If you tell them by email you have cancelled the order and they are no longer authorised to withdraw funds from your account then they are breaking the law if they do and your bank will be able to retrieve the money.
Also if they have not taken the money yet - cancel the card under the lost card line and they will not be able to draw anything from that card, you will get a new card with a new number in 2 or 3 days.
Sharon