Your website in line with the privacy laws of the countries you sell to.
A managed privacy service: our experts set up, run and prove your consent, so you don't have to.
- No sign-up
- Result in 2 minutes
- Arabic, French, English
Backed by
Template approved in the Google Tag Manager gallery
Google consent partner application: in review
Live on
Zid App Store
WordPress.org
Works with
Salla
Meta
Google Analytics
Google Ads
Google Tag Manager
TikTok
As seen on
The rules already apply.
Saudi Arabia
SDAIA confirmed 48 enforcement decisions in its January 2026 announcement.
Morocco
The CNDP rule on cookies has applied since November 2025, and only 4 cookie declarations exist among 23,534 filings.
Processing personal data without a CNDP declaration (for example through a website’s cookies): a fine of MAD 10,000–100,000, doubled for companies (Law 09-08, Arts. 52 and 64).
United Arab Emirates
Federal Law 45/2021 requires consent; get ready.
In Dubai's DIFC and Abu Dhabi's ADGM, the data protection regulators can already issue fines.
Europe
GDPR fines go up to €20 million or 4% of turnover.
60% of 1,556 Saudi online stores, 51% of 547 UAE and 56% of the 1,160 .ma websites we analysed load advertising or analytics tools with no consent banner.
Sources: SDAIA announcement of 15 January 2026, reported by IAPP and Okaz; Saudi PDPL, Article 36; CNDP decision D-939-2025 of 28 November 2025, and the CNDP public register, checked on 18 October 2026; Moroccan Law 09-08, Articles 52 and 64; UAE Federal Decree-Law 45/2021; DIFC Data Protection Law 2020, Schedule 2; ADGM Data Protection Regulations 2021; GDPR, Article 83. Our scans: Arqam360 KSA index (September 2026), UAE index (October 2026), and .ma homepage scan (19 October 2026).
What we do
Your banner speaks your visitor's language, and their country's law.
One installation. Each visitor sees the right language and the right rule, automatically.
If the regulator asks, you send one file.
Every visitor's choice is recorded with its date. Your policies and filing documents are written for you, in Arabic, French and English.
Consent log
Example| Date | Country | Choice |
|---|---|---|
| 24 Oct 2026, 09:12 | SA | Accepted all |
| 24 Oct 2026, 09:14 | MA | Refused all |
| 24 Oct 2026, 09:20 | AE | Analytics only |
| 24 Oct 2026, 09:31 | FR | Refused all |
| 24 Oct 2026, 09:47 | SA | Accepted all |
Your documents
- Privacy policy
- Cookie policy
- CNDP filing pack (Morocco)
Arabic, French, English
Your Google and Meta ads keep working, the legal way.
Google and Meta get your visitors' data only after they say yes, and your ads keep measuring with Google's consent signals.
The visitor says
- Google Consent Mode v2granted
- Metaconsent sent
And we keep it right.
Taha, our privacy expert
- We install it for you.
- We check your website every week for new cookies.
- Your policies are updated when the law changes.
- Taha, our privacy expert, reviews every website.
What we cover, law by law
Each requirement, its article, and who does the work.
KSA PDPL
Royal Decree M/19, its Implementing and Transfer Regulations
Enforced by SDAIA since 14 September 2024.
Deadline to answer a rights request: 30 days (IR 3)
Consent before analytics and ad tools run
We turn script blocking on and check it with a scan before handover.
Law 5–6; IR 11
Every pack
Proof of every choice
Time, banner version and policy version of each choice, exportable as CSV.
IR 11(1)(d)
Every pack
Withdrawal of consent
A visitor can change their choice at any time from a link on every page.
IR 12
Every pack
Privacy and cookie policies
In Arabic and English, checked by our privacy expert against the tools your site really runs.
Law 12–13; IR 4
Every pack
Processor terms (DPA)
Our terms as your processor, signed copy on request.
Law 8; IR 17
Every pack
Transfer note
Which of your tools send data outside the country, and the legal basis for each.
Law 29; TR 2–8
Every pack
Rights requests
We receive each request and run the law’s clock; you answer from your own systems.
Law 4; IR 3
Shared with you
Record of processing (ROPA)
Every pack lists the tools your site runs; Enterprise builds the full record with you.
Law 31; IR 33
Enterprise
Impact assessment (DPIA) help
Our privacy expert prepares it with you for high-risk processing.
Law 22; IR 25
Enterprise
Breach runbook
Steps and notice templates, including the 72-hour notice where the law sets one.
Law 20; IR 24
Enterprise
Regulator filings
We prepare and submit; you sign and pay the regulator’s fee.
Law 30; IR 34
Enterprise
We give written guidance, but we never act as your DPO or your EU representative.
How it works, and what it costs.
Free scan of your website
See what your website sets before the visitor agrees, and which laws apply.
Scan my site now20-minute site review with our privacy expert
Your questions, your website, your countries.
Book a 20-minute site reviewWe install everything and keep it updated.
You approve everything before it goes live.
