Privacy Policy

This Privacy Policy describes how UNIFRAG (“Platonic”, “we”, “us”, “our”), based at B-16, Lilamani Trade Center, Near Delhi Darwaja, Ahmedabad, 380004, Gujarat, India, collects, uses, and protects your personal data when you visit byplatonic.com (the “Site”) or place an order with us.

We comply with the Information Technology Act, 2000 (and rules thereunder), the Digital Personal Data Protection Act, 2023 (DPDPA), and applicable consumer protection laws of India.

We collect only the data we need to fulfil your order and improve your experience. Specifically:

• Identity & contact data: name, email address, phone number, shipping and billing addresses.
• Account data: if you create an account, we store your email address (used as your login identifier), saved addresses, order history, and communication preferences. Account access is authenticated by a one-time code sent to your email; we never store passwords.
• Order data: products purchased, payment method (we do not store full card details), and delivery preferences.
• Communication data: emails, WhatsApp messages, customer support tickets you send to us.
• Usage data: pages visited, time on site, device type, browser, IP address (for analytics and fraud prevention).
• Marketing preferences: whether you’ve opted into our newsletter or other communications.

We collect data when you: place an order, create an account, sign up for our newsletter, contact customer care, or browse the Site (via cookies and standard analytics). We don’t buy lists or scrape data from third parties.

We use your data to:

• Process and deliver your orders, including handling payments, shipping, and returns.
• Communicate with you about your orders, replies to your questions, and important service notices.
• Send marketing emails (only if you’ve opted in, you can unsubscribe at any time).
• Improve the Site, our products, and customer experience based on aggregated usage patterns.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with our legal obligations under Indian law.

We do not sell your personal data. We share it only with trusted third parties who help us run our business, and only to the extent necessary:

• E-commerce platform (Shopify Inc.): the Site is built on Shopify, which hosts the storefront, processes orders, stores your customer account and order data on its secured infrastructure, handles sign-in authentication via email one-time code, and sends your order-related emails such as order confirmation and shipping updates.
• Payment processors (Razorpay): to process your payment securely.
• Shipping & logistics partners (Shiprocket and our delivery couriers): to fulfil and deliver your order, including your name, delivery address, and phone number.
• WhatsApp notifications (Interakt): to send order updates (confirmation, shipping, out-for-delivery, delivery, and cancellation) and to provide customer support over WhatsApp, including your name, phone number, and order details.
• Marketing platform (Shopify Email): to send marketing emails and manage your subscription preferences, where you have opted in.
• Analytics providers (Google Analytics, for aggregated usage statistics, and Microsoft Clarity, which captures pseudonymised session activity such as clicks, scrolls, page interactions, session replays, and heatmaps): to understand how the Site is used and improve it.
• Advertising & measurement partners (Meta Platforms, Inc. / Meta Platforms Ireland Ltd.): we use the Meta Pixel and Meta’s Conversions API to measure the performance of our advertising and to show relevant ads on Meta’s platforms (such as Facebook and Instagram). This shares your activity on the Site (such as pages viewed and purchases) and, in hashed (pseudonymised) form, your email address and phone number, with Meta.
• Reviews platform (Judge.me): when you submit a product review, we share your name and email with Judge.me to collect, verify, and publish that review. The review form uses Google reCAPTCHA for spam protection, subject to Google’s privacy policy.
• Government authorities: only when required by law, court order, or to enforce our rights.

All third parties are required to handle your data in line with applicable laws.

We will never ask for OTPs, passwords, or bank details outside the Site or our official channels (care@byplatonic.com and WhatsApp). If you receive suspicious communication claiming to be from Platonic, don’t respond. Write to care@byplatonic.com to verify, or report it to the Indian Cyber Crime portal at cybercrime.gov.in.

The Site uses cookies and similar technologies to keep you signed in, remember your cart, and understand site usage. You can disable cookies in your browser settings, though some Site features may not work correctly if you do.

We use the Meta Pixel and Meta Conversions API, together with our analytics tools, to measure our advertising and to show you relevant ads on Meta’s platforms (such as Facebook and Instagram). You can control or opt out of personalised advertising through your Meta ad-preference settings and through your device or browser controls. We honour browser “Do Not Track” signals where technically supported.

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Order records are typically retained for a minimum of 8 years to meet Indian tax and accounting requirements.

Under the DPDPA and applicable law, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Correct: request correction of inaccurate or incomplete data.
• Delete: request deletion of your data (subject to legal retention requirements).
• Withdraw consent: opt out of marketing communications or revoke previously-given consent.
• Lodge a complaint: with the Data Protection Board of India if you believe your rights have been violated.

To exercise any of these rights, write to care@byplatonic.com. We acknowledge your request within 48 hours and respond within 30 days.

We use industry-standard technical and organisational measures to protect your data, including encrypted connections (HTTPS), PCI-compliant payment processing, restricted internal access, and regular security reviews. No system is perfectly secure, but we take reasonable precautions to prevent unauthorised access, disclosure, or loss.

The Site is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Your data is processed and stored both in India and abroad. Several of our service providers — including our e-commerce platform Shopify, our email and analytics tools, and our advertising partners — process or store data outside India, typically in Canada, the United States, or the EU. We take steps to ensure such transfers are governed by appropriate safeguards and comply with Indian law.

If UNIFRAG undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity. We will notify you by email or a notice on the Site before any such transfer takes effect, and your data will continue to be governed by this Privacy Policy or a substantially similar one.

We may update this Privacy Policy from time to time. Material changes will be notified by email (if you’re subscribed) or by a notice on the Site.

For privacy-related questions, requests, or complaints, write to: