Built for Saudi Arabia, from mada to Fatoora. Website development company for businesses in Saudi Arabia

What a Saudi business website has to handle.

• mada first, through a licensed gateway

  Every Saudi gateway we read lists mada cards, so a Saudi checkout starts there. Moyasar, for one, says it works under the control and supervision of the Saudi Central Bank and takes mada, Visa, Mastercard, American Express, Apple Pay, Samsung Pay and STC Pay. Your business signs with the gateway; we connect its checkout, test it in sandbox mode and never hold your money ourselves.

  Source: Moyasar, payment methods, read 27 Oct 2026

• Apple Pay and pay later

  Apple lists Saudi Arabia for Apple Pay, with cards from Al Rajhi Bank, Saudi National Bank, Riyad Bank, Alinma Bank, Saudi Awwal Bank (SAB) and others, and the same list names stc pay and the pay-later services Tamara and Tabby. So an iPhone shopper in the Kingdom expects the Apple Pay button. We switch it on through your gateway and test it on a real iPhone before launch.

  Source: Apple, Apple Pay participating banks in Saudi Arabia, read 27 Oct 2026

• A privacy policy before the first form

  The PDPL has been enforceable since 14 September 2024, and SDAIA's privacy policy guideline sets what the policy must say: your business and its contacts, the data you collect (cookies included) and which fields are optional, why you collect it, where it is stored, how long you keep it, and how people use their rights and complain. So the policy goes live before the first form does. We also add a plain cookie notice and name each analytics tag in the policy.

  Source: CMS, New SDAIA rules and guidelines published as KSA's personal data protection framework is now enforceable, read 27 Oct 2026

• Data that leaves the Kingdom

  SDAIA amended its rules on sending personal data abroad in September 2024. A transfer to a country on SDAIA's adequacy list is the simple route, but no list had been published as of February 2025, so transfers rely on SDAIA's standard contractual clauses, binding common rules or accreditation. A form that emails a team abroad, an analytics tag or a server in Europe can all send data out, so we map where each one goes and write it into your policy.

  Source: Clyde & Co, 10 legal updates in KSA tech and data laws, read 27 Oct 2026

• Who you are, on the store

  Article 6 of the E-Commerce Law asks an online store to show the seller's name or distinguishing mark and its address (unless the store is registered with an e-store authentication body), how to contact it, and the name and number of the commercial or other public register it is in. We set these once in the footer and on the contact page, so every page carries them and one edit updates them all.

  Source: Qanoniah, E-Commerce Law (Royal Decree M/126), read 27 Oct 2026

• The store's links, and an invoice the shopper can keep

  The Implementing Regulations add three links every store must carry: a privacy policy, the way to complain, and the tax number if there is one, with any change clearly shown (Article 6). Licensed professions also show their licence number, expiry date and issuing body (Article 9). After each sale, Article 8 asks for an invoice the shopper can save, with the total price, the tax and the price breakdown, delivery fees, the delivery date, the carrier and tracking where available, a summary of the return rules, and the payment method with proof of payment.

  Source: Qanoniah, Implementing Regulations of the E-Commerce Law, read 27 Oct 2026

• Fatoora e-invoicing by 1 February 2027

  Phase 2 of ZATCA's e-invoicing has reached taxpayers in waves since 1 January 2023. Wave 25 covers those whose VAT-subject revenue passed SAR 187,500 in any year from 2022 to 2025, and they must connect their invoicing to the Fatoora platform by 1 February 2027. If your business is in a wave, the store hands each order to your Fatoora-integrated invoicing system rather than emailing a home-made PDF invoice. We scope that hand-off with your e-invoicing provider before we quote.

  Source: ZATCA, Wave 25 of e-invoicing integration, read 27 Oct 2026

• A .sa domain in your company's name

  SaudiNIC opens .sa only to entities physically in the Kingdom, Saudi nationals and Premium Residency holders, bodies licensed by a Saudi authority and owners of a trademark or trade name registered there. A .com.sa name needs a CR or a local trade name or trademark, the administrative contact must be in Saudi Arabia, and Arabic names sit under .السعودية. So you register it through a licensed registrar, and we set up the DNS and launch.

  Source: SaudiNIC, Domain name regulation v5.0, read 27 Oct 2026

• Arabic right to left, on its own URLs

  We set the Arabic pages right to left on the html element, use start and end spacing instead of left and right, and give the Arabic and English versions hreflang tags (ar-SA and en) that list each other. Google says it does not use hreflang or the lang attribute to detect a page's language; it reads the words. So the Arabic has to be real Arabic, written by a native Arabic writer named in your quote, not a machine translation.

  Source: Google Search Central, Tell Google about localized versions of your page, read 27 Oct 2026

Three Saudi concept builds, in English and Arabic.

Concept builds are working homepages we designed and built for fictional brands. For Saudi Arabia: Rawahil, a car rental website for Riyadh, Matanah, a construction company website for Jeddah and Sudul, an abaya store website for Riyadh. None of them is a client, and every page of every demo says so. See every concept build.

• 

  Concept build · Car rental · Riyadh

  Rawahil

  Open the live site

• 

  Concept build · Construction · Jeddah

  Matanah

  Open the live site

• 

  Concept build · Fashion · Riyadh

  Sudul

  Open the live site