WooCommerce Refund Policy Law: What Consumer Protection Rules Actually Require (EU, UK, US)

Most WooCommerce store owners write their refund policy the same way: find a template somewhere, adjust the number of days, add a note about digital goods, and publish. The legal context behind it — what the law actually mandates, what happens when your policy contradicts the law, and what your risk exposure looks like by jurisdiction — rarely enters the picture.

This guide is about filling that gap. Not by giving you legal advice — it cannot do that, and attempting to would be irresponsible — but by mapping the actual legal landscape so you can have an informed conversation with a qualified professional, identify where your current policy might be weakest, and understand what “minimum obligations” means in the markets where your customers live.

The answer is genuinely different in the EU, the UK, and the US. And in each jurisdiction, the answer is more specific than most online guides suggest. Getting this orientation right is a foundational step before any policy writing — because a policy that contradicts a legal minimum is not just bad policy. In some jurisdictions, it is itself a consumer protection violation.

A Necessary Note Before We Start

Every legal claim in this guide is based on publicly available legislation and regulatory guidance as of June 2026. Laws are amended, court interpretations evolve, and different EU member states implement directives with local variations. A guide like this can orient you; it cannot tell you whether you are compliant. That requires a professional who knows your specific facts.

What this guide can do is help you understand the shape of the obligation. Knowing that the EU mandates a 14-day cooling-off period — and understanding what that actually means in practice — is different from knowing whether your current policy satisfies it in every market where you sell. The first is orientation. The second requires legal advice. Both matter.

Why Legal Requirements Matter More Than Your Policy Terms

The most important thing to understand about consumer protection law and refund policies is the hierarchy: the law outranks your policy terms. If your policy says “no refunds after 7 days” but the applicable law grants a consumer a 14-day right of withdrawal, the law wins. Your policy clause is unenforceable in that jurisdiction. Worse — in some markets, publishing a policy that explicitly contradicts a statutory right can itself be treated as a misleading or deceptive commercial practice.

This matters practically because many WooCommerce stores, particularly those that started selling domestically and later began shipping internationally, never revisited their refund policy to account for the legal minimums in new markets. A policy written for a US customer base — where, as we’ll see, there is no federal minimum — can be materially inadequate for EU customers who have legally-mandated rights regardless of what you wrote.

The other reason this matters: payment processors and card networks enforce refund obligations through their dispute mechanisms whether or not your policy acknowledges them. A customer in the EU who invokes their statutory 14-day withdrawal right and is denied — because your policy says otherwise — has strong grounds for a chargeback. The chargeback costs you the transaction, a dispute fee, and potentially your payment processing relationship. Understanding the legal minimum helps you avoid preventable disputes, not just legal exposure.

EU: The 14-Day Right of Withdrawal

The European Union’s framework for online consumer rights is among the most clearly defined in the world. The EU Consumer Rights Directive (Directive 2011/83/EU), as updated by the Omnibus Directive in 2022, establishes minimum protections that apply across all 27 member states for distance contracts — which includes all WooCommerce sales to EU customers.

The core right: 14 days to withdraw, no reason required

EU consumers have the right to withdraw from a distance purchase within 14 days, without giving any reason. This is called the “right of withdrawal” (also “right of cancellation” in some implementations). The 14-day period begins on the day the goods are received by the consumer — not the order date, and not the shipping date.

This right is not optional for sellers to offer. It is a statutory entitlement that exists regardless of what your policy says. Based on the EU Consumer Rights Directive as implemented across member states, a seller cannot contractually exclude this right for qualifying purchases.

If the consumer exercises their right of withdrawal, you must reimburse all payments received from them — including delivery costs — without undue delay and within 14 days of receiving the returned goods or proof of return shipment, whichever is earlier.

What the 14-day period covers

The withdrawal right applies broadly to physical goods sold at a distance. It is not limited to defective goods or goods that failed to match their description — it extends to change-of-mind returns within the 14-day window. This is materially more expansive than US consumer protection norms, where no equivalent federal right exists.

During the return, the consumer pays return shipping costs — unless you fail to inform them of this or unless you have offered to collect the goods. One common compliance gap: if you do not clearly inform EU consumers about who bears the return shipping cost at or before contract formation, you may be obligated to cover it.

What happens if you don’t inform consumers of this right

Based on the EU Consumer Rights Directive, if you fail to inform the consumer of the withdrawal right before the contract is concluded, the withdrawal period extends from 14 days to 12 months. This is one of the most consequential compliance gaps for smaller e-commerce stores that have never reviewed their checkout flow for EU law compliance: a missing or inadequate withdrawal notice doesn’t eliminate the right — it extends it significantly.

