Last updated: 8 June 2026
1. Who We Are (Data Controller and Processor)
This Privacy Policy explains how Nova Order Verify ("Nova Order Verify", "we", "us", or "our") handles personal data. Our registered business address is B-43, Federal B Area Block 12 Gulberg Town, Karachi, 75950, Pakistan. You can contact us at contact@novaorderverify.xyz or by phone at +92 370 1124350. Nova Order Verify provides an automated WhatsApp order-confirmation service to e-commerce and cash-on-delivery (COD) merchants in Pakistan. We send confirmation messages to a merchant's own customers through the official WhatsApp Business Platform (Meta Cloud API). Because of this, two roles apply: each merchant that uses our service is the data controller for its own customers' personal data and is responsible for obtaining valid consent; Nova Order Verify acts as a data processor and messaging platform that processes that data on the merchant's instructions to deliver order-confirmation messages. Where we determine the means and purposes of processing in our own right (for example, operating and securing the platform), we act as a controller for those activities.
2. What Personal Data We Collect
To deliver order-confirmation messages on behalf of our merchant clients, we collect and process the following personal data about a merchant's end customers: (a) the customer's name; (b) the customer's phone number (the WhatsApp number used to receive the confirmation message); and (c) order details such as the order number, items ordered, order value, delivery address area, and order status. We also record consent metadata, including the date and time consent was given, the phone number, the source/page where consent was captured, and the exact consent text shown to the customer. When merchants register for and use our platform, we also collect business contact and account information (such as business name, contact name, email, phone number, and billing details) needed to provide and bill for the service. We do not buy, scrape, rent, or import third-party contact lists, and we do not process special-category (sensitive) personal data for this service.
3. Why We Process Your Data (Purpose and Legal Basis)
We process end-customer personal data for one core purpose: to send transactional, utility-category order-confirmation messages asking the customer to confirm or cancel an order they placed with a merchant, in order to reduce fake and returned COD orders. We do not use this data to send marketing, promotional, or unsolicited bulk messages. The legal basis for this processing is the affirmative, opt-in consent the customer provides to the merchant at the point of order (see Section 5), combined with the legitimate interests of the merchant and customer in confirming and fulfilling a genuine order. Merchants must obtain valid, WhatsApp-specific consent before any message is sent, and we require this as a condition of using our service. We also process merchant account data on the basis of our contract with the merchant and our legitimate interest in operating, securing, and improving the platform.
4. How WhatsApp and Meta Are Used
Order-confirmation messages are delivered through the official WhatsApp Business Platform (Meta Cloud API). To send your message, the necessary data (such as your phone number, name, and order details contained in the approved message template) is transmitted to and processed by Meta Platforms, Inc. and its affiliates, which operate WhatsApp. Meta processes message and delivery data in accordance with its own terms and privacy policies. All message templates we use are transactional/utility order-confirmation templates that are submitted to and approved by Meta before they are sent. Nova Order Verify is an independent service built on the official WhatsApp Business Platform. We are not affiliated with, endorsed by, sponsored by, or an official partner of WhatsApp, Meta, or Facebook.
5. Consent and How It Is Captured
Messages are only sent to customers who have actively opted in. Consent is captured by the merchant at the point of order placement (for example, a checkout or order form) through an unchecked, affirmative WhatsApp consent option that the customer must deliberately select. The consent text clearly identifies that messages will be received via WhatsApp, names the business that will send them, and describes the message type (order-confirmation / utility messages) — for example: "I agree to receive WhatsApp order-confirmation messages about my order from [Merchant], sent via Nova Order Verify." Pre-checked boxes, consent implied from a purchase, and consent bundled into general terms acceptance are not valid and are not used. Phone numbers collected for other channels (such as SMS) are not reused for WhatsApp without fresh, WhatsApp-specific consent. We retain consent records as proof that valid opt-in was obtained.
6. Opt-Out (Reply STOP)
Recipients can opt out at any time. To stop receiving messages, a customer can simply reply STOP to any message, and the opt-out will be honored. Opt-out is always available, free, and never optional to honor on our side. Once a customer opts out, we suppress their number from further order-confirmation messages for the relevant merchant. Customers may also contact us at contact@novaorderverify.xyz to request opt-out or to raise any concern about messages received.
7. Data Sharing
We share personal data only as needed to provide the service: (a) with Meta/WhatsApp, to deliver messages via the WhatsApp Business Platform (Meta Cloud API), as described in Section 4; (b) with the relevant merchant, who is the controller of their own customers' data and receives the confirm/cancel responses and order status; and (c) with trusted infrastructure and sub-processors (such as secure hosting and database providers) that help us operate the platform, under appropriate confidentiality and data-protection obligations. We may also disclose data where required by applicable law or to protect our legal rights. We do not sell personal data, and we do not share it for third-party advertising.
8. Data Retention
We retain end-customer personal data only for as long as necessary to deliver order-confirmation messages and to support the merchant's legitimate order-processing and record-keeping needs, after which it is deleted or anonymized. Consent and opt-out records (including timestamp, phone number, source, and consent text) are retained for as long as needed to demonstrate compliance and for the period required by applicable law and Meta's policies. Merchant account and billing data is retained for the duration of the account relationship and any legally required retention period thereafter. Merchants may instruct us to delete their customers' data, subject to legal retention obligations.
9. Data Security
We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration. These include encryption in transit (HTTPS/TLS), access controls and authentication, the principle of least privilege, secure hosting, and ongoing monitoring. While no system can be guaranteed perfectly secure, we work to protect your data and to promptly address any security incident in line with applicable law.
10. Your Rights
Subject to applicable Pakistani data-protection law and, where relevant, international standards such as the GDPR, you have the right to access the personal data we hold about you, to request correction of inaccurate data, to request deletion, to object to or restrict certain processing, and to withdraw consent (including by replying STOP). To exercise any of these rights, contact us at contact@novaorderverify.xyz or write to Nova Order Verify, B-43, Federal B Area Block 12 Gulberg Town, Karachi, 75950, Pakistan. Because we act as a processor for merchants, we may direct or forward certain requests to the relevant merchant (the controller) and will assist them in responding. We aim to respond to all requests within a reasonable time.
11. International Transfers and Compliance
Because we use the WhatsApp Business Platform, some processing may involve transfer of data to Meta and its infrastructure located outside Pakistan. Where data is transferred internationally, we rely on the protections provided by our service providers and applicable safeguards. We process personal data in line with applicable Pakistani law and, where relevant, internationally recognized data-protection principles.
12. Changes to This Policy and Contact
We may update this Privacy Policy from time to time to reflect changes in our service, technology, or legal requirements. The latest version will always be available on this page. For any questions, requests, or complaints about privacy or data protection, contact us at contact@novaorderverify.xyz, by phone at +92 370 1124350, or by mail at Nova Order Verify, B-43, Federal B Area Block 12 Gulberg Town, Karachi, 75950, Pakistan.