It takes them about four minutes and they never tell you the result. Three things we do, in the order they matter: we measure what your site shows a stranger, we rebuild what it should show, and we keep it earning afterwards.
Open your own site in a private window and go down this list. These are not our tests. They are the ones anyone can run on you, today, without asking and without telling you the result.
The free screening runs the same five and writes the answers down.
We also ran the first of them across 55 UAE small-business homepages ourselves. The result is below, and the method is published with it.
Our own research
Every one of the seven sampled sites that did show a consent banner still fired trackers before anyone actioned it. A banner is not a consent mechanism. It is a picture of one.
Orentara, UAE SME cookie-tracking study, July 2026. 55 of 57 sampled homepages loaded. Homepage-only, snapshot of July 2026, detection-list based. A directional read of a real sample, not a statistically representative census. Individual sites are not named.
The order
You can enter at any of the paid steps. You cannot skip the measurement, because everything after it is priced against what it finds.
Free · by email in minutes
The free website screening. A written report on what your site does with personal data today, and on what a stranger can check in four minutes.
Websites
Foundation or Authority. Fixed scope, about four weeks, compliance layer built in rather than bolted on.
Content & Growth
Writing, publishing and visibility work each month on the site we now maintain.
DealOps
Where the deal process loses money: pipeline, intake, follow-up and the numbers behind them. This one runs without a website.
The screening takes one input: your address. No access, no login and no code on your site. Everything is read from the outside, the way a visitor or a regulator would see it.
Six areas are read in one pass: PDPL readiness, search and AI, technology and security, design and experience, marketing and conversion, and brand and positioning.
Those become eight weighted measures adding up to 100 points. PDPL, consent and data protection carries the most at 18, then SEO foundation at 16, AI and agentic search at 15, design and experience at 13, brand and positioning at 12, marketing and conversion at 11, security and mail integrity at 8, and speed and page weight at 7.
The result lands in one of four bands: critical gaps up to 35, work needed up to 55, a solid base with room to gain up to 75, and already well positioned above that. Every point is traced to a finding you can check yourself, with the evidence next to it. It is not a grade. It is a list of what is wrong and what it would take to fix.
The screening costs nothing, and it is yours either way.
Engagements
Each has its own page with the full scope. None of them carries a price here, because the figure follows the finding.
Build
A site your buyers can check and your regulator can read. The compliance layer is part of the build, not a banner added to it afterwards.
Keep earning
The monthly work that turns a launched site into a channel: writing, publishing, and being found by search engines and by the assistants people now ask instead.
Operate
Where the deal process loses money, measured first and fixed second: pipeline, intake, follow-up, and the numbers behind them.
The consent log the law asks for is also the only place you can see how many strangers trust you enough to say yes. The file that lets an AI assistant read you sits beside the one that governs your trackers. The enquiry your form captures is the same record your CRM either follows up or forgets.
Firms buy these from three suppliers and then wonder why the numbers never line up. We build them as one thing because they are one thing.
We do not quote before we have looked.
Orentara is a founder-led boutique in Dubai for compliance-native websites and digital operations, not a general web agency. The compliance layer, the components and the SEO and GEO foundation are pre-built as product. That is why we can deliver them to a fixed price, and to a standard a template theme does not reach.
No scare tactics and no unverified figures. The UAE PDPL, Federal Decree-Law No. 45 of 2021, has been in force since 2 January 2022; its executive regulations are not issued. A great deal of what circulates about it is imported from European law and is simply wrong. We keep a sourced record of which claims survive checking, and we will show it to you.
What decides the figure is set out separately, in what PDPL compliance costs and how long it takes.
Next step
Send us the address of your site. You get back a written readiness report by email within minutes: where you stand against the PDPL, the gaps that matter most, and what to fix first. The proposal, if there is one, comes after that and is priced against the report.