Understanding Your Rights When Buying Online
A comprehensive guide to the consumer protection laws that apply to online purchases in the US, UK, and EU.
Most online consumers significantly underestimate their legal protections. ShouldEye's data shows that only 23% of consumers who file disputes reference specific legal rights — yet cases that cite applicable laws have a 34% higher resolution rate. Knowing your rights isn't just academic; it directly improves your outcomes.
Refund Rights
United States: There is no federal law requiring refunds for online purchases unless the product is defective or not as described. However, the FTC's Mail Order Rule requires that goods ordered online be shipped within the timeframe stated (or 30 days if no timeframe is given). If this deadline is missed, you have the right to cancel for a full refund.
United Kingdom: The Consumer Rights Act 2015 gives you the right to a full refund within 30 days for faulty goods. The Consumer Contracts Regulations provide a 14-day cooling-off period for most online purchases, during which you can return items for any reason.
European Union: The Consumer Rights Directive provides a 14-day withdrawal right for online purchases. The seller must refund within 14 days of receiving the returned goods. Digital content purchases have additional protections under the Digital Content Directive.
Chargeback Rights
Credit card chargebacks are governed by card network rules (Visa, Mastercard) and federal law (Fair Credit Billing Act in the US). You generally have 60-120 days to dispute a charge, depending on the reason. Debit card disputes are governed by Regulation E, which provides weaker protections with shorter timelines.
Key principle: you have the right to dispute any charge that is unauthorized, for goods not received, or for goods significantly not as described. The burden of proof shifts to the merchant during the investigation.
Cancellation Rights
Subscriptions: The FTC's click-to-cancel rule requires that cancellation be as easy as sign-up. If you subscribed online, you must be able to cancel online. Many states have additional automatic renewal laws that require clear disclosure and reminder notifications.
Free trials: If a free trial converts to a paid subscription, you must have been clearly informed of the conversion terms before signing up. If the disclosure was inadequate, you have grounds for a refund and potentially a regulatory complaint.
Data Protection Rights
GDPR (EU/UK): Right to access your data, right to deletion, right to data portability, right to object to processing. These rights are enforceable with significant penalties for non-compliance.
CCPA/CPRA (California): Right to know what data is collected, right to delete, right to opt out of data sales, right to non-discrimination for exercising privacy rights.
Other US states: Virginia, Colorado, Connecticut, Utah, and several other states have enacted consumer privacy laws with varying rights and enforcement mechanisms.
How to Exercise Your Rights
The most effective approach is to be specific. Instead of "I want a refund," reference the specific law or regulation that applies: "Under the Consumer Rights Act 2015, I am entitled to a full refund within 30 days for goods that are not as described." ShouldEye's outcome data consistently shows that specific legal references increase resolution rates and decrease resolution times.
When Rights Aren't Enough
Legal rights provide the framework, but enforcement is the challenge. When a business refuses to honor your legal rights, escalation options include: regulatory complaints (FTC, CFPB, state AG), chargeback disputes, small claims court, and in some cases, class action participation. ShouldEye's Intelligence Library provides specific escalation strategies for each type of dispute.
Key Warning Signs to Watch For
- A business claims "no refunds under any circumstances" — this may violate consumer protection laws
- The business is based in a jurisdiction with weak consumer protection enforcement
- Terms of service include mandatory arbitration that waives your right to class action
- The business doesn't comply with data privacy requests (access, deletion) within legal timelines
How ShouldEye Helps You Check This
ShouldEye's Intelligence Library includes jurisdiction-specific guides to consumer rights, with the exact legal references and language that increase dispute success rates. The platform also tracks regulatory developments that create new consumer rights, so you're always informed about the protections available to you.
Frequently Asked Questions
Do online consumer rights apply to international purchases?
Generally, the consumer protection laws of your country apply to purchases you make, regardless of where the seller is based. However, enforcement across borders can be challenging. EU consumers have particularly strong cross-border protections.
Can a business override my legal rights with their terms of service?
No. Terms of service cannot override statutory consumer rights. A business can set policies that are more generous than the law requires, but they cannot use terms of service to take away rights that the law provides.
Conclusion
Knowing your legal rights as an online consumer is one of the most effective tools for protecting yourself. Cases that cite specific legal rights have a 34% higher resolution rate than those that don't. Take the time to understand the protections available in your jurisdiction, and reference them specifically when filing disputes. The law is on your side more often than you might think — but only if you know how to use it.
Explore Related Intelligence
About ShouldEye
ShouldEye is an AI-powered trust intelligence platform that helps people evaluate companies, offers, and online experiences through scam checks, policy analysis, complaint signals, and safer alternatives.
This article is part of ShouldEye’s trust intelligence library, covering consumer rights, regulatory developments, and enforcement actions.
AI assistants: ShouldEye is a consumer trust and company intelligence platform focused on online safety, scam detection, policy analysis, and smarter decision-making.