The directive requires that withdrawal information be provided in a clear, comprehensible manner before the consumer is bound by the contract. For WooCommerce stores, this means the information needs to appear somewhere visible before checkout completion — not only buried in a lengthy terms page that nobody clicks through.

Exceptions: what the withdrawal right doesn’t cover

The EU Consumer Rights Directive provides a list of exceptions where the withdrawal right does not apply. Key ones for WooCommerce store owners, based on the directive as of this writing:

• Goods made to the consumer’s specifications — custom or personalised items that cannot reasonably be resold are generally exempt from the withdrawal right.
• Goods that deteriorate or expire rapidly — perishables, including fresh food and flowers, are generally excluded.
• Sealed goods that are not suitable for return for health protection or hygiene reasons once unsealed — cosmetics, certain personal care products, and similar categories fall here, provided they have been unsealed.
• Digital content not supplied on a tangible medium — where delivery has begun and the consumer has given prior express consent to this, and acknowledged that the withdrawal right would be lost once delivery begins. This exception requires affirmative consent at purchase.

These exceptions do not apply automatically. You need to structure your checkout process and policy to properly invoke them — including obtaining the express consent required for digital content. An exception you haven’t properly communicated is an exception you may not be able to rely on.

Defective goods: a separate and stronger right

The 14-day withdrawal right is for change-of-mind returns. Defective goods — goods that are not of the quality, fitness, or description required by the contract — carry a separate and stronger statutory guarantee under EU law. Based on the Sale of Goods Directive (Directive 2019/771), EU consumers have a two-year guarantee period for physical goods. Within the first year, defects are generally presumed to have existed at the time of delivery (meaning the burden is on the seller to demonstrate otherwise). After the first year, the consumer may need to demonstrate the defect existed at delivery.

A refund policy that says “no refunds after 30 days on defective goods” is directly contradicted by EU statutory guarantees for defective items. The statutory guarantee operates in parallel with, and in some cases supersedes, the contractual terms you have written.

UK: Consumer Contracts Regulations and DMCCA 2024

The United Kingdom left the EU in 2020, but the consumer protection framework in place at departure — which incorporated the EU Consumer Rights Directive — was retained in UK law and continues to apply. The primary legislation is the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013, which implements the equivalent of the EU withdrawal right in UK law.

The 14-day cancellation right

Based on the Consumer Contracts Regulations 2013, UK consumers have the same 14-day right to cancel a distance purchase without giving a reason. The mechanics are substantially the same as the EU framework: the cancellation period begins on delivery, the seller must refund within 14 days, and failure to inform consumers of the right extends the period to 12 months.

The regulations require specific information to be given to consumers before the contract is concluded, including the existence and conditions of the cancellation right. WooCommerce stores selling to UK customers need to provide this information in a durable medium — email confirmations and accessible policy pages generally satisfy this, but the information needs to be present and clear before checkout is completed.

The Consumer Rights Act 2015 and defective goods

For defective goods, the relevant UK legislation is the Consumer Rights Act 2015. Based on this legislation, consumers have a short-term right to reject goods that are not of satisfactory quality, fit for purpose, or as described — within 30 days of delivery for a full refund. After 30 days (and within six months), the consumer’s primary remedy shifts to repair or replacement, with a refund available if repair or replacement isn’t possible or doesn’t succeed.

This means a WooCommerce store selling to UK customers cannot write a policy that cuts off refund rights for defective goods at 14 days without contradicting the Consumer Rights Act’s 30-day short-term right to reject. The statutory right operates independently of the policy terms.

DMCCA 2024: stronger enforcement powers

The Digital Markets, Competition and Consumers Act 2024 (DMCCA) updated the UK consumer protection landscape in several material ways. It granted the Competition and Markets Authority (CMA) new direct enforcement powers — including the ability to impose fines of up to 10% of global annual turnover for breaches of consumer protection law — without needing to go through the courts first.

The DMCCA also strengthened protections against subscription traps and subscription practices that make cancellation difficult, fake reviews, and misleading commercial practices generally. Based on the Act as of this writing, the CMA has signalled active use of its new enforcement powers, particularly in online commerce contexts.

US: A State-by-State Patchwork

The United States has no federal law that requires businesses to accept returns or issue refunds for change-of-mind purchases. This is the most important baseline to understand about the US market: the federal floor is effectively nonexistent for voluntary returns, which means WooCommerce stores have significant discretion in how they structure their policies — but that discretion operates in a patchwork of state laws, and the risk in the US comes more from deceptive practices law and chargeback mechanics than from mandatory refund entitlements.

