STATIONERY STORE

BUY NOW

Privacy Policy

Effective Date: 5 October 2026

1. Introduction

THE STATIONERY STORE LIMITED, operating the website www.stationerystoreltd.com, is committed to protecting the privacy and personal data of every customer, site visitor, and user who interacts with our online stationery retail platform. This Privacy Policy is drafted in full alignment with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Irish Data Protection Acts 1988 to 2018, the 2011 European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations (Ireland), and all applicable Irish and European data protection legal requirements. For users located in the United Kingdom, this policy also complies with the UK GDPR and relevant local UK data protection legislation, to ensure all personal data processing activities meet cross-jurisdictional regulatory standards.

This policy clearly explains how we collect, use, store, share, and protect your personal information when you browse our full stationery collection, add products such as our eco-friendly cork desk blotters, stitched-edge gaming desk mats, multi-section project folders, smooth-edged pen holders, and stackable desktop storage organizers to your cart, complete purchases, submit enquiries, or interact with any feature of our website. It also outlines your full legal rights over your personal data, and our formal processes for you to exercise these rights at any time. We have designed this document to be clear, accessible, and free of unnecessary overly technical jargon, so that you can fully understand our data practices and feel completely confident shopping with us, as a business trusted by thousands of customers across Ireland.

As the data controller for all personal data we collect through your use of our site, we take full legal and operational responsibility for safeguarding your information, and we ensure all data processing activities follow the core principles of data protection: lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability.

2. Who We Are

This website [www.stationerystoreltd.com] is operated and fully owned by ‌THE STATIONERY STORE LIMITED‌, a business registered and based in Ireland. Our full contact details are as follows:

  • Registered physical address: Dublin Road, Naas, Co. Kildare, Ireland
  • Contact email: [email protected]
  • Contact telephone number: +353 45 888 893

Under the requirements set by the Irish Data Protection Commission (DPC), the national Irish authority responsible for enforcing GDPR across all business operations in the country, we have implemented end-to-end compliance protocols that meet the full scope of Irish and European data protection rules. The DPC serves as our primary supervisory authority for all personal data processing activities, and we regularly review our practices to align with the latest guidance issued by the DPC, including updated rules for consent management, adtech processing, minor user data protection, and obligations related to emerging AI-powered tools we may integrate into our platform in the future.

3. What Personal Data We Collect

We only collect personal data that is directly relevant to delivering our stationery products and services to you, following the strict “minimum necessary” principle for all data collection activities. The categories of personal information we may collect from you include:

  1. ‌Basic identity data‌: Your full name, which we require to correctly label your order and verify your identity when you contact us with order or data-related enquiries.
  2. ‌Contact details‌: Your valid email address, which we use to send you order confirmations, shipping updates, respond to your support queries, and (only with your explicit separate consent) share information about new stationery drops, exclusive promotions, and product restocks. We also collect your contact phone number, to allow our local courier partners to reach you quickly if there is any unexpected delay or issue with your Ireland fast delivery.
  3. ‌Billing and shipping data‌: Your full billing address and nominated delivery address, which we use to process your payment accurately, dispatch your ordered stationery items to your correct location, and resolve any delivery-related issues that may arise.
  4. ‌Transaction and payment data‌: Details related to your purchases, including the specific stationery items you add to your cart and order, order value, purchase history, and payment reference information. We do not store your full credit card, debit card, or sensitive payment credentials on our own servers: all payment processing is completed through fully PCI DSS-compliant third-party payment providers that handle all sensitive financial data with end-to-end encryption.
  5. ‌Technical site usage data‌: When you visit [www.stationerystoreltd.com], we automatically collect limited technical information including your IP address, browser type and version, device type, operating system, referral source, pages you browse on our site, time spent on each page, click paths, and other data related to how you interact with our online store. This data helps us optimise our website performance, fix technical issues faster, and improve your overall shopping experience when you browse our full range of desk mats, pen holders, folders, and desktop storage products.
  6. ‌Marketing and preference data‌: Records of your preferences, including which stationery product categories you show most interest in, your choices for receiving marketing communications, and any feedback you share through our customer review forms after you receive your order.
  7. ‌Correspondence data‌: Any additional information you voluntarily provide to us when you send us an enquiry via our Contact page, submit a customer testimonial like the reviews shared by our customers Priya Shah, Marcus Webb, and Elena Cruz, or reach out to our support team with questions about products, deliveries, or refund policies.

