Privacy
policy.
HĒVA Chocolatery makes handcrafted chocolate and sweets to order. This notice explains what happens to your information when you browse this website or place an order with us.
It is written to be read, not to be skimmed past. If anything here is unclear, message us and we will explain it in plain words.
Last updated 13 September 2026
The short version
- This website sets no cookies, runs no analytics, and has no advertising trackers.
- Nothing you type into the order form is sent to us until you choose to continue into WhatsApp.
- We only hold the details you send us in conversation: what you would like, where it is going, and how to reach you.
- We do not sell your information, rent it, or share it for marketing.
- You can ask us what we hold, ask us to correct it, or ask us to delete it at any time.
The rest of this notice sets out the same thing in full.
Who we are
HĒVA Chocolatery is a small-batch chocolate maker operating in Pakistan. We are the data controller for the information described in this notice, which means we decide how it is used and we are responsible for looking after it.
You can reach us about anything in this notice on WhatsApp. WhatsApp is the only channel we use, so every message and reply stays in one place.
What this website collects
Nothing that identifies you. This site is a set of static pages. It has no accounts, no login, no newsletter sign-up, and no checkout.
- No cookies are set by us, and there are no analytics, advertising, heat-mapping, or session-recording scripts.
- Fonts and images are served from our own site, so browsing does not quietly report you to a third party.
- Your light or dark appearance and reduced-motion settings follow your own device preferences. They are read from your browser and never sent anywhere.
The order form on this site runs entirely inside your browser. It assembles a message from the choices you make and places that message in a WhatsApp link. Until you follow that link and press send in WhatsApp, nothing reaches us.
Information our hosting provider handles
Like any website, this one is delivered by a hosting provider. To serve a page and to protect the site from abuse, the provider processes standard technical request data such as your IP address, the type of browser and device you are using, the page requested, and the time of the request.
We use this only to keep the site online, fast, and secure. We do not use it to build a profile of you or to identify you.
What you share when you order
When you contact us, you choose what to tell us. To prepare and deliver an order, we will usually end up holding:
- Your name, the WhatsApp profile name shown to us, and your phone number.
- Your delivery address, area, and any instructions for finding you.
- What you have asked for: collections, flavours, quantities, gift sizes, and the occasion.
- Anything you tell us about allergies, intolerances, or dietary preferences, so that we can advise you correctly and prepare your order safely.
- Gift details you ask us to include, such as a message card and the recipient's name, and where relevant the recipient's delivery address and phone number.
- A payment reference or a screenshot of a transfer, where you send one as proof of payment.
- The conversation itself, which records what was agreed.
Information about allergies and health is sensitive, and we treat it that way. We use it only to prepare and advise on your order, and we ask you to share only what is relevant.
Please do not send us full payment card numbers, card security codes, banking passwords or one-time codes, or images of your CNIC. We will never ask you for them.
If you give us someone else's details so we can deliver a gift, please make sure they are happy for you to share them with us. We use those details only to deliver that gift.
Why we use it
We use your information to do the things you have asked us to do, and for nothing else:
- To answer your questions and give you a current menu and price.
- To prepare, pack, and deliver your order correctly and safely.
- To advise you about ingredients and allergens for the items you have chosen.
- To take payment and to keep a record of what was ordered and paid.
- To handle a problem, a replacement, or a refund if something goes wrong.
- To meet our legal, tax, and food-safety obligations.
We do not send marketing messages to people who have not asked for them. If we ever do start a broadcast list, it will be something you opt into, and every message will tell you how to leave.
A note about WhatsApp
Choosing to order on WhatsApp means your conversation with us is also governed by WhatsApp's own privacy policy and terms. We have no control over how WhatsApp handles message metadata, backups, or your account.
WhatsApp is the only channel we take orders and enquiries on, so if you would rather not use it, we are not able to take your order another way.
You can read WhatsApp's privacy policy at https://www.whatsapp.com/legal/privacy-policy.
How long we keep it
We keep order information for as long as we need it to complete your order, to deal with any question or claim that follows, and to meet our record-keeping and tax obligations. After that we delete it or stop being able to link it to you.
Our chat history with you stays in WhatsApp until one of us deletes it. You can clear your side of the conversation at any time from within the app, and you can ask us to clear ours.
How we keep it safe
Order information is held on a small number of devices that are kept locked and up to date, and access is limited to the people preparing and delivering your order.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If something goes wrong in a way that affects you, we will tell you and tell you what to do about it.
Children
This site and our products are intended for adults. We do not knowingly collect information from children. If you believe a child has sent us personal information, message us and we will delete it.
Your choices and your rights
Your information belongs to you. At any time you can ask us to:
- Tell you what information about you we hold.
- Correct anything that is wrong or out of date.
- Delete information we no longer need to keep.
- Stop contacting you, other than to complete an order already in progress.
Message us on WhatsApp and we will deal with your request promptly. We may ask a question or two to confirm we are speaking to the right person before we act on it.
Consumer and data protection law in Pakistan, including the provincial Consumer Protection Acts, gives you rights that this notice does not take away.
Links to other places
Our site links out to WhatsApp and may link to other services. Once you leave this site, the privacy practices of that service apply, and we are not responsible for them. It is worth reading their notices too.
Changes to this notice
If how we work changes, we will update this notice and change the date at the top of the page. Material changes will be described here rather than slipped in quietly.
Talk to us
Questions, corrections, or a request to delete something: message us on WhatsApp. A real person reads it.