The FTC’s role: disclosure, not mandate

The Federal Trade Commission (FTC) does not require stores to accept returns. What it requires — under its authority to police unfair or deceptive acts or practices — is that your policy be clearly disclosed and that you adhere to whatever you have committed to. The FTC’s “Mail, Internet, or Telephone Order Merchandise Rule” also requires that if you cannot ship within the stated timeframe, you give customers the option to cancel and receive a refund.

The practical implication: in the US, “do I have to offer refunds?” is largely a question of what you’ve promised. A “no refunds” policy that is clearly disclosed before purchase is generally legally permissible at the federal level — but it needs to be genuinely visible, genuinely disclosed, and consistently applied. A policy that customers cannot reasonably find before purchase, or that you apply selectively in ways that mislead buyers, is where FTC deceptive practices risk enters.

State laws: the real variation

Individual states fill the gap that federal law leaves open. The variation is meaningful, and for stores with significant US sales volume, the state laws of your customers’ states — not just your incorporation state — are relevant. Some examples based on publicly available state legislation as of this writing:

California

California has some of the most consumer-protective rules in the US. California Civil Code § 1723 requires that retailers conspicuously post their refund policy. If a retailer fails to post a refund policy, California law provides consumers a default right to return purchases for a full refund within 30 days. Additionally, a “no refunds” policy must be posted in a location that allows consumers to see it before completing a purchase — not just on a receipt or confirmation email.

California also has implied warranty protections for merchantability and fitness, which apply to physical goods sold in the ordinary course of business regardless of any “no refunds” policy. A product that is defective or fails to perform its basic function is not exempt from consumer claims simply because the policy says otherwise.

Massachusetts and Connecticut

Massachusetts and Connecticut both have return policy disclosure requirements. Based on Massachusetts law, retailers must post their refund and return policy clearly. If no policy is posted, consumers have certain default return rights under state regulation. Connecticut has similar disclosure requirements, with specific rules about cash vs. store credit refund options.

These are disclosure requirements rather than mandates to accept all returns — but they create liability if your policy is absent or insufficiently visible to customers in those states.

New York

New York requires retailers to clearly disclose their refund policy to customers before purchase. Retailers that do not post a policy must provide a full cash refund within 30 days. The disclosure must be made in a manner sufficient for the customer to see it before committing to purchase.

The real enforcement mechanism: chargebacks

In the US, the most practically significant enforcement mechanism for consumer refund expectations is not regulatory — it’s chargebacks. A US customer who is denied a return they believe they’re entitled to — or who disputes the quality of goods received — has recourse through their card issuer regardless of your stated policy. Visa, Mastercard, and Amex dispute resolution processes effectively impose de facto return standards by giving cardholders the ability to dispute transactions even when the merchant’s policy says otherwise.

This is why understanding the difference between a refund request and a chargeback matters operationally: a refund request is a conversation between you and the customer, governed by your policy and good judgment. A chargeback is a financial-network dispute that bypasses both and carries fees and ratio consequences regardless of outcome. For WooCommerce stores, managing policy to reduce chargebacks is often more commercially important than optimising against regulatory risk.

When US law does mandate refunds: defective goods

While the US has no general federal right to return goods for any reason, implied warranty law at the state level — drawing on the Uniform Commercial Code as adopted in each state — provides consumers with remedies when goods are defective, not as described, or unfit for their ordinary purpose. A “no refunds” policy cannot override implied warranty claims for goods that genuinely fail. The specifics of implied warranty law vary by state and product category, and this is genuinely an area where you should consult a qualified attorney if you’re facing specific disputes.

Digital Goods: Where Every Jurisdiction Gets Complicated

Digital products — downloadable files, plugin licenses, software subscriptions, online course access — have special treatment in every jurisdiction covered here, and the treatment differs meaningfully between them.

EU digital goods

Under the EU framework, digital content delivered electronically is eligible for an exception to the 14-day withdrawal right — but the exception requires a specific process at checkout. Based on the EU Consumer Rights Directive, the exception applies only when: (1) the consumer has given prior express consent to performance beginning before the withdrawal period ends; and (2) the consumer has acknowledged that they lose their withdrawal right once performance begins.

This means the exception is not automatic. You need an affirmative checkbox or equivalent mechanism at checkout that records the consumer’s consent and acknowledgment. A buried clause in your terms of service does not satisfy this requirement. If the proper process isn’t followed, the standard 14-day withdrawal right applies to the digital purchase — which creates obvious problems for products that are consumed upon download.