We will never collect extra categories of personal data without providing you clear advance notice and obtaining any required explicit consent as mandated by data protection law.

4. How We Use Your Personal Data

All of your personal data is only processed for specified, explicit, legitimate purposes that we have clearly outlined in this policy, and we will never process your data in a way that is incompatible with these original purposes. The core lawful bases we rely on for all processing activities are set out below, along with the corresponding use cases:

  1. ‌Performance of a contract with you‌: The majority of our data processing activities are carried out to fulfil our contractual obligations to you as our customer. This includes processing your identity, shipping, and payment data to complete your stationery order, process your payment, arrange fast local Ireland delivery, send you accurate order and shipping status updates, and handle any returns or refund requests in line with our published Refund and Returns Policy. Without this data, we would not be able to successfully dispatch your ordered items such as our premium leather desk pads, heavy duty pressboard folders, or bamboo desktop storage boxes to your location.
  2. ‌Our legitimate business interests‌: Where it does not override your fundamental privacy rights, we process your data to pursue our legitimate interests of running a secure, efficient, customer-focused e-commerce stationery business. These legitimate interests include:
    • Optimising and improving our website functionality, so you can browse our full product catalogue easily and complete your checkout process without friction
    • Analysing anonymised and aggregated site usage data to understand which of our stationery products are most popular, so we can expand our collection to better match customer needs
    • Preventing fraudulent payment activity, unauthorised account access, and other security risks that could harm our business and our customers
    • Responding to your submitted enquiries and providing you with timely, helpful customer support
    • Sharing customer testimonials and reviews on our website, which helps other shoppers make informed purchasing decisions about our desk accessories, in full alignment with our terms of service
  3. ‌Your explicit consent‌: For any processing activities that rely fully on your consent, we will request your clear, freely given, specific, and unambiguous permission before we proceed. This includes sending you optional marketing emails about new stationery drops, exclusive discount offers, and product restocks, using non-essential cookies to track your site browsing behaviour for personalised product recommendations, and any other optional processing activities that do not fall under the other lawful bases we have outlined. You hold the full right to withdraw your consent at any time, through the unsubscribe link included in every marketing email, or by sending a simple request to our contact email [email protected], and any withdrawal of consent will not affect the lawfulness of processing we completed before that withdrawal.
  4. ‌Compliance with our legal obligations‌: We process your personal data when it is necessary for us to meet our legal responsibilities under applicable Irish, EU, and UK data protection, tax, and commercial laws. This includes retaining order and transaction records for the statutory period required by Irish tax authorities, disclosing information to regulatory bodies if we are formally required to do so by law, and responding to valid, lawful data subject requests submitted to us in line with GDPR requirements.

We will never use your personal data for automated decision-making or profiling that would produce legal or similarly significant effects on you, without fully explaining the details of that processing and obtaining your separate explicit consent as required by law. As we prepare for upcoming regulatory developments including the implementation of the ePrivacy Regulation and the AI Act, we will update our processes to ensure all profiling and automated processing activities fully reconcile the requirements of all relevant legislative frameworks, and we will notify you of any material changes through an updated version of this Privacy Policy.

