Digital Products
Selling your Digital Products with CheckoutJoy
Digital Products
CheckoutJoy supports selling and delivering digital products — courses, eBooks, downloads, memberships, webinars — across all your favourite host platforms (Kajabi, Thinkific, Teachable, LearnWorlds, Kartra, Systeme.io) and via standalone hosted checkouts.
Selling digital products into the EU — required consent flow
If you sell digital content (downloads, online courses, software, instant access to a member area) to consumers in the EU, the Consumer Rights Directive generally gives the buyer a 14-day right of withdrawal. For digital content that's delivered immediately, that withdrawal right can be waived — but only if the buyer:
- Expressly consents to immediate delivery before the 14-day period expires, and
- Acknowledges that by accepting immediate access they lose their right of withdrawal.
Both pieces of consent must be captured at the point of purchase, with the exact wording shown to the buyer recorded as evidence.
How to configure this on CheckoutJoy
Add two consent checkboxes to the checkout using the custom-fields feature on your checkout page:
| Checkbox | Required? | Pre-checked? | Suggested wording |
|---|---|---|---|
| Immediate-delivery consent | Required | Unchecked | "I expressly consent to immediate delivery of the digital content before the 14-day withdrawal period expires." |
| Withdrawal-right acknowledgement | Required | Unchecked | "I acknowledge that by receiving immediate access, I lose my statutory right of withdrawal." |
Both must be:
- Required, so checkout cannot complete unless they're ticked.
- Unchecked by default, so the buyer actively opts in (pre-ticked boxes are not considered valid consent under EU rules).
The buyer's value (true/false), the exact wording shown at the time of purchase, and the submission timestamp are stored with the order. This makes the order record useful as legal evidence in a chargeback or regulator complaint. Consent data is also included in the purchase.completed outgoing webhook under the variable names you configure for the fields.
German market (Button-Solution)
The above is the broad EU rule. German law (the "Button-Solution" / "Button-Lösung") additionally requires the final pay-button to be labelled with explicit wording such as "zahlungspflichtig bestellen" ("submit order with obligation to pay"). If you sell into Germany, set your checkout's pay-button label accordingly via the checkout configuration.
GDPR — Data Processing Agreement (DPA)
CheckoutJoy acts as a data processor under GDPR Article 28 for personal data processed on your behalf at checkout (the buyer's name, email, billing address, custom field values, etc.).
A standard CheckoutJoy DPA is available on request — contact support to receive the current template. You'll typically also need separate DPAs with:
- Your payment processor (Mollie, Stripe, PayPal, etc.) — they are separate data controllers/processors for the payment data they handle directly.
- Your course/membership platform (Kajabi, Thinkific, etc.) — same reason.
Each of these parties touches different parts of the personal-data flow, which is why they're typically separate agreements rather than a single one through CheckoutJoy.