Privacy Policy – STATIONERY HUB

Effective Date: 2 November 2026

1. Introduction

STATIONERY HUB PTY LTD, located at 37–59 Bryants Road, Loganholme, QLD 4129, Australia, with contact email [email protected] and contact phone number +61 7 3801 1677, operates the e-commerce website accessible at www.stationeryhubltd.com (hereinafter referred to as “the Site”). We are deeply committed to protecting the personal privacy of all users who browse, shop, and interact with our platform. This Privacy Policy is formulated in strict compliance with applicable global data protection regulations, including the General Data Protection Regulation (GDPR), the Australian Privacy Act 1988, the California Consumer Privacy Act (CCPA), and other relevant jurisdictional requirements, to clearly explain how we collect, use, store, share, and safeguard your personal information when you engage with our stationery workspace products and related services.

This policy applies to all visitors, registered users, and customers of the Site, covering every interaction from casual browsing of our desk pads, cable organizers, file folders, pen holders and other workspace stationery products, to completing purchases, subscribing to our updates, contacting our customer support team, and participating in any promotional activities hosted on our platform. By accessing and using www.stationeryhubltd.com after the effective date listed above, you acknowledge that you have read, understood, and agreed to all terms outlined in this Privacy Policy. If you do not agree with any part of this policy, please refrain from using our Site and services.

2. Definitions

For the purposes of this Privacy Policy, the following terms shall carry the meanings defined below:

‌Personal Data‌: Any information that can directly or indirectly identify you as an individual, including but not limited to your full name, contact phone number, email address, physical delivery address, payment details, device identifiers, browsing behavior data, and geolocation information.
‌Processing‌: Any operation or set of operations that is performed on personal data, including collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
‌User‌: Any individual who accesses, browses, creates an account, places an order, or uses any feature or service made available through the Site.
‌Service Providers‌: Trusted third-party entities that we collaborate with to operate our e-commerce platform, process transactions, deliver orders, and enhance user experience, including payment gateways, shipping logistics partners, email marketing platforms, analytics tools, and cloud storage service vendors.

3. Types of Personal Data We Collect

We only collect personal data that is necessary to deliver our full range of stationery e-commerce services, following the principle of data minimization to avoid gathering unnecessary or irrelevant information. The categories of personal data we may collect include:

‌Account and Registration Data‌: When you create a registered account on our Site, we collect your full name, valid email address, contact phone number, and a securely encrypted password of your choice. This data helps us verify your identity, manage your account profile, and provide personalized service for your future orders.
‌Transaction and Checkout Data‌: When you complete a purchase of our workspace products, we collect your billing and delivery address, payment card or financial account details (processed exclusively through our compliant payment gateway partners), order item details, purchase history, and associated transaction records. This information is required to process your payment, fulfill your order, and resolve any post-purchase inquiries related to your transaction.
‌Device and Usage Data‌: As you navigate the Site, we automatically collect standard technical information including your device model, operating system type, unique device identifier, internet protocol (IP) address, browser type and version, language preferences, the pages you view on our Site, time spent on each product page, clickstream paths, search queries you enter, and the date and time of your access. This data helps us troubleshoot technical errors, optimize our website performance, improve product display logic, and protect the security of our platform against unauthorized access or fraud.
‌Communication Data‌: When you reach out to our customer support team via email, phone, or the contact form on our Site, or when you respond to our market research surveys, we collect the content of your messages, your preferred contact method, and any additional personal information you voluntarily provide to help us resolve your query efficiently.
‌Geolocation Data‌: With your explicit consent, we may collect approximate or precise geolocation information from your device to show you accurate local shipping rates, recommend region-specific promotional offers, and estimate accurate delivery timelines for your stationery orders. You can withdraw your consent to this data collection at any time through your device settings or your account privacy dashboard.
‌Cookie and Tracking Data‌: We use cookies, web beacons, and similar tracking technologies to collect data about your browsing behavior on our Site. These tools help us remember your saved cart contents, save your preferred display settings, analyze site traffic patterns, and deliver personalized product recommendations for desk organizers, file folders, and other stationery items that align with your previous browsing interests. You can adjust your browser settings to refuse cookies, but please note that disabling cookies may limit your access to certain full features of the Site.

