Privacy Policy — Caveman Organics

Effective Date: November 4, 2026

Last Updated: November 4, 2026

Caveman Organics Pvt Ltd ("Caveman Organics", "we", "us", or "our") respects your privacy and is committed to handling your personal information responsibly.

This Privacy Policy explains how we collect, use, store, share, and protect personal information when you visit our website, purchase our products, contact our team, or interact with our services.

Our website is https://cavemanorganics.pk.

This Policy applies to our online store, order processing, customer support, WhatsApp and other business communications, and related e-commerce operations. It also covers information processed through our internal order-management and automation systems, including Caveman OS Automation where applicable.

By using our services, you acknowledge the data practices described in this Policy. Where consent is required, we will request it separately.

1. Information We Collect

Depending on how you interact with Caveman Organics, we may collect the following categories of information.

Personal and Contact Information

• Full name

• Email address

• Mobile or WhatsApp number

• Billing and delivery addresses

• Account information and customer preferences

Order and Transaction Information

• Products ordered and quantities

• Order numbers, purchase history, discounts and order totals

• Payment method and payment status

• Cash-on-delivery confirmation status

• Payment references or evidence submitted for advance verification

• Courier tracking information, delivery status, returns and refunds

We do not require customers to send card passwords, banking PINs or one-time passwords through WhatsApp.

Customer Communication Information

• Messages sent to us through WhatsApp, email, social media or other customer-service channels

• Responses to order confirmation or cancellation requests

• Customer inquiries, complaints and service requests

• Attachments or payment screenshots voluntarily submitted

• Communication delivery and response records, where available

Technical and Website Information

When you browse our website, we and our service providers may collect technical information such as IP address, browser type, device information, approximate location derived from technical information, pages visited, referral sources, cookies and similar identifiers.

Some information is collected automatically through Shopify, analytics tools and other technologies used to operate and improve the website.

2. How We Use Your Information

We process personal information for legitimate business purposes, including:

• Processing, confirming and fulfilling customer orders

• Arranging payments, deliveries, returns, refunds and exchanges

• Verifying COD orders and applicable advance-payment requirements

• Communicating order updates and responding to customer inquiries

• Investigating suspected fraudulent transactions, duplicate orders and delivery disputes

• Maintaining transaction, accounting and operational records

• Providing customer support and resolving complaints

• Improving our products, website, delivery operations and customer experience

• Measuring advertising and website performance

• Sending promotional communications where permitted and where any required consent has been obtained

• Complying with legal, regulatory and recordkeeping obligations

We may use rule-based automation to classify order status, apply advance-payment requirements and route customer responses for processing or staff review.

A customer confirming an order does not automatically mean that a payment has been received or verified.

3. WhatsApp Communications and Order Confirmation

Caveman Organics may use the WhatsApp Business Platform, including Meta's WhatsApp Cloud API and authorized integrations, to communicate with customers regarding their orders.

These communications may include:

• Order confirmation requests

• Interactive Confirm Order or Reject Order options

• Advance-payment instructions where applicable

• Requests for payment verification

• Order-related clarification and customer support

• Shipping and delivery information

• Follow-up communications concerning unresolved orders

When you interact with our WhatsApp order-confirmation service, we may process your WhatsApp phone number, message identifiers, responses, related order information, message status and relevant timestamps.

We use this information to associate your response with the correct order, maintain an audit record, prevent duplicate processing and assist our customer-service team.

Some communications may be generated automatically. Certain decisions, such as payment verification, disputed cancellations or exceptional orders, may require staff review.

Order-related communications and marketing communications are treated separately.

Providing a phone number for an order does not, by itself, mean that you have subscribed to promotional WhatsApp messages.

Where required, we obtain separate permission before sending WhatsApp marketing communications.

You may contact our customer-support team to request assistance with order communications or change your communication preferences. Opting out of marketing will not affect essential order-related communications where those are otherwise permitted.

4. COD Orders, Advance Payments and Fraud Prevention

To protect customers and our business, certain orders may be subject to additional checks before fulfillment.

Depending on the order, these checks may include:

• Confirmation of the customer's intention to purchase

• Verification of contact or delivery details

• Review of relevant previous orders and delivery outcomes

• Identification of potentially duplicate or suspicious orders

• Verification of required advance payments

• Review of failed deliveries, returns or disputed transactions

If an advance payment is required, we may ask the customer to provide a payment reference or supporting evidence.

Payment information is reviewed against the relevant payment records before an order is treated as payment-verified.

We use reasonable measures to restrict access to payment evidence and related customer records to authorized personnel and service providers who need that information.

5. Shopify and Other Service Providers

Our online store is powered by Shopify, which provides e-commerce infrastructure and processes information necessary to operate the store.

