User-generated content in the UAE: permissions, rights and what converts

A permission for user-generated content should cover three things a casual 'sure, go ahead' doesn't: the use you intend, whether that includes paid ads, and how long it lasts. A comment saying yes covers none of them, and it's the first thing you'll wish you had in writing when a post turns into an ad.

Which kind of user-generated content are you asking for?

Two different things share the name. UGC can mean content from real customers, or ad-style content made by paid creators for your accounts, and the permission, the cost and the rules differ for each. Influencers sit alongside both.

How do you ask for, record and reuse customer content?

1. 01Ask at the right moment, with one specific prompt. Message the customer on WhatsApp after delivery, the visit or the result, with a question such as 'What worried you before you booked?' If nobody answers, shorten the ask to one question and try the day after they've used the product, not the day it arrived.
2. 02Get permission for the specific use, in writing, before you post. Say where (your Instagram, your website, paid ads), for how long, and that they can ask you to remove it. Sample wording, not legal advice: 'May we share your photo and comment on our Instagram, our website and in our paid ads for the next 12 months? Reply YES to agree. You can ask us to remove it any time by messaging this number.' Save the dated reply. If they agree to organic use but not ads, record exactly that.
3. 03For health content, use a signed form. Health ads are stricter: Dubai Health Authority's standard requires documented consent from any patient or individual shown, and a chat reply may not meet it.
4. 04Check the content before you use it. Look for other identifiable people, including bystanders and children, other brands' logos, music in the video, medical or price claims, and personal details such as an address or a number plate. If something fails, ask for a retake or crop or blur it, and tell the customer what you changed.
5. 05Treat anyone you pay or gift as a creator. Ask for their Advertiser Permit, agree the disclosure wording, and put usage rights in a contract. Reports say the permit covers promotional posts whether or not the poster is paid, and they differ on the edges, so ask the National Media Authority if the arrangement is unusual. If they won't disclose, don't use the content.
6. 06Reuse in order of risk: organic first, then paid. For ads, check the permission covers paid use and the period, and use the platform's creator-ad tools, such as Spark Ads on TikTok or partnership ads on Instagram, so the ad runs from their handle with their authorisation. That arrangement is called whitelisting. If authorisation isn't granted, run the footage from your own account under the permission you hold, or ask again.
7. 07Test it against your own creative. Run a customer clip, a paid creator clip and your studio video against the same offer, audience and budget, and judge each by cost per qualified enquiry once each has produced enough enquiries that one more wouldn't change the order. How to test ad creative without a big budget shows the set-up.
8. 08Keep a rights register. A sheet with who, what, where it's used, the permission date, the end date and a link to the evidence. Remove content when permission ends or someone withdraws it.

What do the privacy rules say about reusing someone's image?

We can't quote a specific consent rule for photos and videos. The federal personal data law, Federal Decree-Law No. 45 of 2021, exists, but Morgan Lewis reported on 15 June 2026 that its implementing regulations hadn't yet been published. The detail may have changed since, so check before relying on this.

Written, specific, withdrawable permission is the cautious standard, and it's what Dubai Health Authority requires in health advertising. The DIFC and ADGM each have their own data protection law, so a business based in either should check that regime too. PDPL and marketing in the UAE goes into more depth, and none of this is legal advice.

What actually converts, without guessing?

Content converts when it answers the objection the viewer is holding. It shows the product in use by someone who resembles the buyer, states the price or the process plainly, and deals with the worry that stopped the viewer buying: delivery, fit, results or trust. A customer saying that in their own words does it better than a script, and a paid creator following a good brief can match it.

Don't assume user-generated content beats polished creative. Your own studio video may win with your audience, and the test in step seven settles it with your numbers.

What must you never do with testimonials?

Never write, buy or edit them. The UAE government portal says suppliers who advertise misleading prices and false data on goods and services face up to two years in prison and a fine of up to AED 2 million, and Clyde & Co reports fines of AED 10,000 to AED 100,000 for publishing immoral, misleading or fake content. An invented or altered testimonial risks falling under both, so keep every one real and unedited. Getting Google reviews in the UAE covers asking for reviews without breaking the rules.

For a handful of customer clips a month, you can run all of this yourself, and our social media service includes creator partnerships for when you'd rather not.

Pick five customers who've already said something good about you, send the permission message and file the replies. That's your first rights register, and influencer marketing in the UAE covers the paid side.