Privacy Policy

NAKSON SERVICES

Effective Date: 31 May 2026 | Version 1.0

This Privacy Policy applies to all products, platforms, apps, and services operated by Nakson Group and its subsidiaries, including but not limited to:

• nakson.services — Agency & services website

• momdaughts.com / momdaughts.ae — Women's wellness DTC brand

• deepseacare.com — Maternity & breastfeeding DTC brand

• trackmyorder.pk — Multi-courier order tracking platform

• eSync ERP (esync.nakson.services) — Unified operations sync tool

• COD Checkout Pro — Shopify app for COD-dominant markets

• Internal HR & task management systems

• Any future apps, tools, or sub-brands operated under Nakson Group

By using any of the above products or services, you agree to the terms of this Privacy Policy. Where a specific product has supplemental privacy terms, those terms apply alongside this Policy.

1. Who We Are

Nakson Group (referred to as "Nakson," "we," "us," or "our") is an e-commerce and technology company headquartered in Karachi, Pakistan. We operate direct-to-consumer (DTC) brands, SaaS tools, and fulfillment infrastructure serving customers primarily in Pakistan and the UAE, with technology products deployed globally.

For privacy-related inquiries, contact us at:

Email: privacy@nakson.services

Website: https://nakson.services/contact

2. Information We Collect

We collect information to provide, improve, and operate our services. The categories of information we collect depend on which product or service you use.

2.1 Information You Provide Directly

• Name, phone number, email address, and physical address (for order placement and delivery)

• Payment details (Cash on Delivery confirmation data; we do not store card numbers)

• Account credentials for SaaS platforms or internal tools

• Support requests, feedback, and communications via WhatsApp, email, or contact forms

• Business information (for Nakson Services clients and partners)

2.2 Information Collected Automatically

• IP address, browser type, operating system, and device identifiers

• Pages visited, time on site, referral source, and click behavior via cookies and analytics tools

• Order tracking queries on trackmyorder.pk (courier name, tracking number, query timestamp)

• Shopify storefront interactions (for stores powered by our apps or themes)

• App usage data for COD Checkout Pro (checkout events, conversion signals, session data)

2.3 Information from Third Parties

• Courier partners (TCS, Leopards, Trax, BlueEX, etc.) providing shipment status updates

• Shopify and Shopify Partners program data for merchants using our apps

• Meta (Facebook/Instagram) advertising platforms — ad performance and audience data

• WhatsApp Business API providers for automated messaging flows

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Order Fulfillment & Customer Service

• Processing and delivering orders placed on momdaughts.com, momdaughts.ae, and deepseacare.com

• Sending order confirmation, dispatch, and delivery notifications via SMS, WhatsApp, or email

• Handling returns, exchanges, refunds, and complaints

• Verifying Cash on Delivery (COD) payments and reconciling bank deposits

3.2 Product & Platform Operations

• Providing order tracking results on trackmyorder.pk

• Operating COD Checkout Pro and related Shopify app functionality for merchant stores

• Running eSync ERP syncs across our internal operations

• Authenticating users in internal systems

3.3 Marketing & Retention

• Sending post-purchase follow-up messages and product recommendations via WhatsApp or SMS (with your consent or as permitted under applicable law)

• Running retargeting campaigns on Meta platforms using aggregated or hashed audience data

• Conducting satisfaction surveys and review requests

3.4 Business Analytics & Improvement

• Analyzing conversion rates, return rates, and product performance

• Improving website UX, checkout flows, and app functionality

• Internal reporting and operational decision-making

3.5 Legal & Compliance

• Complying with applicable laws and regulations in Pakistan, the UAE, and other relevant jurisdictions

• Investigating fraud, unauthorized transactions, or misuse of our platforms

• Enforcing our Terms of Service

4. Sharing of Information

We do not sell your personal information. We share information only as described below:

4.1 Service Providers & Operational Partners

• Courier and logistics companies (TCS, Leopards, Trax, BlueEX, PostEx, M&P, CallCourier, etc.) to fulfill orders

• Payment processors and banking partners for COD reconciliation

• WhatsApp Business API providers for transactional and marketing messaging

• Cloud hosting, analytics, and infrastructure providers (e.g., Vercel, Shopify, Supabase, Cloudflare)

• Third-party analytics tools (e.g., Google Analytics, Meta Pixel) in aggregated or pseudonymous form

4.2 Shopify Merchant Data (COD Checkout Pro)

When merchants install COD Checkout Pro on their Shopify store, we access the store data necessary to power the app's functionality. We process this data as a data processor on behalf of the merchant (the data controller). We do not use merchant customer data for our own marketing or share it with third parties outside of those necessary to operate the app.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change through our website or direct communication.

