Do they have to contact you? By email? Phone? Chat? Do you offer a Cancel button?
What best practices have you seen?