Online Withdrawal Module

The module is fully optimized to comply with the EU 2023/2673 directive and the modified Hungarian 45/2014. (II.26.) Korm. rendelet legal frameworks. It provides retail B2C shoppers with a fully digital, legally compliant method to exercise their 14-day right of withdrawal. Furthermore, it instantly emails an official confirmation to the shopper, fulfilling the strict legal requirement of providing verification on a "durable medium".

To prevent malicious scripts from flooding your order records, the extension features full integration with Google reCAPTCHA v2 and v3 (including checkbox and invisible variants). The reCAPTCHA protection automatically binds to the guest withdrawal form via an active server-side Observer that validates the validation token before any data hits your tables. Logged-in customer forms are similarly validated using an Alpine.js framework.

The frontend interface dynamically filters available transactions to protect store owners from invalid requests. An order will only display in the customer's selection dropdown if it satisfies three strict criteria: it belongs securely to their active profile, it hasn't exceeded the legal Withdrawal Period (e.g., 14 days from purchase), and its current order state perfectly matches the Allowed Order Statuses set in your system configuration (typically processing or complete).

The workflow gracefully syncs the withdrawal records with Magento's native sales engine:

• On Customer Submission: The system flags the order with a dedicated withdrawal_requested state tag.
• On Admin Approval: The order status transitions automatically to withdrawal_approved, a history log is pinned, and a confirmation email fires to the client.
• On Admin Rejection: The system reverts the order status back to its original baseline state, writes your administrative rejection notes into the order history logs, and alerts the customer via email with your written justification.

To eliminate tedious back-and-forth searching within the Magento backend, the module introduces seamless cross-referencing deep links. When viewing an active withdrawal case profile, the order increment ID functions as a direct hyperlink to the default Magento Sales > Orders details layout. Conversely, the default Magento order view page injects a dedicated Withdrawal Request right-hand sidebar panel with a direct link back to the processing workspace.

Yes, it is built out-of-the-box for modern headless commerce frameworks. The extension implements a native GraphQL mutation layer (requestWithdrawal) designed to easily wire into Hyvä, custom PWA storefronts, or decoupled frontends. Additionally, it exposes complete REST API endpoints (POST /V1/withdrawal/request), making it incredibly straightforward to sync incoming requests with external enterprise ERP or CRM workflows.

Yes, the entire configuration stack is fully scoped at the Store View level. This lets you toggle Enable Module = Yes for your consumer-facing retail B2C Store Views while setting it to No on wholesale B2B Store Views. When disabled for a specific view, the frontend routes gracefully default to a 404 page, and the API calls automatically throw an input exception.

By default, transactional notification emails are processed synchronously right after a request is successfully committed to the database. If your primary SMTP server drops, the request record remains perfectly intact, though the notification will fail to dispatch. For high-volume environments, it is strongly recommended to enable asynchronous email processing by leveraging Magento’s native Magento_MessageQueue database pipeline to guarantee message delivery.