5. Who We Share Your Personal Data With

We will never sell, rent, or lease your personal data to any third parties for their own marketing purposes, under any circumstances. We only share your limited personal information with carefully selected third parties strictly as required to deliver our stationery services to you, and we put in place binding data processing agreements with all these third parties to ensure your personal data receives the same level of strong protection that we maintain:

  • ‌Courier and delivery partners‌: We share only your full name, shipping address, and contact phone number with our trusted local Irish courier services, to allow them to successfully complete the fast local delivery of your stationery order to your specified location.
  • ‌Payment service providers‌: We share the minimum necessary transaction and payment details with our PCI-compliant payment processors, to facilitate secure, encrypted payment processing for your purchases.
  • ‌Website and technology service providers‌: We may share limited technical data with our website hosting providers, IT support teams, and security platform providers, who help us keep our [www.stationerystoreltd.com] site running reliably, securely, and with high performance for all visitors.
  • ‌Regulatory and law enforcement authorities‌: We may disclose your personal data if we are legally compelled to do so by a valid, lawful request from a court, government body, or regulatory authority such as the Irish Data Protection Commission, to comply with our legal obligations, or to protect the rights, property, and safety of our business, our customers, and the general public.

All third parties we share your data with are required to process your information only following our explicit written instructions, implement strict appropriate technical and organisational security measures to protect your personal data, and delete or return all of your data to us immediately once they have completed their services. We will never transfer your personal data outside of the European Economic Area (EEA) unless the destination country provides an adequate level of data protection, or we have put in place appropriate legally recognised safeguards to protect your rights, in full compliance with GDPR data transfer rules.

6. Data Retention and Security

We will never keep your personal data for any longer than is strictly necessary to fulfil the exact purposes we originally collected it for. The standard retention periods we follow are:

  • For order-related transaction data: We retain this data for 7 years after your order is completed, to meet the Irish Revenue Commissioners’ statutory record-keeping requirements for tax and commercial accounting purposes.
  • For customer marketing preference data: We retain this data for as long as you remain subscribed to our marketing communications, or for a maximum of 3 years after your last interaction with our site, to ensure we do not send irrelevant or unwanted communications.
  • For site usage and technical analytics data: We retain this anonymised or pseudonymised data for a maximum of 12 months, after which it is fully deleted or permanently anonymised so that it can no longer be linked back to an identifiable individual.
  • For data related to any submitted support or enquiry tickets: We retain this data for 3 years after our final response to your query, so we can reference previous context if you reach out to us with related questions in the future, before permanently deleting it.

To protect all of your personal data against unauthorised access, accidental loss, destruction, alteration, or unlawful disclosure, we have implemented a comprehensive set of robust technical and organisational security measures:

  • All data transmitted between your browser and our website is encrypted using TLS 1.3 standard, to prevent interception during transfer
  • All sensitive personal data stored on our servers is protected with industry-standard AES-256 encryption
  • We enforce strict role-based access controls, so only a very limited number of authorised staff members who require the data to perform their job duties are granted access to your personal information
  • We carry out regular security audits, vulnerability scans, and penetration testing of our website and server infrastructure, to identify and fix any potential security risks as early as possible
  • We maintain a secure, tested backup and disaster recovery system, so we can restore access to critical order data in the event of any unplanned technical outage or incident
  • All our staff complete mandatory annual data protection and information security training, to ensure they understand their legal obligations to protect customer personal data at all times.

In the extremely unlikely event that we identify a personal data breach that poses a high risk to your rights and freedoms, we will notify the Irish Data Protection Commission without undue delay, no later than 72 hours after we become aware of the breach, and we will directly notify you as required by GDPR law if the risk to you is high.

7. Your Data Protection Rights

Under applicable Irish, EU, and UK data protection law, you hold a full set of enforceable legal rights over your personal data. You can exercise any of these rights at any time, completely free of charge, by sending us a request to our contact email [email protected], or by writing to us at our registered physical address: Dublin Road, Naas, Co. Kildare, Ireland. We will respond to your valid request within one calendar month, as required by GDPR rules, and we will only ask you to provide minimal identity verification information to confirm your identity before processing your request, to protect your data against unauthorised access.

