Compliance
Do I need to state a right of withdrawal
What 13x checks
This is rule compliance.withdrawal-right in the public registry: Right of withdrawal is stated. It runs on every audit, against the pages we actually fetched, and its result is derived from the response rather than estimated.
- Surface
- Compliance
- Score weight
- 7 of the readiness score
- Scope
- Runs on every audited page
- Applies
- Only where the market or the page shape makes it relevant
Registry version 2026-07-30. Every rule is published, and the audit is deterministic — the same page produces the same finding every time.
The fix
The same text the audit hands you when this check fails on your own site.
A paid offer is present with no reference to a right of withdrawal or cancellation.
EU consumer law gives a 14-day withdrawal right on distance contracts, and you must inform the buyer before purchase. Failing to inform extends the period to twelve months, so this is not a formality.
Digital services can be excluded from the right, but only if the customer explicitly consents to immediate performance and acknowledges losing it — and that acknowledgement has to be presented at checkout, not buried in the terms.
What to add: a withdrawal policy page linked from the footer and from checkout, and at the payment step a clear statement of the right or of the acknowledged waiver.
13x does not generate legal text. eRecht24 and the EU Commission both publish model withdrawal instructions; this check verifies the topic is addressed somewhere reachable.
Does your site have this problem?
13x checks this and 112 others against your live URL in about 30 seconds. No account, and every finding comes with the fix for your framework.
No signup. Results in 30 seconds.
More compliance checks
- Does my site need a privacy policyPrivacy policy is linked
- Does my website need an ImpressumImpressum is linked and reachable
- My analytics fires before consentNo trackers fire before consent
- Do I need a cookie consent bannerConsent banner present when third-party scripts load
- Is loading Google Fonts from the CDN a GDPR problemNo fonts loaded from Google's CDN
- Does the privacy policy need to be called DatenschutzerklärungDatenschutzerklärung is a separate page