4.4 Legal Obligations

We may disclose information when required by law, court order, government authority, or to protect the rights, safety, and property of Nakson, our users, or the public.

5. Cookies & Tracking Technologies

We use cookies and similar tracking technologies on our websites and apps for the following purposes:

• Essential cookies — Required for checkout, login sessions, and core functionality

• Analytics cookies — To understand how visitors use our sites (Google Analytics, Meta Pixel)

• Marketing cookies — For ad targeting and retargeting on Meta platforms

• Preference cookies — To remember language, region, and display settings

You can control cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of our websites. On our Shopify-powered storefronts, Shopify's own cookie and privacy policies also apply.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Policy, or as required by law. Specific retention periods include:

• Order and transaction records — 7 years (for legal and tax compliance)

• Customer account data — Duration of account activity, plus 2 years after last interaction

• Tracking query data on trackmyorder.pk — 90 days (no account required; queries are anonymous beyond IP)

• WhatsApp marketing opt-in data — Until you opt out or request deletion

• App usage data (COD Checkout Pro) — 12 months rolling

• Internal employee/HR data — Duration of employment plus applicable statutory period

When data is no longer required, we securely delete or anonymize it.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access — Request a copy of the personal data we hold about you

• Correction — Request that we update inaccurate or incomplete data

• Deletion — Request that we delete your personal data, subject to legal retention requirements

• Opt-out of marketing — Unsubscribe from WhatsApp or SMS marketing at any time by replying STOP or contacting us directly

• Data portability — Request your data in a structured, machine-readable format where technically feasible

• Restriction — Request that we restrict processing of your data in certain circumstances

To exercise any of these rights, contact us at privacy@nakson.services. We will respond within 30 days. Identity verification may be required before processing your request.

8. Data Security

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, loss, or destruction. These include:

• HTTPS encryption on all public-facing websites and apps

• Access controls and authentication for internal systems and admin panels

• Restricted data access on a need-to-know basis within our team

• Regular review of third-party integrations and vendor security practices

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you believe your information has been compromised, contact us immediately.

9. International Data Transfers

Nakson Group operates primarily in Pakistan and the UAE. Our infrastructure may involve data processing by third-party providers located in other countries (including the United States and Europe). When transferring data internationally, we ensure appropriate safeguards are in place consistent with applicable data protection laws.

Users in the UAE should note that our UAE operations (momdaughts.ae) comply with applicable UAE data protection regulations, including the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL), as enforced.

10. Children's Privacy

Our products and services are not directed to children under the age of 13 (or 16 in the UAE). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information without parental consent, contact us at privacy@nakson.services and we will take steps to delete such information.

11. Third-Party Links

Our websites and apps may contain links to third-party websites, social media platforms, or courier portals. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any external sites you visit.

12. WhatsApp Communications

We use WhatsApp Business API for order notifications, delivery updates, and (with consent) marketing communications. By placing an order or opting in to our WhatsApp broadcasts:

• You consent to receive transactional messages related to your order

• You may separately consent to receive promotional messages; you can opt out at any time

• We do not send spam or share your WhatsApp number with third parties for their own marketing

WhatsApp communications are subject to Meta's Privacy Policy in addition to this Policy.

13. Shopify App Users (Applies to all Apps)

If you are a Shopify merchant using one of our apps, the following applies:

• We access your store data solely to provide the functionality described in the app listing

• We comply with Shopify's Partner Program requirements and API usage policies

• Your store's customer data is processed on your behalf — you remain the data controller

• We do not cross-use merchant customer data across our own brands or products

• App-specific data practices will be described in the app listing on the Shopify App Store

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes:

• We will update the "Effective Date" at the top of this document

• We will post the updated Policy at nakson.services/legal/privacy-policy

• For significant changes, we may notify you via email or WhatsApp if you have an account or active relationship with us

Your continued use of our products and services after any update constitutes your acceptance of the revised Policy. If you do not agree, please discontinue use and contact us to delete your data.

15. Contact Us

For any questions, concerns, or requests related to this Privacy Policy or your personal data, contact us at:

Nakson Group

Email: nakson.service@gmail.com

Website: https://nakson.services

Address: Hyderabad, Pakistan