4. Legal Bases for Processing Your Personal Data

We process your personal data only on valid legal grounds that comply with applicable global data protection laws:

‌Performance of a Contract‌: Processing your account, transaction, and delivery data is necessary to fulfill our contractual obligations to you, including processing your order, shipping your purchased stationery products, providing post-sales support, and honoring our return and refund policy terms.
‌Legitimate Interests‌: Where it does not override your fundamental privacy rights, we process your usage data, browsing analytics, and basic contact information to maintain and improve the security, functionality, and performance of our e-commerce platform, conduct targeted marketing of new workspace stationery products that may interest you, and prevent fraudulent transaction activities on our Site.
‌Your Explicit Consent‌: We rely on your explicit, freely given consent to process your personal data for activities such as sending you our promotional email newsletter, collecting precise geolocation data, sharing your information with non-essential third-party marketing partners, and processing any special categories of personal data you voluntarily submit to us. You have the full right to withdraw this consent at any time, without affecting the lawfulness of processing carried out before your withdrawal.
‌Compliance with Legal Obligations‌: We may process your personal data when it is necessary for us to comply with our statutory legal obligations, including maintaining accurate financial records for tax audit purposes, responding to valid legal requests from authorized government or law enforcement authorities, and meeting mandatory data retention requirements set by applicable industry regulations.

5. How We Use Your Personal Data

All personal data we collect is used exclusively for transparent, specified purposes directly related to operating our stationery e-commerce business, including:

To create, maintain, and manage your user account on www.stationeryhubltd.com, and allow you to access your order history, saved shopping cart, and personalized product preferences easily across subsequent visits.
To process, verify, and complete your payment transactions for all stationery products you purchase on our platform, ensuring that your financial information is handled securely and in line with global payment card industry security standards.
To arrange the shipping and delivery of your ordered products to your specified address, and send you real-time updates about your order status, logistics tracking information, and expected delivery window via email or SMS.
To respond promptly to your customer service inquiries, address product return or refund requests you submit, and resolve any disputes or issues you may encounter with your purchased stationery items.
To send you optional marketing communications, including updates about new product arrivals, exclusive promotional discounts, seasonal workspace styling tips, and limited-time offers for our desk pads, cable management sets, and file folder collections. We will only send these marketing messages to you if you have opted in to receive them, and every marketing email we send will include a simple, one-click unsubscribe link you can use to opt out of future promotional communications at any time.
To conduct internal market research and user experience analysis, using anonymized and aggregated usage data to identify popular product categories, optimize our website navigation structure, and adjust our product inventory to better meet the needs of our customer community of office and remote work workspace users.
To protect the security, integrity, and availability of our Site, our internal business systems, and all our registered users, by detecting and preventing unauthorized account access, fraudulent payment attempts, cyberattack activities, and other illegal or harmful behaviors that may threaten our platform.
To comply with all applicable legal, regulatory, and judicial requirements that apply to our e-commerce operations, including retaining transaction records for tax and accounting purposes, and cooperating with formal, lawful requests from public authorities.

6. Sharing and Disclosure of Your Personal Data

We will never sell, rent, or trade your personal data to unrelated third parties for their independent marketing purposes without your explicit written consent. We may only share your personal data with carefully selected parties under the following limited, secure circumstances:

