A web development contract in the UAE should spell out the scope of work, milestone-based payments, delivery timelines, revision limits, who owns the finished website, warranties, termination terms, and which courts or arbitration venue settle disputes. Without these in writing, a AED 25,000 project can drift into months of extra revisions, unpaid work, or — worst case — a website you don't legally own. This guide walks through every clause that should be in your contract, the UAE-specific legal points most buyers miss, and the red flags that should make you walk away before signing.
Important: This article is general educational guidance for business owners, not legal advice. For projects with significant value or complex terms, have a UAE lawyer review your contract before you sign.
Why the contract matters more in the UAE market
In the UAE, website projects change hands in ways that make a written contract unusually important: freelancers are common, agencies white-label work to offshore teams, and verbal commitments over WhatsApp are normal. The client assumes revisions are unlimited; the agency assumes content arrives on a date never written down. Most web project disputes don't start with bad faith — they start with assumptions (Axis Web Art, June 2026).
UAE law also gives you no automatic safety net on the most valuable question: who owns the website. Under Federal Decree-Law No. 38 of 2021 on Copyrights and Neighbouring Rights — the UAE copyright law in force since January 2022 — a contractor building your website is not your employee, so ownership of custom code, design, and content must be assigned to you in the contract itself (Morgan Lewis, October 2022). If it isn't written down, it isn't yours.
The clause checklist: 12 clauses every contract must cover
Every row should have a clear, written answer — a vague one-liner or a missing clause is a negotiation point, not a detail to sort out later.
| # | Clause | What it must say | Why it matters in the UAE |
|---|---|---|---|
| 1 | Scope of work | Named deliverables: pages, features, integrations (payment gateway, CRM, booking), platform, plus what's excluded (copywriting, photos, SEO) | Most disputes start here; vague scopes ("a website") are unenforceable (Axis Web Art, Jun 2026) |
| 2 | Payment terms | Milestones tied to trigger events (not dates), currency (AED), due dates, late-payment terms | UAE projects mix AED and USD billing — fix the currency in writing |
| 3 | Timeline and milestones | Start conditional on deposit + materials, named milestones with dates, dependency clause for client delays | Stops you being blamed for delays you caused |
| 4 | Revision policy | Revision rounds per deliverable (two is standard), revision vs. new requirement defined, change-request rates | Unlimited revisions are how projects go over budget (Axis Web Art, Jun 2026) |
| 5 | Client responsibilities | Content deadlines, feedback windows, one named approver, access to hosting/domain/accounts | Puts your delays on your record, not the timeline |
| 6 | Intellectual property | Explicit IP transfer on final payment; third-party items (themes, plugins, fonts, stock) keep their licences | No automatic transfer from a contractor under UAE law (Morgan Lewis, Oct 2022) |
| 7 | Testing and acceptance | Test plan, sign-off criteria, deemed acceptance if no approval/objection within X days | Prevents review limbo; protects the final payment (Verbat, Dubai) |
| 8 | Warranty and support | Bug-fix warranty period (30 days is common), exclusions (your changes, third-party updates), maintenance options | Bugs are defects in scope, not new features — state the difference |
| 9 | Confidentiality and data protection | Mutual NDA, subcontractor confidentiality, data processing per UAE PDPL (Decree-Law 45/2021) | PDPL compliance is a legal obligation, not a nicety (Nour Attorneys) |
| 10 | Liability and indemnity | Liability cap (often contract value), no indirect losses, indemnity for third-party claims | Fraud, gross negligence, or willful misconduct can't be excluded under UAE law (Nour Attorneys) |
| 11 | Termination | Notice period (14–30 days), payment for completed work, file/IP handling, termination-for-cause | No exit terms means no clean ending when a project stalls |
| 12 | Governing law and dispute resolution | Governing law (UAE federal law + emirate's courts), dispute path: negotiation → mediation/arbitration → court | Free-zone firms (DIFC/ADGM) may use different law — state it (Nour Attorneys) |
The four clauses buyers get wrong most often
1. Who owns the code, design, and domain
Standard practice: ownership of the delivered work transfers to you on receipt of the final payment — before that, the agency retains ownership (Axis Web Art, June 2026). Never launch on a half-paid balance and assume the site is yours.
Just as important is what the contract does not transfer. Themes, plugins, stock photos, fonts, and libraries carry their own licences — separate custom-built work (transferred to you) from licensed components (licence holder named).
And register the surrounding assets — domain, hosting, analytics, admin credentials — in your name: our website handover checklist lists everything that should change hands (see also Nerdbot's Dubai buyer guide, June 2026).
2. Data protection and confidentiality
Your developer handles business information — and possibly customer data — from day one. Confidentiality: both sides protect each other's information, with subcontractors and white-label partners bound by the same terms (Axis Web Art, June 2026) — white-labeling is widespread in the UAE, so require disclosure. Data protection: commit the developer to handling personal data under Federal Decree-Law No. 45 of 2021, the UAE Personal Data Protection Law (Nour Attorneys), including who owns the privacy notice.
3. Governing law and dispute resolution
For onshore UAE projects, name UAE federal law and the courts of the relevant emirate (e.g., Dubai Courts). If either party is a free-zone company — common in Dubai's tech scene — the governing law may be the free zone's own regime (DIFC and ADGM follow common-law principles); state it explicitly, not by assumption (Nour Attorneys).
