Last updated: 10 June 2026
A Plain-English Promise
Mera Order ("we", "us", "our") is a small, focused service operated from Karachi, Pakistan. We do one job: when you place an order with an online store that uses Mera Order, we send you a WhatsApp message asking you to confirm or cancel that order before it ships. This page explains exactly what personal information passes through our hands while we do that job, why we have it, who else sees it, and what you can ask of us. We have tried to write this the way we would explain it to a friend across the counter — clearly, without burying anything important. If anything here is unclear, email us at contact@meraorder.xyz and a real person will answer.
Three Parties at the Table
Every message we send involves three parties, and it matters who does what: — The store you ordered from (the merchant). The store decides that order confirmations should be sent and is the "data controller" — the party legally responsible for deciding why and how your information is used. — Mera Order. We are the "data processor." We handle your information only on the store's documented instructions, only to deliver the confirmation service, and for no purpose of our own. — Meta Platforms, Inc. Messages travel over the official WhatsApp Business Platform (the Meta Cloud API). Meta transmits the messages and processes related data under its own terms and privacy policy, which apply separately to your use of WhatsApp. If you have questions about why a particular store collected your details, the store is your first stop. If you have questions about what Mera Order does with them, we are.
The Information That Reaches Us
We receive only what is needed to confirm an order, and nothing more: — Your name, as you gave it to the store at checkout. — Your phone number, so the WhatsApp message can reach you. — Order details — order number, items, order value, and the delivery address, to the extent the store includes them so you can recognise your own order. — Your reply — whether you confirm, cancel, or ask us to stop, plus message delivery status (sent, delivered, read). — Basic technical logs — timestamps and system records we need to run the service reliably and investigate problems. We do not build advertising profiles, we do not track your browsing, we do not read your other WhatsApp conversations (we cannot — we only see the conversation thread with the store's business number), and we never collect more than the confirmation task requires.
Why We Have It, and What Gives Us the Right
We process your information for one purpose: to send you a transactional order-confirmation conversation about an order you yourself placed, record your answer, and pass that answer back to the store so it ships only what you actually want. The legal basis is your consent. At checkout, the store presented you with an unticked box that named the store, told you the message would arrive on WhatsApp, and described it as an order-confirmation (utility) message. You ticked it yourself. No tick, no message — we do not send to anyone who has not actively agreed, and we contractually forbid the stores we work with from pretending otherwise. Where a small amount of processing rests on legitimate interests instead — for example, keeping fraud-prevention and system-security logs — we keep it to the minimum necessary.
Who Else Sees Your Information
Three categories of recipients, and no others: — Meta / WhatsApp. To deliver a WhatsApp message, the message content and your phone number must pass through Meta's WhatsApp Business Platform infrastructure. Meta processes this data under its own policies. — The store you ordered from. Your confirmation, cancellation, or other reply is returned to the merchant — that is the whole point of the service. — Sub-processors. Trusted technical providers (such as cloud hosting and infrastructure vendors) that help us run the service, each bound by written contracts limiting them to our instructions. That is the complete list. We do not sell your information, rent it, trade it, use it for advertising, or message you about anything other than the order in front of us. Authorities may receive data only where the law genuinely compels us.
Where Your Data Travels
Because messages move through Meta's WhatsApp Business Platform, some of your information is processed on servers operated by Meta outside Pakistan, including in other countries where Meta maintains infrastructure. Our own hosting providers may also store data outside Pakistan. Wherever the data goes, the same promises in this policy follow it. We choose providers that offer recognised contractual and security safeguards for international transfers, and we transfer only what the service strictly needs.
How Long We Keep Things
We keep order and message records only as long as they are useful for the job: — Order and reply records are retained while the store's account with us is active and for a reasonable period afterwards (typically up to 12 months) so the merchant has an audit trail of what was confirmed and when, and so disputes can be resolved. — Technical logs are kept for shorter operational windows and then rotated out. — After retention ends, records are deleted or irreversibly anonymised. A merchant may instruct us to delete records earlier, and you may ask for deletion directly (see your rights below). Where a law requires us to keep something longer — for example, financial records — we keep only what that law demands.
Locks on the Door
We protect your information with measures appropriate to a messaging service of this kind: encryption in transit (TLS for our systems; WhatsApp's own transport protections between Meta and your phone), access restricted to the few people who genuinely need it, least-privilege credentials, and routine review of who can touch what. No online system on earth is perfectly secure, and we will not pretend ours is the exception. If a breach ever puts your personal information at meaningful risk, we will inform the affected merchants and, where required, affected individuals and authorities, without undue delay.
What You Can Ask of Us
These are your rights, and we honour them without fuss: — Access — ask what information of yours we hold. — Correction — have inaccurate details fixed. — Deletion — have your information erased, subject to legal record-keeping duties. — Restriction and objection — limit or object to certain processing. — Withdrawal of consent — at any time, with effect going forward. — Complaint — raise the matter with a competent data-protection authority if we let you down. Because the store is the data controller, the fastest route is often through the store, but you are always welcome to write to us directly at contact@meraorder.xyz. We respond within 30 days, usually much sooner. We may ask you to verify your identity first — that is for your protection, not ours.
One Word Ends It
Reply STOP to any message we send and the messages stop. Immediately, permanently, and for free. We do not hide this option, argue with it, or make you fill in a form. Your number goes on a do-not-message list for that store, and we will not contact it again unless you opt in afresh at a future checkout. If you ever receive a message through Mera Order that you believe you never consented to, tell us at contact@meraorder.xyz. We investigate every such report, and stores that abuse consent lose access to our service.
Not Built for Children
Mera Order confirms commercial orders and is intended for people old enough to make purchases — it is not directed at anyone under 18, and we do not knowingly process children's personal information. If you believe a child's details have reached us, write to contact@meraorder.xyz and we will delete them promptly.
Where We Stand With WhatsApp and Meta
Mera Order is an independent Pakistani service. We build on the official WhatsApp Business Platform (Meta Cloud API) as an authorised technology user of that platform — and that is the full extent of the relationship. We are not affiliated with, partnered with, sponsored by, or endorsed by WhatsApp LLC, Meta Platforms, Inc., or Facebook in any way. "WhatsApp" and "Meta" are trademarks of their respective owners, used here only to describe the platform our messages travel on.
When This Policy Changes
If we change how we handle personal information, we will update this page and revise the "Last updated" date at the top. For changes that meaningfully affect you, we will give clearer notice — through the merchants we serve or prominently on meraorder.xyz — before the changes take effect. The current version always lives at this address.
Talk to a Human
Privacy questions, rights requests, complaints, or anything else — we read everything. Mera Order Office No.4, Street No. 7, Block A Sindhi Muslim CHS (SMCHS), Karachi, 75400, Pakistan Email: contact@meraorder.xyz Phone: +92 371 3850248