# Cookie Notice — starter template (UAE)

> This is a free starting point, not legal advice. It ships with [placeholders] you
> complete for your own business, and it is deliberately generic. Have a qualified
> lawyer review the finished notice before you publish it. Which parts apply depends
> on where your business is established (mainland UAE / DIFC / ADGM) and whether you
> target the EU. For the region-tagged, fuller version, see:
> https://orentara.com/en/pdpl-privacy-policy-template

---

## 1. Who we are

[Legal entity name] ("we", "us") operates [website URL]. For any question about your
personal data or this notice, contact us at [privacy contact email] / [postal address].

## 2. What cookies and trackers we use

We set the following on this website:

| Name / provider | Category | Purpose | Duration |
|---|---|---|---|
| [e.g. session cookie] | Strictly necessary | [keeps the site working] | [session] |
| [e.g. _ga / Google Analytics] | Analytics | [measures site usage] | [e.g. 13 months] |
| [e.g. _fbp / Meta] | Marketing | [advertising / retargeting] | [e.g. 90 days] |

Keep this table accurate to what you actually load. Strictly necessary cookies keep
the site working; everything else (analytics, marketing, embedded media) is
non-essential.

## 3. Consent — our lawful basis

Non-essential cookies and trackers only run **after** you consent. Strictly necessary
cookies do not require consent because the site cannot function without them.

- **Mainland (onshore) UAE — Federal PDPL (Decree-Law No. 45 of 2021):** consent-first,
  with a closed list of exceptions and no general "legitimate interest" basis. Non-essential
  trackers should wait for consent.
- **DIFC / ADGM / EU visitors:** these regimes recognise additional lawful bases, but still
  require a lawful basis and transparency for cookies. Do not fire non-essential trackers
  before the visitor chooses.

Do not quote a specific fine amount or a fixed response/breach deadline for the mainland
PDPL — those are deferred to Executive Regulations that, as of 2026, are not yet issued.

## 4. Managing and withdrawing consent

You can change or withdraw your consent at any time via [link to your cookie settings /
"Cookie preferences" control]. Withdrawing is as easy as giving consent, and takes effect
for future processing.

## 5. Your rights

Depending on the regime that applies to us, you may have rights to access, correct, delete,
restrict or object to the processing of your personal data, and to data portability. To
exercise a right, contact [privacy contact email]. Response times differ by regime — set
the applicable one for your establishment.

## 6. Sources of law

The instruments behind this notice, by article:
https://orentara.com/en/uae-data-protection-law-sources

---

Prepared with Orentara's free tools. Want it tailored and built into your site?
Free readiness check: https://orentara.com/en/pdpl-check