The verdict in three sentences
For a private or international school in Dubai, the website collects children's and parents' data from the very first admissions form, and that is where your requirements on the web provider should focus. Require in writing a clear privacy notice, honest cookie consent, minimal forms, a data processing agreement, an incident plan and a WCAG 2.1 AA target tested before launch. A Dubai agency typically quotes between AED 40,000 and 150,000 (about $10,900 to $40,800) as a 2026 ballpark for a full school site, while Kolonell applies a fixed grid of $2,900, $4,900 or $8,900 with these requirements written into the scope.
What is the frame in Dubai, without claiming more than we know?
Private schools in Dubai are regulated by the KHDA (Knowledge and Human Development Authority), which oversees, among other things, the information given to families; check the precise online publication requirements with the KHDA. On data, Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) sets the general frame in the UAE, but its scope and application are still evolving: check with your counsel what applies to your school. Financial free zones such as the DIFC have their own regimes, which rarely concerns a school but may affect a provider based there.
In practice, schools in Al Barsha, Jumeirah, Dubai Silicon Oasis or Arabian Ranches welcome families from the UK, the EU, India and North America who are used to GDPR-style standards. Aiming for that level of practice, even where local law is less detailed, reassures those parents. This is not legal advice.
What should you require from the provider, point by point?
| Requirement | Why it matters for a school | How to check it before launch |
|---|---|---|
| Website-specific privacy notice | Parents must know who receives their child's data and why | Linked from every form, in English and in Arabic if the site is |
| Honest cookie banner | Rejecting must be as easy as accepting, no pre-ticked boxes | Test reject then browse: no advertising tracker should load |
| Minimal forms | Children's data calls for the greatest restraint | Field list approved by the admissions lead |
| Retention period | An inquiry that never becomes an enrolment should not stay forever | Period written in the notice and applied in the tool |
| Data processing agreement with the web provider | Frames the provider's access to the data | Signed before launch |
| Hosting location | Some families and school groups require it | Hosting region stated in writing |
| Incident response plan | Who alerts whom, and how fast | One-page procedure with named contacts |
| WCAG 2.1 AA and accessibility statement | Parents and students with disabilities must be able to apply on their own | Automated audit plus keyboard and screen reader tests |
Student image consent deserves its own line: every published photo needs a documented permission with a simple way to withdraw it. Keep the consent register outside the website.
Which fields should you collect, and when?
The temptation is to ask for everything in the first form. That is the main source of risk.
| Data | First contact | Enrolment file | Comment |
|---|---|---|---|
| Parent name and email | Yes | Yes | Needed to reply |
| Target year group and entry year | Yes | Yes | Routes the inquiry to the right programme |
| Preferred curriculum (British, IB, American, Indian, French) | Yes | Yes | Useful for the waiting list |
| Child's date of birth | Optional | Yes | The year is often enough at first |
| Passport, visa, Emirates ID | No | Yes, via secure upload | Never by plain email; secure upload on quote |
| School reports and learning assessments | No | Yes, via secure upload | Sensitive data, restricted access |
| Medical information or special needs | No | Per the school's procedure | Keep off the public site where possible |
What does a compliant school website cost in Dubai?
2026 ballpark figures based on typical agency quotes and public agency rate pages; AED conversions approximate (USD 1 is roughly AED 3.67).
| Option | Typical budget | Timeline | Notes |
|---|---|---|---|
| Dubai freelancer | AED 12,000 to 35,000, about $3,300 to $9,500 | 6 to 10 weeks | Compliance rarely documented |
| Mid-size Dubai agency | AED 40,000 to 90,000, about $10,900 to $24,500 | 10 to 14 weeks | Arabic often included |
| Agency with education references | AED 90,000 to 150,000, about $24,500 to $40,800 | 3 to 5 months | Integrations and parent portals common |
| Kolonell Growth | $4,900 | 3 to 4 weeks once content is ready | English site, minimal forms, privacy notice and cookie banner |
| Kolonell Premium | $8,900 | 3 to 4 weeks once content is ready | Multilingual tier, languages and RTL scope set in the quote |
The Starter tier at $2,900 suits a small nursery with a few pages. Secure document upload, a connection to the school management system and an in-depth accessibility audit by an independent specialist (third-party cost) are on quote or extra. Every tier includes a project manager reachable in your time zone, native English or French copywriting, delivery in 3 to 4 weeks and 3 months of support; maintenance after that is on quote. Details are on the international offer page.
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
Mini case study
Illustrative example: Priya leads admissions and marketing at a fictional British curriculum school in Al Barsha, 1,100 students. Her current form has 28 fields, including passport number. She cuts it to 9 fields and moves ID documents to a secure upload at the enrolment stage. On 120 inquiries a month, if form abandonment falls from 30% to 20% (assumption), she gains 12 completed inquiries a month.
Budget: Kolonell Premium at $8,900, plus an independent Arabic translator (third-party cost, $1,200 as an assumption) and an accessibility audit by an independent specialist (third-party cost, $1,500 as an assumption), so $11,600. The local quote she received is AED 95,000, about $25,900. In both cases she makes the data processing agreement and the accessibility statement contractual deliverables.
FAQ
Does the PDPL apply to our school website?
Federal Decree-Law No. 45 of 2021 sets the general frame, but its precise application is evolving. Have your situation checked by your counsel; either way, a 9-field form instead of 28 reduces the risk.
Do we need a cookie banner in Dubai?
If the site uses analytics or advertising trackers, a banner where rejecting is as easy as accepting is what many international families expect. It is included from the Growth tier at $4,900.
Which accessibility level should we target?
WCAG 2.1 AA is the realistic target, with an accessibility statement. Allow 3 to 5 days of testing before launch, including keyboard and screen reader checks.
Can the site be in Arabic and English?
Yes, with the Premium tier at $8,900, the multilingual tier whose languages and RTL scope are set in the quote. A native Arabic review by an independent translator remains a third-party cost.
Can we receive full applications online?
Yes, through a secure upload on quote, with access restricted to the admissions team. Avoid attachments by plain email, even for a single document.
Let's scope your project. Send us your current forms, languages and admissions calendar, and we will propose a fixed tier and the list of compliance deliverables. See the international offer or request a free quote: detailed reply within 48 hours.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
