Setting up the EU 14-day withdrawal flow for digital goods

Three days after buying a downloadable toolkit, a customer writes in asking for their money back. You open the order and find one field: a consent checkbox that the checkout writes as true. No record