The Consumer Rights Directive: A Merchant Overview

If you sell to consumers in the EU, one piece of law shapes almost everything about how your checkout, product pages, and returns must work: the Consumer Rights Directive (CRD). It's the baseline rulebook for distance selling across all member states, and it applies whether you're a one-person Shopify store or an established brand.

This is a high-level map — not every clause, but the duties that actually change what you build and how you sell.

What the CRD is and who it covers

The CRD harmonizes consumer-protection rules across the EU for contracts between traders and consumers, with particular focus on distance contracts (anything sold online, by phone, or off-premises). If your buyer is a consumer — a private individual, not a business — and they're in the EU, you're in scope.

Because it's a *directive*, each member state transposes it into national law, so details vary. But the core obligations below are consistent everywhere.

Duty 1: Pre-contract information

Before the customer commits, you must give them clear, comprehensible information. This is the biggest bucket of obligations and the one most stores under-deliver on. It includes:

• The main characteristics of the goods.
• The total price including taxes, plus all delivery and any additional charges.
• Your identity and contact details — trading name, geographic address, email.
• Delivery arrangements and the time by which you'll deliver.
• The right of withdrawal — its existence, conditions, time limits, and how to exercise it, including the model withdrawal form.
• Any exceptions to the right of withdrawal that apply.
• The existence of the legal guarantee of conformity for goods.

If you fail to disclose certain items — most notably return shipping costs or the withdrawal right itself — the consumer isn't liable for those costs, and the withdrawal window can extend substantially.

Duty 2: The right of withdrawal

This is the headline consumer protection. For most distance sales, the shopper gets 14 days to withdraw from the contract without giving any reason.

The essentials:

• The window runs from when the consumer receives the goods (or the last item, for split deliveries).
• If you fail to inform them of the right, the period can extend by up to 12 months.
• Once they withdraw, you refund within 14 days, to the original payment method, including standard outbound delivery.
• You may withhold the refund until you receive the goods back or get proof of dispatch.
• Certain goods are exempt — personalized/made-to-order items, sealed hygiene goods once opened, perishables, and more.

For merchants who want this handled properly at the storefront level, the Blockly — Right of Withdrawal app is built specifically around presenting compliant withdrawal information and the model form to EU shoppers.

Duty 3: The order button must say the right thing

A small rule with outsized consequences. When placing an order triggers a payment obligation, the button (or equivalent) must be labeled unambiguously — with words like "Order with obligation to pay" or an equally clear phrase.

If the label isn't clear, the consumer isn't bound by the contract. A vague "Complete" or "Continue" on the final pay step is a genuine risk. This is one of the cheapest fixes in all of EU compliance, and one of the most commonly missed.

Duty 4: Delivery and passing of risk

Unless agreed otherwise, you must deliver without undue delay and within 30 days. If you miss it and don't deliver after the customer sets a further reasonable deadline, they can cancel and get a full refund.

The risk of loss or damage passes to the consumer only when they (or a carrier *they* chose) take physical possession. If the parcel is lost in transit by a carrier you selected, that's on you — not the customer.

Duty 5: No hidden charges or pre-ticked boxes

The CRD bans a few dark patterns outright:

• Pre-ticked boxes for paid add-ons. Extras must be opted into actively, not defaulted on.
• Excessive fees for payment methods beyond your actual cost of accepting them.
• Premium-rate phone lines for post-sale customer contact about the contract.
• Charges the consumer didn't expressly agree to before ordering.

How the pieces fit together

Think of the CRD as three phases of the customer relationship:

1. Before the sale — full pre-contract information, honest total pricing, clear withdrawal terms.
2. At the sale — an unambiguous pay button, no pre-ticked extras, express consent to every charge.
3. After the sale — deliver in time, honor the 14-day withdrawal, refund correctly, stand behind the legal guarantee.

Get all three right and you've covered the backbone of EU distance-selling compliance. Most stores nail the middle phase (checkout works) but leak on the first and third — thin pre-contract info and shaky withdrawal handling.

Where to start

If you're auditing an existing store, work in this order:

• Fix the pay button label first — fastest fix, real legal weight.
• Audit your withdrawal information — is the right, the timeline, and the model form actually presented?
• Check your pricing disclosure — are delivery costs and taxes shown before the commit step?
• Review your returns flow against the 14-day refund and withholding rules.

*This is general information, not legal advice; the CRD is transposed differently across member states, so confirm specifics with a qualified professional.*

The CRD isn't a trap — it's a fairly predictable set of duties, most of which also happen to make for a more trustworthy store. Customers who see clear prices, a clear pay button, and a clean returns promise convert better, not worse.

If withdrawal handling is the piece you're least sure about, that's the natural place to tighten things up next.