of business and current legislation.
✅ A legally compliant cancellation button. Provides the right mechanism, with the flows and confirmations the law requires, integrated directly into your website.
🔔 Regulatory change alerts. Notifies you when the law changes so you're never caught off guard — and updates everything remotely so you don't have to lift a finger.
⚡ Fast implementation. No advanced technical or legal knowledge required. In just a few steps, your website goes from legal risk to full compliance.
Discover how Lawwwing can help your business →
The cancellation button or withdrawal button is not just another bureaucratic box to tick. It is the practical expression of a fundamental principle: consumers have the right to change their minds, and businesses have an obligation to make that easy, not difficult.
Businesses that treat legal compliance as an unavoidable overhead tend to cut corners. Those that treat it as an investment in trust, retention, and reputation tend to stand out.
The risk of not having a properly implemented withdrawal mechanism on your website is not hypothetical. It is real, it is growing, and it is being actively monitored by European and Spanish regulators. The cost of getting things right today is a fraction of the cost of a fine, a reputational crisis, or a class action tomorrow.
Tools like Lawwwing exist precisely to make that process agile, clear, and permanently up to date — so you never have to become a lawyer just to understand what your business needs to do.
🎬 Watch the video: The Withdrawal Button and Cancellation Rights — Everything You Need to Know →
Our companion video walks through the legal requirements visually, covers the most common mistakes, and shows you how to implement a compliant withdrawal mechanism on your website. Share it with your product and development team.
© 2026 Lawwwing · This article is for informational purposes only and does not constitute legal advice. Consumer protection legislation varies by jurisdiction and may have been updated since publication. Please consult a qualified legal professional for advice specific to your situation.
