A free PDPL privacy-policy and cookie-notice template.
A region-tagged starting point for the UAE PDPL, DIFC, ADGM and the GDPR — with placeholders you fill in for your business. Built on our verified research, and clear about where a lawyer still needs to look.
What's inside
The sections a compliant notice actually needs.
The template is structured to the primary law and tagged by regime, so you keep only the parts that apply to where your business is established. Every placeholder is marked for you to complete.
Controller identity & contact
Who you are and how a person reaches you about their data.
Lawful basis & purposes
Why you process data — consent-first for the mainland PDPL.
Cookies & trackers
A table of what you set, why, and for how long.
Data-subject rights
The rights and a clear path to exercise them.
Retention & cross-border
How long you keep data and where it may travel.
Sources of law
The instruments and articles behind each clause.
Important
A template, not legal advice.
It ships with [placeholders] you complete for your own business — it is a starting point, not a finished policy.
It is region-tagged (UAE PDPL, DIFC, ADGM, EU GDPR); keep only the regime that applies to you.
Have a qualified lawyer review the completed document before you publish it. We are happy to build it into your site and work alongside your advisor.
Two ways to start
Grab a basic starter now, or get the full region-tagged template.
A short, region-neutral cookie-notice starter with placeholders and a lawyer disclaimer. Downloads straight away as Markdown, no email required.
The complete privacy-policy and cookie-notice template, tagged for UAE PDPL, DIFC, ADGM and the GDPR. We email the current version within one business day.
Free template
Get the free template.
Tell us where to send it. We email the current, region-tagged template within one business day — no cost, no obligation.
- Direct reply from the founder
- No obligation, no sales sequence
- Your details handled per the PDPL
Related
Understand it, or get it built.
Federal PDPL, DIFC, ADGM and the GDPR, cited by article, with the side-by-side comparison.
We build the policy into a site where data protection is part of the build, documented and defensible.
Before you publish a policy, find out what your current site actually does with data.