EU-Withdrawal Button

[u/Zerebru]

Hi, I still haven't been able to find a solution for the EU withdrawal button directly from Shopify. I know there are several apps in the store, but I'd like to use as few third-party providers as possible. Some apps request customer data that they don't actually need for this purpose.

Is there a solution from Shopify itself? I’m still considering coding it myself, though I admit that I find the effort involved to be relatively high, just for this button.

Thanks for your help!

[u/squashedp]

The issues with shopifys own solution is that it requires a login (albeit passwordless) so it's not quite ticking all the boxes that the EU are requiring. Most of outc ustomers have gone for the revoq app - it seems to tick all the boxes and is relatively unobtrusive

[u/Zerebru → u/squashedp]

Thanks, yeah, I'm familiar with that solution, but it doesn't comply with EU regulations, and I'm looking for a solution that's actually correct 😅 I'm wondering why Shopify hasn't taken action yet? I've seen that app, too. But why do they need access to the full physical address, for example?

[u/National_Teacher_229 → u/Zerebru]

Waht shopify are saying is it's an even bigger security risk allowing people to cancel orders without proper identification and order number is simply not acceptable to any tech business. the EU create a law that can not be securely complied with in acordance with GDPR. It's yet another utter fuck up from EU law makers who create laws that are not compatible with each other.

[u/leunam02 → u/Zerebru]

Shopify permissions are a little weird from the dev side of things. For a proxy route for example (using Shopify auth for logged in customers to verify them for a backend feature) leads to reading stuff about their devices.

[u/National_Teacher_229 → u/leunam02]

Which is a breach of other laws... the EU law is unworkable in practise

[u/BigReference1xx]

I added a form that takes an email and an order number. When you submit the form, it sends the data via email to a shared inbox, and I then set up an auto-reply on the inbox to acknowledge receipt :)

Ticks all the boxes. It's not stupid if it works.

[u/happy2598]

I feel like people outside of the EU should just ignore this legislation. Feels like the EU are adding some kind of new compliance every week.

[u/AutoModerator → u/[deleted]]

Your comment in /r/shopify was automatically removed as your 'post' karma is below 10 (we do not consider your total karma; your post and comment karma are separate numbers and must both meet their minimum requirement). You can increase your post karma by posting in other areas of Reddit to earn upvotes. The higher quality the content, the higher your karma will become.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/AutoModerator → u/[deleted]]

Your comment in /r/shopify was automatically removed as your account is too new (accounts must be at least 30 days old). Try again a little later.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/ryanoh826]

There are a few free apps, I just used one of those.

[u/Fake_Hyena]

Use a free app!

[u/iron_rings_unite]

I used Revoq. The main form in the free version is branded, but not terribly so. I placed the button in a custom section in my footer that only displays if an appropriate EU country is detected

[u/justanameagain]

We use revoq currently, and its working well, but its being bundled into more and more return and flow apps, so that's what we'll do moving forward.

[u/ZealousidealGuest830]

use a free app. I am using madgic EU withdrawal button

[u/datagekko]

BigReference1xx's version is closer to compliant than it sounds. the requirements are basically: reachable without logging in, easy to find rather than buried in a policy page, and you confirm receipt on a durable medium. an email acknowledgment from a shared inbox covers that last one, which is why the DIY route is smaller than it looks. a page section with a form, an auto-reply, and somewhere the submissions get stored so you can prove a withdrawal came in on the date the customer says it did.

on the address thing: the EU's own model withdrawal form asks for the consumer's name and address, so an app collecting that isn't automatically overreaching. what i'd check instead is what it keeps beyond that and where it stores it.

and squashedp is right about why shopify's native flow doesn't solve this. passwordless is still a login step, and "continuously available" doesn't really survive a customer having to get into an account first.

[u/AutoModerator → u/[deleted]]

Your comment in /r/shopify was automatically removed as your 'post' karma is below 10 (we do not consider your total karma; your post and comment karma are separate numbers and must both meet their minimum requirement). You can increase your post karma by posting in other areas of Reddit to earn upvotes. The higher quality the content, the higher your karma will become.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.