Loyalty Program Terms and Conditions (UAE)

A Loyalty Program Terms and Conditions document in the United Arab Emirates is a consumer-facing contract that governs the enrolment, operation, and exit conditions of a retailer's or service provider's customer rewards scheme. The document sets out how members earn points or rewards on qualifying purchases, how those rewards may be redeemed, the conditions for tier progression, the points expiry policy, and the operator's right to amend or terminate the program. Under the UAE Civil Code (Federal Law No. 5 of 1985), Article 257 confirms that the contract is the law of the parties, making clearly published loyalty program terms binding on both the operator and enrolled members.

Loyalty programs have grown substantially in the UAE retail, hospitality, and e-commerce sectors. Major programmes operated by airlines, banks, supermarket chains, and online retailers serve millions of UAE residents and expatriate consumers, collecting significant volumes of personal data in the process. The Consumer Protection Federal Decree-Law No. 15 of 2020 and Cabinet Decision No. 66 of 2023 require that the material terms of any consumer transaction — including points earning rates, redemption restrictions, expiry policies, and the right to amend terms — be clearly disclosed to consumers before they enrol. The Ministry of Economy oversees compliance and may investigate programs that mislead consumers through undisclosed point devaluations or opaque redemption restrictions.

The Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), administered by the UAE Data Office, is particularly significant for loyalty programs because of the volume and sensitivity of the personal data collected: purchase histories, frequency patterns, category preferences, location data, and in some programs Emirates ID or passport details for age verification. The PDPL requires a lawful basis for processing, clear Privacy Policy disclosure, data security, and respect for data subject rights, all of which must be reflected in the loyalty program terms or in a linked Privacy Policy.

The Electronic Transactions and Trust Services Law (Federal Decree-Law No. 46 of 2021) validates electronic enrolment processes, e-member cards, and digital point balance records as equivalent to paper documents, enabling fully digital loyalty program operations. VAT under Federal Decree-Law No. 8 of 2017 applies to the underlying purchases from which points are earned, with the Federal Tax Authority issuing guidance on how to account for points-based discounts at redemption.

The Commercial Companies Law (Federal Decree-Law No. 32 of 2021) governs the corporate authority of the program operator to enter into loyalty program contracts, and the Commercial Transactions Law (Federal Decree-Law No. 50 of 2022) supplements the Civil Code for commercial aspects of the program. Anti-money laundering regulations under Federal Decree-Law No. 20 of 2018 may apply to programs where accumulated point values are large enough to function as a financial instrument.

Loyalty Program Terms and Conditions in the UAE are needed by every business that operates a consumer rewards scheme, whether a simple points-for-purchases programme, a tiered membership system, a cashback scheme, or a coalition program spanning multiple partner merchants.

Retail businesses launching a loyalty program for the first time must publish the Terms and Conditions before accepting the first member enrolment. The Consumer Protection Authority expects to see clear, accessible terms at the point of sign-up. Programs launched without published terms operate without a contractual basis for key decisions — including suspending accounts for abuse, forfeiting expired points, and amending earning rates — which creates significant exposure to member complaints before the Dubai Courts or the Abu Dhabi Judicial Department.

E-commerce retailers integrating a loyalty module into their checkout flow under the Electronic Transactions and Trust Services Law (Federal Decree-Law No. 46 of 2021) must ensure that members can access the Terms and Conditions before completing enrolment, consistent with the pre-purchase disclosure requirements of Consumer Protection Federal Decree-Law No. 15 of 2020.

Hospitality businesses — hotels, restaurants, and entertainment venues — operating loyalty programs for UAE residents and tourists need Terms and Conditions that address both online enrolment and in-venue sign-up, points earning on services as well as products, and the treatment of points earned under promotions or special events.

Programs amending existing terms must update their Terms and Conditions document and communicate changes to members with the notice period specified in the document. Consumer Protection Federal Decree-Law No. 15 of 2020 requires adequate notice of material changes to consumer-facing terms. A document that reserves the right to change terms without notice is likely to be treated as inconsistent with the good-faith obligation under Article 246 of the UAE Civil Code.

Coalition loyalty programs — where points may be earned or redeemed across multiple partner brands — require more complex Terms and Conditions addressing how points are credited and verified across partners, how liability is allocated between program operator and partner merchants, and how consumer complaints about partner transactions are handled. Data sharing between coalition partners must comply with the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).

UAE Loyalty Program Terms and Conditions compliant with Consumer Protection Federal Decree-Law No. 15 of 2020 must include the following elements. The forms-legal.com UAE Loyalty Program Terms and Conditions template covers each component.

Business and program identification requires the full legal name, trade licence number, and registered address of the program operator, the program name, the website or app URL, and customer support contact details. Both the Consumer Protection Authority and the UAE Data Office must be able to identify and contact the operator.

Eligibility and registration criteria must state who may join, including age requirements (typically 18 years and over), residency requirements, documentation required (Emirates ID or passport), and whether one account is permitted per person. The registration process must be described clearly, including how the account is activated and how the member receives their member number or digital card.

Points earning rate must state the number of points earned per AED spent on eligible purchases, whether double or bonus points apply during promotional periods, and which purchases are excluded from earning. VAT-exclusive or VAT-inclusive basis for calculation should be stated, consistent with Federal Decree-Law No. 8 of 2017.

Redemption rate and process must state how points are converted to a discount or reward value, the minimum redemption threshold, and where points may be redeemed. Restrictions on use — such as exclusion from certain product categories or combination with other promotions — must be disclosed.

Points expiry must state the trigger for expiry (typically the date of the last qualifying transaction), the expiry period, and how the member will be notified before expiry. Consumer Protection Federal Decree-Law No. 15 of 2020 requires transparent disclosure of expiry conditions.