‌Authorized Service Providers‌: We share necessary personal data with our trusted third-party service providers who perform critical operational functions on our behalf. These parties include our mainstream payment gateway providers that process encrypted payment information, our vetted logistics and shipping partners that deliver your ordered stationery products to your physical address, our email marketing platform vendors that help us send you opt-in promotional updates, our cloud hosting providers that store our website data securely, and our web analytics partners that help us understand non-identifiable site traffic patterns. All of these service providers are bound by strict data protection agreements that require them to safeguard your personal data, only process it in accordance with our explicit instructions, and never use it for their own independent purposes.
‌Legal and Regulatory Disclosures‌: We may disclose your personal data when we are legally required to do so, to comply with a court order, government regulatory investigation, valid law enforcement request, or other mandatory legal process applicable to our business operations. We will also disclose your information if we determine in good faith that disclosure is necessary to protect our legal rights, safeguard the safety of our users or the general public, investigate fraud, or respond to an emergency situation.
‌Business Transfer Scenarios‌: In the event of a merger, acquisition, full or partial sale of our company assets, corporate restructuring, or other business transition process, your personal data may be transferred to the successor entity as part of the business assets being transferred. We will provide you with advance notice via prominent announcement on our Site before your personal data is transferred to the new entity and becomes subject to a different privacy policy terms.
‌With Your Explicit Consent‌: We may share your personal data with any other third party when you have provided your clear, explicit, and informed consent for us to do so for a specific, stated purpose that you have agreed to.

7. Data Retention Period

We will not retain your personal data for any longer than is strictly necessary to fulfill the specific purposes for which it was originally collected, as outlined in this Privacy Policy. The specific retention periods we apply to different categories of personal data are:

For account-related personal data: We retain your full account profile data for as long as your account remains active on our Site. If you choose to delete your user account permanently, we will erase all your associated personal data within 30 days, except for the limited information we are required to retain to meet legal tax, accounting, and regulatory record-keeping obligations.
For transaction and order data: We retain your order and transaction records for a minimum of 7 years after your order is completed, to comply with Australian tax law requirements, resolve any potential warranty or post-sales disputes, and honor our return and refund policy terms.
For marketing communication contact data: We retain your email address for marketing purposes only for as long as you remain opted in to receive our promotional newsletters. Once you submit an unsubscribe request, we will remove your email address from our marketing mailing list within 7 business days.
For anonymized usage and browsing data: Anonymized, non-personally identifiable usage analytics data that can no longer be linked back to an individual specific user may be retained indefinitely for internal product improvement and business analysis purposes.

After the applicable retention period expires, we will securely delete, anonymize, or irreversibly destroy your personal data in full compliance with our data security protocols.

8. Your Rights Over Your Personal Data

In accordance with all applicable global data protection regulations, you hold a comprehensive set of legally recognized rights over the personal data we hold about you:

‌Right of Access‌: You have the right to request a complete copy of all personal data that we have collected and processed about you, free of charge. We will provide you with this information in a structured, commonly used, machine-readable format within 30 days of receiving your verified access request.
‌Right to Rectification‌: If you find that any of the personal data we hold about you is inaccurate, incomplete, or out of date, you have the full right to request us to correct and update that information immediately. You can edit most of your personal profile details directly from your account privacy settings on the Site, or contact us via our official contact channels for assistance.
‌Right to Erasure (Right to be Forgotten)‌: Under specific circumstances permitted by applicable law, you have the right to request us to permanently delete all your personal data from our systems, and notify any relevant third-party service providers associated with us to also erase their copies of your personal data. We will process your request unless we are legally obligated to retain certain data for valid legal or regulatory purposes.
‌Right to Restriction of Processing‌: You have the right to request that we temporarily restrict the processing of your personal data in scenarios where you contest the accuracy of the data, the processing is unlawful but you do not want us to erase it, we no longer need the data for our original processing purposes but you require it for the establishment, exercise, or defense of legal claims, or you have objected to our legitimate interest based processing and we are verifying whether our legitimate grounds override your rights.
‌Right to Data Portability‌: You have the right to request that we transfer the personal data you have directly provided to us, in a standard machine-readable format, directly to another data controller of your choosing, where technically feasible.
‌Right to Object‌: You have the right to object at any time to processing of your personal data that is based on our legitimate interests, including direct marketing activities. After you submit an objection to marketing processing, we will immediately cease all marketing communications to you.
‌Right to Withdraw Consent‌: At any point where you have previously given us your consent to process your personal data for a specific purpose, you may fully withdraw that consent easily, through your account settings or by contacting our privacy team. The withdrawal of consent will not affect the lawfulness of any processing activities that we carried out before your withdrawal.

