BossBot Guides for the United Arab Emirates (UAE)

Does UAE PDPL 2021 apply to my SME's WhatsApp customer communications?

Yes if you process personal data of individuals in the UAE, subject to some sectoral carve-outs. Federal Decree-Law No. 45 of 2021 (UAE PDPL) in force January 2022 imposes obligations on data controllers and processors including: lawful basis for processing, privacy notice at collection, data subject rights (access, rectification, erasure, restriction, portability, objection), breach notification to UAE Data Office, cross-border transfer via adequacy or standard contractual clauses, DPO for major controllers or those processing sensitive data at scale. DIFC and ADGM have their own data-protection regulations (DIFC DPL, ADGM DPR) with different specific rules. UAE Data Office guidance at u.ae.

When must my UAE SME register for VAT with the FTA?

Federal Decree-Law No. 8 of 2017 on VAT requires mandatory VAT registration once your taxable supplies exceed AED 375,000 in any consecutive 12-month period, or if you have reasonable grounds to believe you will exceed the threshold in the next 30 days. Voluntary registration is available from AED 187,500. Once registered you charge VAT at the 5% standard rate on taxable supplies, file VAT returns via the FTA EmaraTax portal (typically quarterly, monthly for larger businesses), and can claim input VAT on eligible business purchases. Late filing penalty AED 1,000 for first offence, escalating for repeat. Engage a FTA-registered tax agent for structured compliance.

What payment acquirers work for WhatsApp-driven commerce in the UAE?

Major CBUAE-regulated acquirers: Network International (long-established, listed on ADX/LSE), Amazon Payment Services (formerly Payfort acquired by Amazon 2017), Telr (regional), Ziina (P2P + business), PayBy (UAE-based instant payments), Checkout.com Middle East, Stripe UAE (available 2020+ for select segments). Card schemes: Visa, Mastercard dominant with regional Verve and mada acceptance for cross-Gulf customers. Bank transfers via UAEFTS for domestic same-currency. Digital wallets: Apple Pay, Google Pay widely accepted; e-Dirham (government payments); Careem Pay and Talabat Pay in super-app contexts. Buy-now-pay-later via Tabby, Tamara, Postpay for retail contexts.

How do UAE SMEs handle Arabic-language customer WhatsApp communication?

WhatsApp supports RTL (right-to-left) Arabic natively including MSA (Modern Standard Arabic), Gulf Arabic dialect (widely spoken in customer-facing UAE SME contexts), and English. UAE customer-facing SMEs typically operate a bilingual English + Arabic reply pool with language selection at first contact. Templates registered with Meta for the UAE market should include both Arabic and English variants under separate language codes (ar and en_GB or en_AE). Cultural context matters: business hours align to UAE Sunday-Thursday workweek (with Friday-Saturday weekend since 2022 reform in most emirates), Ramadan working-hour adjustments, and appropriate salutations at first contact for Arabic-preference customers.

Should a WhatsApp-commerce UAE SME set up mainland or free-zone?

The decision depends on target customer and cost. Mainland (DED Dubai, DET Dubai, ADED Abu Dhabi, other emirate DEDs) permits direct trade with UAE domestic customers, since 2021 permits 100% foreign ownership across most activities, and is required for many retail/food/health licences. Setup cost typically AED 20,000-40,000 first year including licence, immigration card, labour card, Ejari tenancy contract. Free-zone (DIFC or ADGM for finance, DMCC for general trade, JAFZA for logistics, SHAMS or Meydan for media, IFZA for cost-efficient general trade) permits faster setup from approximately AED 12,500 first year for IFZA / SHAMS, 100% foreign ownership, and easier profit repatriation. Trade outside free-zone requires agent or cross-zone arrangements. For a pure WhatsApp-commerce SME serving UAE domestic customers: mainland is often the cleanest choice.