Tier structure, if applicable, must describe the thresholds for tier qualification, the benefits of each tier, and how tier status is reviewed or lost. Tier demotion criteria must be clearly stated.

Consumer rights must confirm that the program does not restrict any statutory rights of UAE consumers, including return and refund rights under Cabinet Decision No. 66 of 2023.

Program changes must state the minimum notice period for material changes — earning rate reductions, expiry changes, or program termination — and the communication channel to be used. The right to amend should be expressly reserved.

Data protection must identify the lawful basis for processing member data, the data categories collected, third parties with whom data is shared, the retention period, and how members exercise their PDPL rights under the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).

Governing law must confirm UAE law and the competent courts.

Completing UAE Loyalty Program Terms and Conditions is a methodical process that requires commercial decisions to be made before drafting begins. Work through the template section by section.

Enter the business name as it appears on the UAE trade licence and the trade licence number. Enter the program name — the brand identity for the loyalty scheme — and the website or app URL where members will access their accounts and the Terms and Conditions.

Enter the customer support email. This is the address where members direct points disputes, cancellation requests, and data protection queries under the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).

Enter the effective date in DD/MM/YYYY format. This is the date the Terms and Conditions take effect for new enrolments.

Complete the eligibility criteria precisely. State the minimum age, the residency requirement, and the documentation required at registration. If corporate enrolment is available, address the corporate account rules separately in a schedule.

Describe the registration process. State whether enrolment is online, in-store, or both, and how the account is activated.

Enter the points earning rate clearly in AED terms: for example, 1 point per AED 1 spent. State whether this is based on the VAT-inclusive or VAT-exclusive purchase price. List excluded purchase categories — gift cards, service fees, VAT amounts — explicitly.

Enter the redemption rate and the minimum threshold. State exactly where points may be redeemed and what they cannot be used against.

Set the points expiry period and the event triggering the clock. State the reminder notice the program will give before expiry.

Describe the tier structure if the program has one, including thresholds and benefits.

Set the notice period for material changes and the account cancellation and fraud policy.

Confirm that the program links to a Privacy Policy compliant with the PDPL. Publish the Terms and Conditions on the website or app and ensure they are accessible at every enrolment touchpoint.

UAE Loyalty Program Terms and Conditions must comply with a layered legal framework. The UAE Civil Code (Federal Law No. 5 of 1985) provides the contractual foundation: Article 257 gives effect to freely agreed terms, Article 246 requires good-faith performance, and Articles 282 and 389 govern compensation for breach. The Commercial Transactions Law (Federal Decree-Law No. 50 of 2022) supplements the Civil Code for commercial aspects of the program.

Consumer Protection Federal Decree-Law No. 15 of 2020 and Cabinet Decision No. 66 of 2023 impose disclosure obligations requiring that all material terms — earning rates, redemption restrictions, expiry, and the right to amend — be clearly communicated before enrolment. The Consumer Protection Authority and the Ministry of Economy may investigate and sanction programs that mislead consumers.

The Electronic Transactions and Trust Services Law (Federal Decree-Law No. 46 of 2021) validates digital enrolment and electronic member records. The program's digital enrolment process must disclose the Terms and Conditions before the consumer confirms registration.

The Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) governs all personal data collected by loyalty programs. Processing must have a lawful basis, be disclosed in a Privacy Policy, comply with security requirements, and respect data subject rights. The UAE Data Office may investigate complaints and impose sanctions for non-compliance.

VAT under Federal Decree-Law No. 8 of 2017 affects the accounting treatment of points earned and redeemed. Federal Tax Authority guidance should be followed for the VAT treatment of the specific points structure used.

Anti-money laundering obligations under Federal Decree-Law No. 20 of 2018 may apply to programs where accumulated rewards reach values equivalent to financial instruments. The Commercial Companies Law (Federal Decree-Law No. 32 of 2021) governs the operator's corporate authority to operate the program.

UAE loyalty program operators commonly make the following errors that lead to member complaints and Consumer Protection Authority enforcement.

1. Points expiry not disclosed before enrolment. An expiry policy revealed to the member only when points are about to expire violates the pre-purchase disclosure requirement of Consumer Protection Federal Decree-Law No. 15 of 2020. Expiry terms must be visible before the consumer joins.

2. Devaluation without adequate notice. Reducing the redemption rate for accumulated points without the notice period reserved in the Terms and Conditions may breach the good-faith obligation under Article 246 of the UAE Civil Code (Federal Law No. 5 of 1985) and attract Consumer Protection Authority investigation.

3. No data processing disclosure. Loyalty programs collect substantial personal data but frequently publish no Privacy Policy or data processing disclosure. This violates the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and exposes the operator to UAE Data Office enforcement.

4. Ambiguous earning rate. Terms that state 'up to 1 point per AED 1' or that exclude many categories without listing them clearly fail the Consumer Protection Law's transparency requirement. Earning rates must be stated precisely.

5. Program termination without redemption window. Terminating the program without giving members a reasonable period to redeem accumulated points may be treated as a breach of the contractual promise to honour rewards, and may attract Consumer Protection Authority complaints.

6. Marketing opt-out not offered. Using loyalty program member data for marketing without separate consent, or failing to offer an easy opt-out, violates the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). Marketing consent must be separable from core loyalty program participation.

7. VAT not correctly accounted for on points redemptions. Failing to account for output VAT on the correct taxable consideration at redemption — the amount the customer actually pays in cash, not the gross list price — creates Federal Tax Authority compliance risk under Federal Decree-Law No. 8 of 2017.