Privacy policy

Office N Stationery Privacy Policy

Last updated: 20 October 2026

1. Who we are?

Office N Stationery is operated by MENSARK LTD, company number 16552046, a private limited company registered in the United Kingdom.

We are the controller responsible for personal information used to operate our store.

2. Information we collect.

We collect information you provide when purchasing, creating an account or contacting us, including your name, billing and delivery addresses, telephone number, email address, order details and correspondence.

We receive payment status and relevant transaction information from payment providers, and delivery and return updates from suppliers and couriers. Our website and service providers may also collect IP addresses, device information and browsing activity.

We need the information identified as required to process your purchase and arrange delivery. Without it, we may be unable to fulfil your order. Marketing preferences are optional.

3. Supplier fulfilment and delivery.

We source products for resale from suppliers, including wholesalers, manufacturers and other retailers such as Costco. Your order may be delivered directly by a supplier or its delivery provider.

Packaging and delivery notifications may show the supplier’s name or refer to the supplier order we placed to fulfil your purchase. Office N Stationery remains your seller and your contact for delivery issues, returns and faulty goods.

To arrange supply and delivery, we share the recipient’s name and delivery address, relevant order details, and telephone number or email address where necessary for scheduling or delivery notifications. Delivery providers may include Kinetic Logistics, depending on the order.

We limit disclosures to information necessary for the relevant fulfilment arrangement.

For your own purchase, our lawful basis for necessary order processing and fulfilment disclosures is performance of our contract with you, or steps you request before entering into a contract, under Article 6(1)(b) of the UK GDPR.

If you nominate another recipient, we use their necessary delivery information under Article 6(1)(f), based on our legitimate interests in delivering your order, balanced against their rights. We provide privacy information to that recipient where required.

Suppliers and couriers may act as independent controllers for activities they determine themselves, including their delivery, accounting and legal records. Their own privacy notices apply to those activities. Providers acting solely on our instructions are subject to the contractual safeguards required by data protection law. Contact us to identify the organisations involved in your order.

4. Other purposes and recipients.

We also use personal information for:

• Payments, returns and contractual support: necessary processing under Article 6(1)(b).

• Tax, accounting and other legal duties: compliance with legal obligations under Article 6(1)(c).

• Security, fraud prevention and resolving or defending claims: legitimate interests under Article 6(1)(f), subject to necessity and consideration of your rights.

• Optional marketing: consent under Article 6(1)(a), or legitimate interests where the law permits existing-customer marketing and the applicable requirements are met.

We use Shopify to operate our online store. We also share necessary information with payment processors, hosting and IT providers, customer-support providers and, where applicable, analytics and advertising providers.

We may disclose relevant information to professional advisers, insurers or authorities where necessary for advice, claims or legal obligations. If you request assistance with a manufacturer warranty claim, we may share information necessary for that assistance.

Shopify’s privacy information is available at https://www.shopify.com/legal/privacy/customers.

5. Marketing and cookies.

You can object to direct marketing at any time. Use the unsubscribe option in our messages. We will stop processing your information for direct marketing and retain only the minimum information needed to respect your choice.

You can withdraw consent without affecting earlier lawful processing. Essential order and delivery communications are separate from marketing preferences.

Our website uses cookies and similar technologies. Technologies strictly necessary to provide a service you request, such as the basket and checkout, do not require cookie consent. Any associated personal information still requires an appropriate UK GDPR lawful basis.

We obtain consent before using technologies that require it. Advertising tracking requires consent. Where a lawful exception applies to another technology, we meet the relevant information and objection requirements. Continuing to browse does not itself constitute consent.

6. International processing.

Services used to operate our store may involve processing information outside the UK.

Where a restricted international transfer is involved, applicable UK transfer requirements must be met. Depending on the arrangement, these may involve UK adequacy regulations or appropriate safeguards, such as the UK International Data Transfer Agreement or UK Addendum to approved standard contractual clauses, together with the required assessment.

7. Retention and security.

We retain information only for as long as necessary for its purpose and applicable legal obligations.

Order and accounting records are retained for legal record-keeping requirements. Delivery, return, support and warranty records are retained for the time needed to complete the service and address relevant complaints or claims. Account information is retained while needed to provide the account and meet related obligations. Security records are retained while needed to investigate or prevent incidents.

We retain minimal marketing suppression information for as long as necessary to respect opt-outs and review whether continued retention is needed.

We delete or anonymise information when it is no longer required, subject to legal obligations and ongoing claims. Cancelling an order does not require deletion of records we must lawfully retain.

We use appropriate technical and organisational safeguards and restrict access according to business need.

8. Your rights.

Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal information.

You can object to processing based on legitimate interests on grounds relating to your particular situation. Your right to object to direct marketing is absolute.

Where processing depends on consent, you can withdraw it at any time. Some rights have legal exceptions, including where records are needed to comply with law or defend claims.

We normally respond within one month and explain any lawful extension or permitted pause. Requests are normally free. We request identity information only where necessary and proportionate.

Where solely automated processing produces a decision with legal or similarly significant effects, applicable safeguards include information about the decision and the opportunity to make representations, request human intervention and challenge it. Contact us if you believe an automated decision has affected your order.

9. Complaints and changes.

You can raise a privacy complaint through the appropriate channels available on our website.

Please visit our for any questions or concerns regarding this Privacy Policy.

You may also complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/.

We update this policy when our practices change and provide additional notice where required.