Last updated: 8 June 2026
The short version
Order Verify ("Order Verify", "we", "us") runs an opt-in WhatsApp order-confirmation service for online stores and cash-on-delivery (COD) merchants in Pakistan. When you place an order and tick the consent box at checkout, the store you bought from passes your name, WhatsApp number and order details to us, and we send you a confirmation message on WhatsApp so you can confirm or cancel. That is the whole job. This page spells out what we hold, why we are allowed to hold it, who else touches it, how long we keep it, and how you can pull the plug at any time. Order Verify is operated from Office No. 03, Plot # 450-1, Sector 7-A, 75550, Karachi, Pakistan. Questions or requests: contact@orderverify.xyz or +92 371 2561688.
Who is responsible for your data (and who is just the engine)
There are two parties handling your information, and it matters which is which. The merchant you ordered from is the data controller: it decides to collect your details, sets up checkout consent, and owns the customer relationship. Order Verify is the data processor: we act on the merchant's instructions to deliver the confirmation message and nothing beyond that. We do not decide on our own to use your data for our own marketing, we do not resell it, and we do not repurpose it. For our own website visitors and for anyone who contacts us directly, Order Verify acts as controller for that limited interaction. If your question is about the order itself, the merchant is usually the right first stop; if it is about how the messaging service handled your data, contact us.
What we actually collect
We keep it deliberately narrow. From the merchant's checkout we receive: your name (as entered at checkout), your WhatsApp / mobile number, and order specifics such as order ID, item summary, order value, COD amount and delivery city. From the WhatsApp exchange we record: delivery and read status of the message, your reply (typically a confirm, cancel or STOP response), and the timestamps around it. We also capture a consent record proving you opted in, which store you opted in for, and when. For our website we log routine technical data such as IP address, browser type and basic analytics. We do not collect government ID numbers, passwords, full card numbers or any payment-card data, and we do not build advertising profiles about you.
Why we are allowed to message you
Your active, affirmative opt-in is the legal basis. At the merchant's checkout you tick an unchecked consent box that names the store, makes clear that order-confirmation messages will reach you on WhatsApp, and explains these are transactional utility messages about your purchase, not promotions. No pre-ticked boxes, no buried fine print, no "implied" consent harvested from the mere act of ordering. We also rely on legitimate interest for keeping minimal records that prove consent and protect against abuse, and on legal obligation where a law requires us to retain or disclose something. Because these are utility order-confirmation messages tied to a real purchase, we do not send marketing blasts, cold outreach, or bulk campaigns through this service.
The WhatsApp / Meta layer
Confirmation messages travel over the official WhatsApp Business Platform (Meta Cloud API). To deliver them, your number and the message content necessarily pass through Meta Platforms, Inc. and its affiliates, whose own privacy terms govern WhatsApp. Every message template we use is submitted to Meta and approved before it ever reaches you. Order Verify is an independent product built on top of that platform. We are not affiliated with, partnered with, sponsored by or endorsed by WhatsApp, Meta or Facebook, and we do not claim any official relationship with them. We simply use their published business tools the way they are meant to be used.
Who else sees your information
A short, named list: (1) the merchant you ordered from, who receives your confirm/cancel outcome to fulfil or hold your order; (2) Meta / WhatsApp, as the messaging carrier described above; (3) our vetted sub-processors, limited to cloud hosting and infrastructure, database and storage providers, and error-monitoring or analytics tooling, each bound by contract to protect your data and use it only to run the service. We never sell your data, never rent it, and never hand contact lists to advertisers or unrelated third parties. We may disclose information if a valid legal order compels us, or to investigate fraud, abuse or security incidents.
Where your data travels
Some of our processors, including Meta and certain cloud providers, operate servers outside Pakistan. That means your data may be processed in other countries whose data-protection rules differ from Pakistan's. Where we move data across borders, we rely on the consent you gave and on contractual safeguards with those providers requiring them to protect your information to a standard consistent with this policy.
How long we hold it
We keep order-confirmation and message data only as long as it is useful for delivering and reconciling confirmations and for the merchant's reasonable record-keeping, after which it is deleted or anonymised. Consent and opt-out records are retained longer because we may need them to prove you agreed (or asked to stop) and to honour your STOP preference going forward. Website logs are kept for a short, routine period. If a merchant ends its relationship with us, we delete or return that merchant's customer data within a reasonable window unless we are legally required to keep it.
Keeping it safe
We protect data in transit and at rest using encryption, restrict access to the small number of people who need it to run the service, and authenticate to the WhatsApp platform with securely stored credentials. We monitor for unusual activity and maintain a process to respond to incidents. No system is flawless, and we cannot promise absolute security, but we treat your data as if it were our own and act quickly if something goes wrong, including notifying the relevant merchant and authorities where the law requires.
Your controls and rights
You can ask to see what we hold about you, have it corrected, or have it deleted; you can object to or restrict certain processing; and you can withdraw consent at any time. Because the merchant is the controller, some requests are quickest through them, but you can always come straight to us at contact@orderverify.xyz and we will route or action it. We respond within a reasonable time and may ask you to verify your identity first so we do not hand your data to the wrong person.
Stopping the messages
Opting out is one word. Reply STOP to any confirmation message and we will stop messaging that number for that store, every time, no questions asked. The option is never hidden and we never penalise you for using it. You can also email contact@orderverify.xyz to be removed.
Children
This service is built for adult shoppers and store operators. It is not directed at children, and we do not knowingly process the data of anyone under 18. If you believe a minor's information has reached us, tell us and we will remove it.
Updates to this policy
As the service and the rules around it evolve, we may revise this policy and will change the date at the top when we do. Meaningful changes will be reflected on this page; continuing to use the service after an update means you accept the current version.
Reach us
Order Verify — Office No. 03, Plot # 450-1, Sector 7-A, 75550, Karachi, Pakistan. Email: contact@orderverify.xyz. Phone: +92 371 2561688. For data questions, mark your message "Privacy" so it reaches the right desk faster.