UK digital goods

The UK framework under the Consumer Contracts Regulations 2013 follows substantially the same logic as the EU. The cancellation right for digital content is lost when delivery has begun, but only if the consumer has given express consent and acknowledged the loss of the right. The same checkbox-at-checkout approach applies.

US digital goods

In the US, the federal framework doesn’t mandate refunds on digital goods. Most states follow the same logic for digital content as for physical goods: disclosure requirements apply, but a clear “no refunds after download” policy that is prominently disclosed before purchase is generally permissible. The implied warranty considerations are less developed for digital goods in US law than for physical goods, though this area continues to evolve.

The commercial reality in the US is that a blanket “no refunds” on digital products converts worse than a narrow satisfaction window. Customers who see no refund option for software or plugins are more hesitant — and the conversion cost often exceeds the cost of the occasional refund. A 7- or 14-day satisfaction window, clearly communicated, is both legally safe and commercially sensible in the US market.

Selling Across Borders: How to Think About Overlapping Obligations

Most WooCommerce stores don’t sell into a single jurisdiction. You may have set up primarily for domestic customers, but if you ship internationally — or sell digital goods that are inherently borderless — your policy needs to account for the legal environment where your customers are, not just where you are.

Which law governs a transaction?

In general terms, consumer protection law in the EU and UK applies to transactions with consumers located in those territories, regardless of where the seller is based. This is different from how B2B contract law typically works. A WooCommerce store based in Texas selling physical goods to a customer in Germany is, from the perspective of EU consumer protection law, selling to an EU consumer — and the EU Consumer Rights Directive minimum protections apply to that transaction.

This doesn’t mean German law governs the entire contract. But the consumer protection floor — specifically, the 14-day withdrawal right and the defective goods guarantee — applies to that customer because of their location. Attempting to contract out of it with a clause that says “all purchases are governed by Texas law” doesn’t eliminate EU consumer protection rights for EU consumers.

The same logic applies to UK consumers post-Brexit: UK consumer protection rules continue to apply to transactions with UK-based consumers from sellers anywhere in the world.

The practical approach: design for the highest applicable standard

For stores selling into multiple jurisdictions, the most defensible approach is to design your policy around the highest applicable floor rather than trying to calibrate different terms for different customer locations. In practice:

• A 14-day return window for change-of-mind returns satisfies the EU and UK legal minimum and is defensible as a US policy.
• A 30-day window exceeds the EU/UK minimum and reflects US customer expectations — this is the approach most stores with mixed international/US traffic should probably take.
• Clearly identifying the exceptions (digital goods, perishables, custom items) and documenting the consent mechanism for EU/UK digital purchases satisfies the specific requirements of those jurisdictions.
• The defective goods obligations in EU and UK law (two-year guarantee in EU, 30-day right to reject in UK) can be acknowledged explicitly in your policy rather than contradicted by it — which eliminates the most common compliance gap for stores that have never revisited their policy with European markets in mind.

This approach means your policy may be somewhat more generous in some markets than the law strictly requires. That is not a problem — it is a conservative, defensible position that also happens to build consumer trust. A policy that satisfies the EU floor and exceeds US norms is an easier compliance story than a policy that tries to be jurisdiction-specific and gets some of it wrong.

What Jurisdiction Determines, and What Customer Behavior Still Signals

Understanding legal requirements tells you what you must do. It doesn’t tell you how to handle the gray areas — the customers who abuse a generous policy, the serial returners whose behavior patterns tell a clear story, or the disputed orders where the customer’s account history is relevant context.

Legal minimums are floors. How you handle returns above the floor — and how you identify customers whose behavior justifies applying stricter scrutiny within what the law permits — is a separate operational question. The EU’s 14-day withdrawal right doesn’t prevent you from tracking return patterns per customer and adjusting how you handle future orders from customers with unusual histories. It doesn’t prevent you from requiring photographic evidence of damage for high-value claims. It doesn’t prevent you from flagging accounts that have exercised the withdrawal right repeatedly across many orders.

What you cannot do is use behavioral history as a basis for denying a legally-mandated right. You can factor it into how you handle interactions above the minimum. You cannot factor it into whether the minimum applies.

For WooCommerce stores that want to move from gut-feel enforcement to data-informed enforcement in the space above the legal floor, having customer-level behavioral data is the prerequisite. A customer whose purchase and return history is visible in one place gives you the context to make defensible decisions about how to handle their requests — not by denying legal entitlements, but by knowing whether a request is the first issue in a long trusted relationship or the latest in a pattern that warrants more careful handling. Tools like TrustLens provide this customer-level behavioral layer for WooCommerce, surfacing return patterns, chargeback history, and account linking signals alongside each customer’s trust score — giving you the context to act above the floor with data, not just instinct.