Your full rights include:

  1. ‌The right to access‌: You have the right to request a full copy of all personal data we hold about you, along with a clear explanation of how we process that data.
  2. ‌The right to rectification‌: If any of the personal data we hold about you is incomplete, inaccurate, or out of date, you have the right to request that we correct and update that information immediately.
  3. ‌The right to erasure (the “right to be forgotten”)‌: You have the right to request that we permanently delete all of your personal data, in circumstances where there is no valid legal reason for us to continue processing or retaining your information.
  4. ‌The right to restrict processing‌: You have the right to request that we pause our processing of your personal data, in scenarios such as when you contest the accuracy of your data, when our processing is unlawful, or when we no longer need your data for our original processing purposes.
  5. ‌The right to data portability‌: You have the right to request that we provide you, or a nominated third party of your choice, with all of your personal data in a structured, commonly used, machine-readable format, so you can easily transfer that data between different service providers.
  6. ‌The right to object‌: You have the full right to object to our processing of your personal data at any time, for any processing activities we carry out based on our legitimate business interests, or for any direct marketing communications we send to you.
  7. ‌The right to withdraw consent‌: If you previously provided us with your explicit consent for any specific data processing activity, you hold the right to withdraw that consent at any time, with immediate effect.
  8. ‌The right to lodge a complaint‌: If you are unhappy with our response to your data rights request, or you believe our processing of your personal data violates applicable data protection law, you have the full right to lodge a formal complaint with the Irish Data Protection Commission, whose official website you can access at www.dataprotection.ie.

8. Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience when you shop for our stationery products. The small text files known as cookies are stored on your device when you visit our site. We split the cookies we use into two clear categories:

  • ‌Strictly necessary cookies‌: These cookies are absolutely essential to allow our website to function correctly. They power features that include remembering the products you add to your empty or active cart, saving your checkout progress, and ensuring your logged-in session remains secure. You cannot turn off these necessary cookies through our site cookie settings panel, as the site will not work properly without them.
  • ‌Non-essential, optional cookies‌: These include analytics cookies that help us understand how visitors browse our product pages, so we can improve our site layout, and optional marketing cookies that help us show relevant product recommendations to returning visitors. We will only place these non-essential cookies on your device if you give us your explicit, clear consent when you first land on our website, through our easy-to-use cookie consent banner. You can change or update your cookie preferences at any time, by accessing the cookie settings tool located in the footer of our site.

Following the latest DPC guidance on dark patterns and consent banner design, our cookie consent interface is fully transparent, easy to use, and does not hide or make it difficult for you to select the option to reject non-essential cookies. We do not use any manipulative design practices to push you into providing consent for unnecessary processing activities.

9. Changes to This Privacy Policy

We may update and revise this Privacy Policy from time to time, to reflect changes to our business operations, new product features, updates to our data processing practices, or to align with new changes in Irish, EU, or UK data protection laws and regulatory guidance. When we make material changes to this policy, we will update the “Effective Date” at the top of the document, and we will place a clear prominent notification on the homepage of [www.stationerystoreltd.com] to alert you to the upcoming updates before they go into effect. We encourage you to review this Privacy Policy on a periodic basis to stay informed about how we are protecting your personal data. Any continued use of our website after the effective date of the revised policy will be deemed as your acknowledgement and agreement to the updated terms, for all new personal data processing activities.

10. Contact Us

If you have any questions, comments, concerns, or requests related to this Privacy Policy, any of our data processing practices, or to exercise any of your legal data protection rights outlined in this document, please do not hesitate to contact us at any time:

  • Email: [email protected]
  • Telephone: +353 45 888 893
  • Postal address: Dublin Road, Naas, Co. Kildare, Ireland

We aim to respond to all legitimate data protection related enquiries within 3 working days, and we will work closely with you to resolve any questions or concerns you may have about how we protect your personal information as you shop our full collection of high-quality desk accessories and stationery products.