Policy Pack
Just the policies
$149
one-time · 1 website
- Privacy policy and cookie policy for your country’s law
- Written from a scan of your website
- In Arabic, French and English
- Delivered within 3 working days
1-year pack
Banner + policies, done for you
$1,499
for 1 year · 1 website
- Privacy policy and cookie policy for your country’s law
- Consent banner in Arabic and English, installed by us
- Google Consent Mode v2
- Sends conversions to Google and Meta from our server
- Weekly check of your site, and whenever you ask
- Priority support in Arabic and English, on WhatsApp and email
- Up to 500,000 page views a month
In every pack
- Banner set up with blocking on, checked by a scan
- Proof of consent: records and CSV export
- Requests inbox for access and deletion
- Our data processing agreement (DPA)
- A transfer note for your law
Enterprise-grade managed service
- Support: 24/7 automated monitoring, a human reply in business hours across the Gulf, response times by severity
- Onboarding session and a written admin guide
- Free re-install after a site redesign
- A named contact
3-year pack
Everything in 1 year, price locked for 3 years
$2,799
for 3 years · ≈ $78 a month
Save 37% vs 3 × 1 year
- Everything in the 1-year pack
- Price locked for 3 years
- Up to 500,000 page views a month
In every pack
- Banner set up with blocking on, checked by a scan
- Proof of consent: records and CSV export
- Requests inbox for access and deletion
- Our data processing agreement (DPA)
- A transfer note for your law
Enterprise-grade managed service
- Support: 24/7 automated monitoring, a human reply in business hours across the Gulf, response times by severity
- Onboarding session and a written admin guide
- Free re-install after a site redesign
- A named contact
Enterprise
Large companies and several websites
Custom
a proposal for your company
- Everything in the packs
- Record of processing (ROPA)
- DPIA help
- Breach runbook
- Data requests run by our expert
- Regulator filings prepared and submitted
- In-region data storage, on a signed deal
- More than 500,000 page views a month
- Several websites, each extra −25%
Enterprise-grade managed service
- Enterprise-grade: DPA, support terms, onboarding, re-install after redesign, named contact
50% deposit, the balance when your banner is live · 1 website, each extra −25% · secure payment with Stripe
Prefer to pay monthly? In the Shopify, Zid and WordPress appsAll 28 things included in both packs
Your banner7
- 12 languagesIncluding Arabic, right to left, and French.
- Rules by countryThe banner recognises the visitor's country and applies the rule of its law: 15 sets of rules, one installation.
- Your designColours, text and position matched to your website.
- Banner A/B testsShow two versions and see which one more visitors answer.
- Google Consent Mode v2Your Google tools know whether the visitor accepted or refused: without consent, they set no analytics or advertising cookies.
- GPC respectedIf the visitor's browser already asks for privacy, the banner refuses non-essential cookies for them.
- Blocking before consentAdvertising and analytics scripts wait for the visitor's yes. We switch it on with you, after a test on your website.
Your cookies3
- Weekly scan, as many scans as you wantWe scan your website every week, and whenever you ask.
- 124 cookie patterns, 37 written for this regionEach cookie named and explained, in Arabic and English.
- Cookie list in the bannerVisitors see every cookie and what it is for.
Your documents3
- Cookie policy and privacy policyWritten for your country's law, in Arabic, French or English.
- CNDP F214 file (Morocco)The CNDP form for a website that sets cookies. We prepare the answers, you file it.
- Updates when the law changesWhen the law changes, we update your banner rules and your policies.
Your ads and data4
- Server-side sending to 10 toolsYour website's events (purchase, sign-up) go from our server to Google, Meta, TikTok, Snap and six more, only for visitors who agreed.
- Up to 1,000,000 events a monthEnough for a busy store.
- Up to 50 audiencesGroups of visitors who agreed, like "viewed a product, did not buy", sent to Meta and TikTok.
- Google Tag Manager templateOur template is in Google Tag Manager's own template gallery.
Your proof and reports5
- Consent log, with CSV exportEach visitor's choice is recorded with its date: your proof if the regulator asks.
- People's requests (DSAR)A form where a person asks to see, correct or delete their data; the request reaches your dashboard with a 30-day deadline.
- Audit logEvery change in your account, who made it and when.
- DashboardAcceptance rate, choices by category and the trend.
- Monthly reportAn email each month with your numbers.
Your team and our service6
- Up to 5 team loginsYour privacy lead and your marketer each get their own access.
- Installation by usWe install it and test it on your website.
- Taha, our privacy expertReviews your setup and answers your questions.
- Support on WhatsApp and emailIn Arabic, French and English.
- Priority supportYour messages are answered first.
- Apps for Shopify, WordPress and ZidIf your website runs on one of them, it installs from your store.
Before you decide
Does it apply to me?
If your website sets cookies or loads Google, Meta or TikTok, the privacy law of each visitor's country applies to it. The free scan shows, in about 2 minutes, what your website sets before the visitor agrees and which laws apply.
What if I already have a banner?
The free scan shows whether it asks before any optional cookie is set and follows the law of each visitor. If it does, keep it. If it does not, we install ours in its place.
Who files with the CNDP?
You do, because the declaration is in your company’s name. We prepare it: the answers to form F214, ready for you to file.
How long does it take?
Your banner is live about 3 working days after we start, your policies within a week.
What do I need to do?
Give us access to your website (or your Shopify, WordPress or Zid admin) and answer 15 minutes of questions. You approve everything before it goes live.
Talk with Taha, our privacy expert.
Book a 20-minute site reviewOr check your website first, free.