We may share relevant personal information with trusted service providers, including:

• Shopify: Online store, checkout, order management and related services

• Meta and WhatsApp: Business messaging, approved communication services and related platform functions

• Courier and logistics partners: Delivery, parcel tracking, returns and delivery verification

• Payment providers and financial institutions: Processing and confirming payments, refunds and financial transactions

• Website analytics and advertising providers: Measuring website performance, advertising effectiveness and customer interactions

• Hosting, security and technology providers: Operating and protecting our digital systems

• Professional advisers and lawful authorities: Where required for legitimate business or legal purposes

We share information appropriate to the services being provided and seek to limit unnecessary disclosure.

Service providers may process information under their own applicable privacy notices or contractual data-processing arrangements.

We do not sell customer contact lists or private order-conversation records to third-party data brokers.

6. Cookies, Analytics and Advertising

Our website may use cookies, pixels and similar technologies for:

• Essential website operation and shopping-cart functionality

• Remembering relevant preferences

• Website security and fraud prevention

• Understanding website traffic and performance

• Measuring advertising campaigns and conversions

• Personalizing content and advertising where permitted

These tools may be provided by Shopify, Meta, Google or other services we use.

Some technologies are essential for website operation, while others may depend on customer choices and applicable consent requirements.

You may manage cookies through available website privacy controls and your browser settings. Disabling certain cookies may affect website features.

7. Marketing Communications

We may communicate product updates, offers and promotional information through permitted channels, including email, SMS and WhatsApp.

Where applicable law or platform rules require consent, we will obtain it before sending such messages.

Customers may unsubscribe from marketing emails using the unsubscribe link provided, or request removal from promotional WhatsApp or SMS communications through our customer-support channels.

We aim to respect marketing preferences and maintain appropriate consent records.

Opting out of marketing does not automatically cancel an existing order or prevent necessary transactional communications.

8. Data Storage, Security and Retention

We use reasonable administrative, technical and organizational safeguards intended to protect personal information against unauthorized access, disclosure, alteration, misuse and loss.

These may include access restrictions, authentication controls, secured connections, restricted staff permissions, logging and other appropriate security measures.

No online system or transmission method can be guaranteed to be completely secure.

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including order fulfillment, customer service, fraud prevention, accounting, legal compliance and dispute resolution.

Different types of records may be retained for different periods based on their purpose and applicable requirements.

Where information is no longer required, we take appropriate steps to delete, anonymize or otherwise securely handle it.

Some records may need to be retained despite a deletion request where necessary to comply with legal obligations, protect legitimate interests or resolve disputes.

9. International Data Processing

Some technology providers supporting our website, communications, payments or analytics may process or store information outside Pakistan.

This may involve processing in countries with privacy and data-protection rules different from those applicable in Pakistan.

Where required, we use appropriate contractual, technical or organizational safeguards and comply with applicable legal obligations concerning such processing.

10. Your Privacy Rights and Choices

Subject to applicable laws and relevant exceptions, you may request that we:

• Explain the personal information we hold about you

• Provide access to relevant personal information

• Correct inaccurate or incomplete information

• Delete personal information that is no longer required

• Restrict or stop certain processing where legally applicable

• Update your marketing communication preferences

• Consider objections to certain uses of personal information

Additional rights, including portability or rights associated with automated processing, may apply under particular data-protection laws.

We may need to verify your identity before providing, correcting or deleting information to protect against unauthorized requests.

We will respond within applicable legal timeframes and otherwise aim to handle requests without unreasonable delay.

11. Data Deletion Requests

Customers may request deletion of personal information collected through Caveman Organics' website, WhatsApp communications or related business systems.

To submit a request, contact:

Email: care@cavemanorganics.pk

Subject: Personal Data Deletion Request

Please provide sufficient information to help us locate the relevant records, such as your name, registered contact information or order number.

Do not send passwords, banking PINs or other sensitive authentication credentials.

After verifying the request, we will review the information associated with the customer and delete or anonymize eligible records where appropriate.

Some transaction, financial, fraud-prevention or legal records may be retained where required or otherwise permitted.

A dedicated data-deletion instructions page may also be provided through our website.

12. Children's Privacy

Caveman Organics does not intentionally solicit personal information from children under the age of 13.

If we become aware that we have collected personal information from a child in circumstances where parental or guardian authorization is required and has not been obtained, we will take appropriate steps to address the information.

Parents or guardians may contact us concerning relevant privacy requests.

13. Third-Party Websites and Services

Our website may link to third-party websites, payment services, social media platforms or other services.

Those services may operate under their own privacy policies and practices.

We encourage customers to review the applicable policies when interacting with third-party services.

We are not responsible for independent third-party practices outside our control, subject to applicable law.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology, business practices or legal requirements.

The updated version will be posted on our website with a revised effective or last-updated date.

Where required, we will provide additional notice or obtain consent for material changes.

15. Contact Us

For privacy inquiries, requests, corrections, marketing preferences or complaints, contact:

Caveman Organics Pvt Ltd

Website: https://cavemanorganics.pk

Email: care@cavemanorganics.pk

We will review your inquiry and respond through an appropriate customer-support channel.