- Since March 2023 the Ministry of Commerce asks e-stores to register through the Business Platform, not Maroof.
- You need a commercial register or a valid freelance certificate, plus an active bank account.
- VAT is 15%. Registration is mandatory above SAR 375,000 of taxable turnover in 12 months.
- The data protection law (PDPL) applies to your customer data, so you need a clear privacy notice.
Do you need to register an online store in Saudi Arabia?
Yes. The Ministry of Commerce expects online stores to be documented on an official platform. Shoppers also look for that proof before they pay.
What is the Business Platform?
It is the online service linked to the Saudi Business Center. You register your store at business.sa. The ministry describes the process as simple and fully online.
What happened to Maroof?
Maroof was the earlier platform for e-stores. On 30 March 2023 the Ministry of Commerce said e-stores should document themselves through the Business Platform instead. You will still see Maroof in older guides, so check the date on anything you read.
What do you need to register an e-store in Saudi Arabia?
The list is short. Have these ready before you start.
Do you need a commercial register?
You need either a commercial register or a valid freelance certificate. Which one fits depends on whether you are a company or an individual seller.
Why does the store need a bank account?
The ministry requires an active commercial bank account for the store. The aim is to make payments more reliable and to reduce fraud.
Do online stores in Saudi Arabia have to charge VAT?
If your sales pass the threshold, yes. Small sellers may stay outside VAT, but they should track their turnover every month.
What is the VAT rate?
The standard rate is 15%. Some supplies are zero-rated at 0% and some are exempt.
When must a small store register for VAT?
Registration is mandatory for resident businesses when taxable turnover goes above SAR 375,000 in a rolling 12-month period. You must also register if you expect to pass it in the next 12 months. Between SAR 187,500 and SAR 375,000 you may register voluntarily. Below SAR 187,500 you cannot register.
What is e-invoicing in Saudi Arabia?
VAT-registered resident businesses must issue e-invoices under the Fatoora system. Phase 2 connects your accounting software to the system. ZATCA tells each business when its turn comes.
How does the PDPL affect an online store?
Every order gives you names, phone numbers and addresses. That is personal data. The Personal Data Protection Law (PDPL) has been fully enforceable since 14 September 2024. The regulator is SDAIA.
Do you need a privacy notice?
Yes. The notice should say what data you collect, why you collect it, the legal basis and where the data is used. Put it where customers can see it before they check out.
Can you store customer data outside Saudi Arabia?
Sending data to a country without an SDAIA adequacy decision needs safeguards. Examples are standard contractual clauses, binding corporate rules or a certificate of accreditation. A risk assessment is also required. Check where your store platform and email tool keep their servers.
What if a customer withdraws consent?
Consent is one legal basis for using data. When it is withdrawn, you may have to destroy the data. Build a simple way to remove a person from your lists.
What should a new store owner do first?
This part is our view, not a legal rule. It keeps the first month simple.
What is a simple order of steps?
- Open a commercial bank account for the store.
- Get your commercial register or freelance certificate.
- Register the store on the Business Platform.
- Track turnover each month against the VAT threshold.
- Publish a privacy notice before you take the first order.
Where should you check the rules?
Use the official Ministry of Commerce and ZATCA pages listed in the sources. Rules and thresholds change, and a licensed adviser can confirm your case.