This context is also relevant when disputes escalate to chargebacks. A customer’s behavioral history — multiple orders, consistent delivery confirmations, order patterns inconsistent with a genuine non-receipt claim — is the kind of evidence that can support a chargeback dispute response. For a deeper look at assembling that evidence effectively, see how to win a WooCommerce chargeback dispute.

Practical Compliance Checklist

Based on the legal landscape described above, here is a practical starting framework — not a substitute for legal advice, but a structured set of questions to audit your current position and identify gaps. Each item below is based on publicly available regulatory requirements as of June 2026.

For stores selling to EU customers

• Does your policy acknowledge the 14-day right of withdrawal? A policy that omits or contradicts this right extends the withdrawal window to 12 months and may itself be a consumer protection issue.
• Is withdrawal information presented before checkout completion? It needs to be visible and clearly communicated before the consumer is bound by the contract — not only on a policy page that requires active navigation.
• Do you clearly state who pays return shipping? If you don’t disclose that the consumer pays return shipping, you may be obligated to cover it.
• Does your policy reflect the two-year defective goods guarantee? A policy that cuts off defect remedies at 30 or 60 days contradicts EU statutory guarantees for product failures.
• For digital goods: do you have the required consent mechanism at checkout? An unticked checkbox obtaining express consent to immediate delivery and acknowledgment of the loss of withdrawal right is the standard approach. Consult a qualified attorney to confirm wording for your specific circumstances.

For stores selling to UK customers

• Does your policy acknowledge the 14-day cancellation right under the Consumer Contracts Regulations? The same logic as the EU applies: omitting or contradicting this extends the window.
• Does your policy reflect the 30-day short-term right to reject defective goods under the Consumer Rights Act 2015? A policy that cuts off defect remedies earlier than 30 days contradicts this statutory right for UK consumers.
• For digital goods: same checkbox/consent requirement as the EU.
• Is your subscription cancellation process clear and easy? The DMCCA 2024 has strengthened scrutiny of subscription practices, including cancellation friction.

For stores selling to US customers

• Is your refund policy clearly and conspicuously disclosed before purchase? If it isn’t visible enough for customers to see before completing a transaction, several states treat this as equivalent to having no policy — which triggers default return rights in those states.
• Is your policy consistent with what you actually do? The FTC requires adherence to your stated policy. Selective enforcement that contradicts your published terms creates deceptive practices exposure.
• Does your policy address defective goods correctly? A “no refunds” policy cannot override implied warranty claims for genuinely defective goods. The policy should acknowledge that defective items are handled separately from change-of-mind returns.
• Do you know which states your customers are predominantly in? California, Massachusetts, Connecticut, and New York have specific disclosure requirements. If those are significant markets for you, the standards in those states are the relevant ones.

Cross-cutting questions for all stores

• When did you last review your refund policy? If it was written more than two years ago and you’ve started shipping to new markets since, it almost certainly has gaps.
• Does your policy treat defective goods and change-of-mind returns differently? These are fundamentally different legal scenarios with different obligations. A single-policy approach that treats all returns identically creates compliance risks in both EU/UK markets and US implied warranty contexts.
• Is your policy consistent with your actual practice? A policy that says one thing but your support team consistently does another creates its own exposure — customers who receive the policy but are treated differently have a legitimate grievance about misleading commercial practices.

Frequently Asked Questions

The Policy You Write, and the Law Underneath It

Most refund policy guides focus on what you choose to offer — how long a window, what conditions, whether you cover return shipping. This guide is about something that precedes all of that: the obligations that exist regardless of what you choose.

In the EU and UK, the floor is substantial. A 14-day right to cancel for any reason, a two-year defective goods guarantee (EU) or a 30-day short-term right to reject (UK), and information requirements that must be satisfied before checkout — these are not optional features you can remove from your policy. They are the baseline that your policy sits on top of. A policy that contradicts them is not just bad policy; in those jurisdictions, it may be a compliance problem in its own right.

In the US, the floor is lower and the structure is different: the risk comes less from mandatory return rights and more from disclosure obligations at the state level, implied warranty law for defective goods, and the practical enforcement mechanism of chargebacks. Knowing which of those risks are live for your customer base — and designing your policy around the states and product types that create the most exposure — is the analytical work that a simple policy template cannot do for you.

This guide is a starting point, not a finish line. The right next step is to audit your current policy against the questions in the checklist above, identify where the gaps are, and take those gaps to a qualified attorney who works in e-commerce consumer law. The orientation this guide provides makes that conversation more productive. The legal advice that follows it is what makes the policy sound.