Tools / For business
Privacy policy in Arabic
A store, an app, a salon with online booking? Federal Decree-Law 45/2021 on personal data protection requires a privacy notice saying what you collect, why, who you share it with, how long you keep it, and the data subject's rights. Answer a few short questions and get a policy in Arabic and English with the law's elements (Article 13) — ready to publish, without claiming fines that haven't been issued.
Your file never leaves your device — everything runs in your browser
Source: Federal Decree-Law 45/2021 on personal data protection (Articles 4, 5, 6, 9, 10, 13–19, 22, 23). The executive regulation and penalties decision had not been published as of October 2026. The UAE Data Office is the regulator. A guiding template, not legal advice.
How to use it
- Type the organisation's name and contact, and pick what you collect, for which purposes and with whom you share it.
- Set the retention period, whether you transfer data abroad, and whether you use cookies or marketing.
- Read the policy in both languages, edit it, and copy it to your website or app.
Questions
What must a privacy notice contain?
Article 13 of the law: the types of data processed, the purposes, automated decisions and profiling, the parties data is shared with inside and outside the country, retention controls and period, the procedures for correction, erasure, restriction and objection, safeguards for cross-border transfer, breach procedures, and how to complain to the UAE Data Office. Before processing, the person must at least be told the purposes, the parties shared with, and the transfer safeguards.
Do I need consent for everything?
Consent is the default (Article 4), with exceptions including: performing a contract the person is party to, a legal obligation, public interest, and data the person made public. Consent must be clear, provable and easy to withdraw (Article 6).
What is the fine?
The administrative penalties by Cabinet decision and the executive regulation had not been published as of October 2026 per consistent legal reviews; any circulating fine figure is not official text. This policy follows the law itself, not the figures.
My company is in a financial free zone?
DIFC and ADGM have their own laws and the federal law doesn't apply to them. Health and banking data have their own legislation. This content is for establishments under the federal law.
Last updated: