What the EU withdrawal-button law actually requires

Directive (EU) 2023/2673 inserted a new Article 11a into the Consumer Rights Directive 2011/83/EU, and it has applied EU-wide since 19 June 2026. Germany transposed it as § 356a BGB — the one most merchants know by its nickname, the Widerrufsbutton. Several member states attach fines, and in some, non-compliance can extend the withdrawal period to 12 months and 14 days.

Here is the requirement, split into the pieces an implementation has to satisfy.

1. A labelled button, prominent and always available

There must be a button or link labelled "withdraw from contract here" (or an unambiguous equivalent in the market's language). It has to be prominent, and it must be continuously available for the entire withdrawal period — not hidden behind an account page or a help-desk form.

2. Reachable without a login

This is the part Shopify's native features miss. The function must be reachable without the consumer logging in. Guest-checkout buyers never created an account, so a feature that requires sign-in simply doesn't serve them.

3. A form with the contract details

A form where the consumer provides or confirms their name, the contract/order details, and the contact address at which they want to receive the acknowledgement.

4. A separate "confirm withdrawal" step

After the form, a separate step labelled only "confirm withdrawal" (or equivalent). Two deliberate actions — the form, then the confirmation — never collapsed into one.

5. An acknowledgement on a durable medium

An acknowledgement of receipt sent without undue delay on a durable medium (an email the consumer can store), containing the content of the withdrawal and the date and time of submission.

What is out of scope

The withdrawal right doesn't apply to every contract — bespoke goods, perishables, and sealed hygiene goods once unsealed, among others. Partial withdrawal (some items of an order, not all) must be possible but is not required.