The cookie policy your consent banner links to, for Saudi websites
Your consent banner should link to a cookie policy. Under SDAIA’s PDPL it explains each purpose before consent, in Arabic. It tells visitors their rights, how to withdraw consent and who you are. Then it lists every cookie with its provider, purpose and duration, and who receives the data. Write it from the free template, or have us write it.
What it must contain
What your consent banner links to
The policy says that analytics, advertising and preference cookies run only after the visitor agrees in your consent banner, and where they change or withdraw that choice later.
What SDAIA’s PDPL asks
Explain each purpose in clear words before asking for consent, publish the policy in Arabic, and name SDAIA as the authority a visitor can complain to.
How you protect your visitors
The visitor’s rights under the PDPL (to know, access, correct, delete and withdraw consent), how to use them, and who you are: the business’s legal name, commercial registration, address and a privacy email.
The cookie categories
Necessary, analytics, advertising and preferences, with what each one does in plain words. Only the necessary ones run before the visitor answers.
Every cookie, listed
A table with each cookie your site sets: its name, who sets it, its category, its purpose and how long it lasts. A free scan lists them for you.
Who receives the data
The analytics and advertising providers you use, the countries where they process the data, and the safeguards for transfers outside the Kingdom.
Cookie policy or privacy policy?
Both. The cookie policy covers the cookies behind your consent banner. The privacy policy covers everything else you collect, such as orders, accounts and contact forms, and the PDPL expects it to be in Arabic. More people search for the privacy policy, so start there if you have neither.
Create your privacy policy, freeAdd-on
Cookie policy, done for you
Your consent banner should link to a cookie policy that matches your site. We write it for you.
- Written from a real scan of your website
- In French, Arabic and English
- Reviewed by our team
- Linked from your consent banner
- Ready in 5 working days
Is a cookie policy mandatory in Saudi Arabia?
Not by that name. The PDPL asks you to explain each purpose before asking for consent, so a site that runs analytics or advertising cookies needs a clear explanation the consent banner can link to. A cookie policy is that explanation.
Does it have to be in Arabic?
Publish it in Arabic, with English beside it if your visitors read English. The free template is Arabic first, with an English version.
How long should the consent last?
Say how long you keep the visitor’s choice, then ask again. The Arqam360 banner keeps it for 365 days by default, and the template uses that figure.
Can you write it for me?
Yes. For $99 (AED 369) one-off, we write it from a real scan of your site, in Arabic and English, our team reviews it, and we link it from your consent banner within 5 working days. It is included in the Managed setup.
Read next
Sources
- 1.Personal Data Protection Law — official English text (SDAIA)
- 2.Implementing Regulation of the Personal Data Protection Law (SDAIA)
Last reviewed 22 October 2026. Not legal advice.