Add a tiered process — negotiation, then mediation or arbitration, then court — so small disputes stay cheap. And require formal notices in writing to the addresses in the agreement (Axis Web Art, June 2026): with so much UAE business over WhatsApp, an email to the stated address is far better evidence than a chat thread.
4. Milestone payments, late fees, and work stoppage
Tie each payment to a project event — kickoff, design approval, staging delivery, launch — never to calendar dates, so you're never invoiced for an incomplete milestone (Axis Web Art, June 2026). A common structure is 40/30/30; the upfront share should at minimum cover the first phase of real work — the same principle behind WebStackRank's fixed 50/50 deposit-launch model. See our breakdown of fixed-price vs retainer vs time-and-materials for a fuller comparison.
Insist on two protections: late-payment terms that run both ways, and a work-stoppage clause if a milestone payment is overdue.
7 red flags in UAE web development contracts
Walk away — or renegotiate hard — when you see these:
- No written contract at all. A quote on WhatsApp is not a contract. UAE law gives digital contracts and e-signatures the same standing as paper (Federal Decree-Law No. 46 of 2021 — Nour Attorneys) — no agency has an excuse to skip paperwork.
- "You own everything" with no IP clause. Proposal promises mean nothing without explicit IP assignment — ask what's custom versus licensed.
- Vague scope. Without listed pages, features, integrations, and exclusions, every extra request becomes a negotiation — don't assume anything is covered unless specified (Nerdbot, June 2026).
- 100% upfront or 100% on delivery. Full upfront removes your leverage; full on delivery asks the agency to finance your project. Milestone splits exist to balance this.
- No acceptance criteria. Without defined sign-off, "done" is whatever the developer says — and the final payment becomes the argument.
- Developer keeps the domain, hosting, or admin access. Without a handover commitment, you're renting your own website.
- No termination clause. A stalled project with no exit terms has no clean ending and no rule for paying for work done.
If you're still comparing agencies before you get to the contract stage, our guide on choosing a web development company covers how to vet candidates — the contract is step two, not step one.
Before you sign: the 10-minute checklist
Run through this with the contract in front of you — or start from a web development RFP template so the contract has something concrete to reference.
- Every deliverable is named: pages, features, integrations, platform — plus explicit exclusions
- Payments are milestone-based with trigger events, currency fixed in AED (or agreed currency), and late-payment terms
- Timeline lists named milestones and says client-caused delays extend it
- Revision rounds are numbered; the change-request process and rates are written down
- IP transfers to you on final payment; licensed third-party components are listed separately
- Domain, hosting, and admin credentials transfer to you at handover — in your name
- Testing and acceptance criteria are defined, with a deemed-acceptance window
- Bug-fix warranty period is stated, with exclusions (your changes, third-party updates)
- Confidentiality covers subcontractors; data handling references the UAE PDPL
- Termination terms, governing law, and dispute venue are all explicit
- A UAE lawyer has reviewed anything above a trivial project value
Frequently asked questions
Who owns the website once it's built in the UAE?
You do — but only if the contract says so. UAE copyright law (Federal Decree-Law No. 38 of 2021) does not automatically transfer ownership of contractor-built work to the client. Standard practice: IP in custom code, design, and content transfers to you on final payment. Third-party components (themes, plugins, fonts, stock images) keep their own licences. Domain registration and hosting should also be in your name — confirm it in the contract, not just in conversation.
Is a verbal agreement or WhatsApp message a valid contract in the UAE?
UAE law recognises digital contracts and electronic signatures — Federal Decree-Law No. 46 of 2021 gives them the same legal validity as paper (Nour Attorneys). But validity and provability differ: a written, signed agreement with defined scope, milestones, and terms is enforceable in a way a chat thread is not. Never commission a website of real value without a proper written contract.
What payment structure should a web development contract use?
Milestone-based payments tied to project events, not dates. A common structure is 40% at kickoff, 30% at design approval or staging, 30% at launch (Axis Web Art, June 2026); a 50/50 deposit-launch split is also standard for fixed-scope projects. Avoid 100% upfront or 100% on delivery. Fix the currency in writing — AED for UAE projects — and include late-payment terms and a work-stoppage clause.
What happens if the developer disappears or the project is abandoned?
That's what the termination clause is for: a notice period (typically 14–30 days), payment for work completed to the termination date, and rules for files and work in progress — paid-for work transfers to you; unpaid work stays with the agency (Axis Web Art, June 2026). Include termination-for-cause for material breach not fixed after written notice. Keep the domain, hosting, and code repository in your name or accessible throughout.
Should I get a lawyer to review my web development contract?
For any project of meaningful value — in the UAE, anything above a few thousand dirhams — yes. A checklist tells you what should be in the agreement; a UAE lawyer tells you whether what's written actually protects you under UAE law: the current copyright regime (Federal Decree-Law 38/2021), the PDPL, and the right governing-law and jurisdiction clauses. The review cost is small next to the value at risk.
The bottom line
A web development contract is the project plan with legal force. Buyers who get burned in the UAE market are rarely victims of bad developers — they're victims of unwritten assumptions about scope, ownership, and what "done" means. Get the twelve clauses above into writing, confirm the IP assignment and handover, and have a lawyer review anything substantial.
Our guides to web development in the UAE and typical project timelines show what a well-scoped engagement looks like — and WebStackRank works on a fixed 50/50 deposit-launch model with full client ownership at handover, the same terms this article recommends.
