Privacy Policy

This website is operated by Shatterix (“Shatterix”, “we”, “us”), a seller of Greek smash plates based in India. For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary for the personal data described in this policy, and you are the Data Principal.

This policy applies to our website, orders placed through it, and the enquiries and messages you send us by form, email or WhatsApp. It should be read with our Terms & Conditions.

Information you give us

• Contact details: your name, email address and mobile number.
• Delivery details: your address, PIN code, city and state.
• Celebration details: optional information such as your event date and delivery notes, which help us plan production and delivery.
• Enquiries and bulk quotes: event type, quantity, location and anything you write in a message.
• Conversations: emails and WhatsApp messages you send us, including any photos you share (for example, of a damaged delivery).

Payment information

Payments are processed by Razorpay. We receive confirmation that a payment succeeded, the amount and a payment reference. Your card number, CVV, UPI PIN and net-banking credentials go directly to Razorpay and are never visible to or stored by us.

Information collected automatically

• Technical data: like any website, our hosting provider records basic technical information (such as IP address, browser type and pages requested) to deliver the site securely and to detect abuse.
• Analytics: only if you click “Allow”, Google Analytics collects information about how the site is used, with IP anonymisation switched on.

We do not knowingly collect sensitive personal data such as health, financial account or biometric information.

We use your personal data only for the purposes below. Where the DPDP Act requires it, we rely on the consent you give when you submit a form or place an order.

To make and deliver your order

Confirming payment, producing your plates, arranging delivery and sending order and delivery updates.

To support you

Answering questions, preparing bulk quotes, and handling damaged deliveries, replacements and refunds.

To keep our records and meet the law

Maintaining tax and accounting records, preventing fraud, and complying with lawful requests from authorities.

To improve the website

Understanding which pages help people plan their celebration, only with your consent to analytics cookies.

We do not sell or rent your personal data, use it for automated decisions about you, or send you marketing messages unless you have asked to receive them.

We share personal data only with trusted service providers who help us run Shatterix, and only as much as each one needs:

• Razorpay: to process payments securely.
• Delivery partners: your name, phone number and address, to deliver your order.
• Cloud infrastructure providers: our website hosting provider and our database and file-storage provider (Supabase), which store order and enquiry records on our behalf.
• Email delivery provider (Google Gmail or Resend): to send your order confirmation and pass your enquiries to our inbox.
• Google Analytics: only if you consent to analytics cookies.
• WhatsApp (Meta): if you choose to message us on WhatsApp, your conversation is also subject to WhatsApp's own privacy policy.

These providers act on our instructions and may not use your data for their own purposes. We may also disclose information where required by law, court order or a government authority, or to protect the rights and safety of our customers and our business.

Some of our service providers store or process data on servers located outside India. Where this happens, we transfer data only as permitted under the DPDP Act and choose providers that apply strong security safeguards.

• Orders: for as long as needed to fulfil and support your order, and afterwards for the period required by law for tax and accounting records (for example, under GST law).
• Enquiries and messages: for as long as needed to respond and follow up, unless you ask us to delete them sooner.
• Information saved in your browser: until you clear it (see Cookies and browser storage).

We use reasonable security practices appropriate to the data we hold, including:

• Encrypted connections (HTTPS) across the whole website.
• A database that is not publicly accessible and is reachable only by our own servers.
• Access to order information limited to authorised people, protected by passwords.
• Payments handled by Razorpay, a PCI-DSS compliant payment gateway.

No system is perfectly secure. If a personal data breach occurs, we will notify the Data Protection Board of India and affected customers as required by law.

We keep cookies to a minimum. The site stores a few small items in your browser so it works the way you expect:

Your cart

The plates and quantities you've chosen, so your cart is still there when you come back.

Checkout details

Your contact and delivery details, remembered on this device to save you typing next time. Payment details are never saved.

Your choices

Your cookie choice and whether the plate-smashing sound is on.

Analytics cookies (optional)

Set by Google Analytics only after you click “Allow”.

Payment cookies

Razorpay's checkout may use its own cookies to process your payment and prevent fraud.

You can clear stored information at any time through your browser's settings.

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how we use it.
• Correct, complete or update data that is inaccurate or incomplete.
• Erase your data when it is no longer needed, unless we must keep it by law.
• Withdraw consent at any time, as easily as you gave it. This doesn't affect anything done before you withdrew.
• Nominate someone to exercise these rights on your behalf in the event of death or incapacity.
• Raise a grievance with us, and if you are not satisfied, with the Data Protection Board of India.

To exercise any of these rights, email contact.shatterix@gmail.com from the address you used with us, or include your order number. We may ask you to confirm your identity before acting on a request, and we will respond within the time required by law.

Our products and website are intended for adults. You must be 18 or older to place an order. We do not knowingly collect personal data from anyone under 18; if you believe a child has given us their data, please contact us and we will delete it.

Our site links to services such as Razorpay, WhatsApp and Instagram. Their privacy practices are their own, and we encourage you to read their policies when you use them.

We may update this policy as our services or the law change. The “Last updated” date at the top shows when it was last revised. If we make significant changes, we will highlight them on this page.

If you have a question or concern about how we handle your personal data, contact our Grievance Officer using the details below. We aim to acknowledge every grievance promptly and resolve it within the time required by law. If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India.