UAE website requirements in 2026: the complete checklist (PDPL, TRN, licence, Arabic, DHA)
What a UAE business website needs to be legal, local and trusted: PDPL privacy policy, TRN and licence, Arabic/RTL, WhatsApp and +971, DHA rules for clinics.
By Syed Shahzaib Ali · 3 November 2026 · 3 min read
Opening a business in the UAE is fast. Making its website look like a legitimate, local, compliant UAE business takes a bit more thought — and it is the first thing customers, Google and regulators judge you on. This is the checklist we use when we build or audit sites for clinics, consultancies and shops in Dubai, Abu Dhabi and Sharjah.
What does a UAE website legally need?
A privacy policy that meets the PDPL. The UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) applies to any business processing personal data — which includes an enquiry form, a WhatsApp button that logs numbers, Google Analytics and Meta Pixel. Your policy should state what you collect, why, how long you keep it, who you share it with (hosting, CRM, ad platforms) and how people can access or delete their data. Link it from the footer and next to every form.
Cookie consent for non-essential cookies. Analytics and advertising cookies need opt-in consent. A banner that only says "we use cookies" is not consent; use a consent tool that actually blocks tags until the visitor agrees.
Terms and conditions. Essential if you take bookings, deposits or payments online, and you should include cancellation and refund terms.
Your TRN. If you are VAT-registered, display the 15-digit Tax Registration Number in the footer and on every tax invoice. B2B customers will look for it before they pay you.
Your licensed legal name and licence number. Show the entity name exactly as it appears on your trade licence, the licence number and the issuing authority (Dubai DET, ADGM, a free zone such as DMCC). Banks and payment gateways check this when they review your site.
Which rules apply to clinics and healthcare sites?
Healthcare is the most regulated category. Your site must show the facility licence from DHA (Dubai), DoH (Abu Dhabi) or MOHAP (other emirates). Promotions, discounts and campaigns usually need an advertising permit, and copy must avoid words regulators treat as misleading: "best", "number one", "guaranteed", "pain-free", "100% safe". Before-and-after images require written patient consent and, in some emirates, permit approval. Named doctors should appear with their licence titles.
Does my site need Arabic?
Around 70% of UAE residents are comfortable in English, so many businesses launch English-only. But an Arabic version does three things an English site cannot: it captures Arabic-language searches, it reassures Arabic-first customers and government buyers, and it signals that you are a real local business rather than an offshore operator. If you add it, do it properly — a translated page set with dir="rtl", mirrored layout, an Arabic web font such as Cairo or Tajawal, and hreflang="ar-AE" / "en-AE" tags so Google serves the right version.
What makes a site feel local to UAE customers?
Small things carry a lot of trust here. A +971 number as a tap-to-call link; a WhatsApp click-to-chat button (WhatsApp is the number-one enquiry channel in the Emirates); a full address with the emirate and a Google Maps link, matching your Google Business Profile exactly; opening hours including Ramadan timings; and LocalBusiness or Dentist structured data with addressCountry: "AE" so Google's map pack and AI assistants can place you. A .ae domain helps, even if it only redirects to your main site.
What should the site look like to convert?
HTTPS everywhere, a mobile-first design (over 80% of UAE traffic is mobile), Google review count and rating near the top, a single clear call to action ("Book a consultation", "WhatsApp us") repeated after every section, Instagram and TikTok links, and for shops the payment methods UAE customers expect — cards, Apple Pay, and Tabby or Tamara buy-now-pay-later.
How do I check my site against this list?
Run it through our free UAE Website Checker. It fetches your homepage and Arabic page, then scores Arabic readiness, PDPL and compliance items, local presence and trust signals, with a fix for every item it flags. If you would rather have someone handle it, we build bilingual, compliant UAE websites for clinics and businesses and can give you a fixed price after a short call.
Frequently asked questions
- Is an Arabic version of my website legally required in the UAE?
- For most private businesses it is not a legal requirement, but government entities, many tenders and some licensing authorities expect Arabic, and bilingual sites reach Arabic-first customers and searches that English-only sites miss. Treat it as commercially essential rather than optional.
- Do I have to show my TRN on my website?
- The Federal Tax Authority requires your 15-digit Tax Registration Number on tax invoices. Showing it in the website footer is best practice and expected by corporate customers and payment providers, even if the footer itself is not a tax invoice.
- What does the UAE PDPL require from a website?
- A clear privacy notice (what data you collect, why, how long you keep it, who you share it with, and how users exercise their rights), a lawful basis such as consent for marketing and non-essential cookies, and reasonable security. Contact forms, chat widgets and analytics all fall under it.
- What are the DHA rules for a dental or clinic website?
- Clinics must be licensed by the relevant health authority (DHA in Dubai, DoH in Abu Dhabi, MOHAP elsewhere), display the facility licence, and obtain advertising permits for promotions. Copy must avoid guarantees, superlatives like 'best' or 'number one', misleading before/after imagery and discounts that are not permitted.
Run the free UAE Website Checker
Paste your URL and get a score for Arabic readiness, PDPL, TRN, licence, DHA, WhatsApp and local presence — with fixes.