To exercise any of these rights, you may submit a request to our Data Protection Officer via the contact details listed in Section 13 of this policy. We will verify your identity before processing your request, to ensure that we only respond to requests submitted by the actual owner of the personal data in question. We will not charge any fee for processing your verifiable rights request unless it is manifestly excessive, repetitive, or clearly unfounded, in which case we may charge a reasonable administrative fee to cover our processing costs.

9. Data Security Measures

We implement industry-leading, multi-layered technical, administrative, and physical data security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, destruction, or misuse:

All personal data transmitted between your browser and our Site is encrypted using 256-bit Secure Socket Layer (SSL) technology, to ensure that no third party can intercept or read your information during transmission over the public internet.
All sensitive personal data, including your payment information, government identification details (if submitted for cross-border shipping customs clearance purposes), and account passwords, are stored using end-to-end AES-256 encryption on our secure, access-restricted servers.
We enforce strict role-based access controls across all our internal business systems: only a very limited number of authorized staff who need to access your personal data to perform their operational duties (such as our customer support team processing your order or our finance team processing your payment) are granted access to your information, and all access activities are logged and audited regularly.
Our internal teams complete regular data privacy and cybersecurity training, and we conduct periodic third-party security audits and vulnerability assessments of all our systems to identify and address potential security risks proactively.
We maintain comprehensive data backup and disaster recovery protocols, to ensure that in the event of an unforeseen system incident, your personal data can be restored safely and rapidly without permanent loss.

While we take every reasonable measure to safeguard your personal data, no data transmission or storage system can be guaranteed to be 100% invulnerable. If we detect a personal data security breach that is likely to pose a high risk to your rights and freedoms, we will notify you and the relevant supervisory data protection authority without undue delay, in full compliance with applicable legal requirements.

10. Minors’ Privacy Protection

Our e-commerce website and all products and services offered on www.stationeryhubltd.com are targeted at general adult consumers, and we do not intentionally collect personal information from children under the age of 16. If we become aware that we have accidentally collected personal data from a minor under 16 without the verifiable consent of their parent or legal guardian, we will take immediate steps to delete all that related personal data completely from our servers. If you are a parent or legal guardian and you discover that your child has submitted personal data to our platform, please contact us immediately, and we will take all necessary action to remove that information.

11. Third-Party Links and Services

Our Site may contain hyperlinks to external third-party websites, such as social media platforms including Instagram, Pinterest, and TikTok that we link to from our homepage, or links to our payment gateway partners’ external platforms. When you click on these external links and navigate away from www.stationeryhubltd.com, this Privacy Policy no longer applies, as those external third-party websites operate under their own separate privacy policies, data processing rules, and security practices that are outside of our control. We strongly recommend that you review the privacy policy of every third-party website you visit before submitting any of your personal information to them, as we hold no responsibility or liability for the data handling practices of those external services.

12. Updates to This Privacy Policy

We may revise and update this Privacy Policy periodically from time to time, to reflect changes in our business operations, new legal and regulatory requirements, or improvements we make to our service offerings. When we make material changes to this policy, we will post the updated version on this page of our Site, clearly mark the new effective date at the top of the policy, and notify all registered users via a prominent pop-up notification on the Site homepage, or via email to your registered contact address, before the changes officially take effect. Your continued use of www.stationeryhubltd.com after the effective date of the revised Privacy Policy will be considered as your acceptance of all the updated terms.

13. Contact Information and Complaints

If you have any questions, concerns, feedback, or formal complaints about this Privacy Policy, or about our personal data processing practices, you can contact our Data Protection Officer directly using the following details:
STATIONERY HUB PTY LTD
Address: 37–59 Bryants Road, Loganholme, QLD 4129, Australia
Email: [email protected]
Phone: +61 7 3801 1677

We will respond to your inquiry within 10 business days of receiving your message. If you are not satisfied with the way we have handled your privacy-related complaint, you also have the right to submit a formal complaint to the relevant local data protection supervisory authority in your country or region of residence.