Who we are

This Privacy Policy for The Little Stationery Shop (‘we‘, ‘us‘, or ‘our‘), describes how and why we might access, collect, store, use, and/or share (‘process‘) your personal information when you use our services (‘Services‘), including when you:

• Visit our website at https://thelittlestationeryshop.co.uk, or any website of ours that links to this Privacy Policy

• Engage with us via our other pages including but not limited to Facebook, Instagram, Etsy and Tiktok.
• Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this Privacy Policy will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at hello@littlestationeryshop.com.

LAST UPDATED MAY 12th 2025

SUMMARY OF KEY POINTS IN OUR PRIVACY POLICY

What personal information do we process?
During your visits to our Services, we might process personal information based on your interactions with us, your choices, and the products and features you use.

Do we process any sensitive personal information?
Certain jurisdictions consider some information ‘special’ or ‘sensitive’, such as your racial or ethnic origins, sexual orientation, and religious beliefs. Our policy prohibits processing sensitive personal information.

Do we collect any information from third parties?
Third-party information collection does not occur in our practices.

How do we process your information?
Your information helps us provide, improve, and administer our Services, communicate with you, prevent security issues and fraud, and comply with legal requirements. Additional processing may occur with your consent. Every information processing activity requires a valid legal reason.

In what situations and with which types of parties do we share personal information?
Personal information sharing happens only in specific situations and with particular categories of third parties.

How do we keep your information safe?
Adequate organisational and technical processes protect your personal information. Nevertheless, no electronic transmission over the internet or information storage technology guarantees 100% security. Therefore, we cannot promise complete protection against hackers, cybercriminals, or unauthorised third parties who might improperly collect, access, steal, or modify your information.

What are your rights?
Your geographical location and applicable privacy laws determine your rights regarding personal information.

How do you exercise your rights?
Contacting us directly provides the easiest way to exercise your rights. All requests receive consideration and action according to applicable data protection laws.

Want to learn more about what we do with any information we collect?
Full information appears in the following sections.

1. WHAT PERSONAL INFORMATION DO WE COLLECT?

In Short: We collect personal information that you provide to us.

The personal information we gather comes directly from you when registering on our Services, requesting information about our products, participating in activities, or contacting us for any reason.

Personal Information Provided by You
Your interactions with us, choices made, and features used determine what personal information we collect. This information may include:

• names
• phone numbers
• email addresses
• mailing addresses
• usernames
• passwords
• contact preferences
• billing addresses
• debit/credit card numbers

Sensitive Information
Our systems do not process sensitive information.

Payment Data
When making purchases, we might collect data necessary for payment processing, including your payment instrument number and security code. Stripe handles and stores all payment data. Their privacy policy appears here.

All personal information must be true, complete, and accurate. Please notify us about any changes to such details.

Information automatically collected

In Short: Certain information—such as your Internet Protocol (IP) address and/or browser and device characteristics—gets collected automatically during visits to our Services.

Automatic collection occurs for specific information when you visit our Services. This data doesn’t reveal your identity but may include device and usage details, such as IP address, browser type, operating system, language preferences, referring URLs, device name, country, location, usage patterns, and other technical information. Security maintenance, operational needs, analytics, and reporting primarily drive this collection.

Many businesses, including ours, gather information through cookies and similar technologies. For more details, visit our cookie policy.

Our collected information includes:

Log and Usage Data
Our servers automatically gather service-related, diagnostic, usage, and performance information when you access our Services. This data might include your IP address, device information, browser settings, activity timestamps, viewed pages, searches, feature usage, device events, system activity, error reports, and hardware settings.

Device Data
Information about your computer, phone, tablet, or other devices used to access our Services comprises our device data collection. This might include IP address, device identifiers, application numbers, location data, browser type, hardware model, service provider details, operating system, and system configuration.

Location Data
Device location information, either precise or imprecise, forms part of our data collection. The amount collected depends on your device type and settings. GPS and other technologies might determine your current location based on IP address. You can opt out by refusing access permission or disabling Location settings, though this might limit your ability to use certain Service aspects.

2. HOW DO WE PROCESS YOUR PERSONAL INFORMATION?

In Short: Your information enables us to provide, improve, and manage our Services, communicate effectively, ensure security, prevent fraud, and comply with laws. Additional processing may occur with your consent.

Various reasons drive our personal information processing, depending on how you interact with our Services:

• Account Management: Your information facilitates account creation, authentication, and maintenance.
• Service Delivery: We process your data to provide requested services.
• User Support: Information processing helps us respond to inquiries and resolve potential issues.
• Order Management: We handle your information to fulfil orders, process payments, and manage returns or exchanges.
• User Communication: If you choose communication-enabling features, we process relevant information.
• Feedback Collection: When necessary, we process information to request feedback about our Services.
• Marketing Communications: With your permission, we may process personal information for marketing purposes, respecting your preferences. Opt-out options remain available at any time.
• Service Protection: Information processing contributes to our security efforts, including fraud monitoring and prevention.
• Service Improvement: We may process your information to identify trends, evaluate campaign effectiveness, and enhance our Services and your experience.
• Usage Analysis: Understanding how you use our Services helps us improve them.
• Legal Compliance: We process information to meet legal obligations, respond to legal requests, and protect our legal rights.

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: Information sharing occurs in specific situations described here and/or with particular categories of third parties.

Vendors, Consultants, and Other Third-Party Service Providers
Third-party vendors, service providers, contractors, or agents performing services for us or on our behalf may receive your data if access proves necessary. Contracts with these parties include safeguards for your personal information. They cannot use your data except as instructed, will not share it with other organisations, and commit to protecting and retaining it according to our instructions.

Third-party categories that may receive personal information include:

• Data Analytics Services

Additional sharing situations: Business Transfers 

Information sharing or transfer might occur during merger negotiations, company asset sales, financing arrangements, or business acquisitions.

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: Cookies and other tracking technologies help us collect and store your information.

Our Services may employ cookies and similar tracking tools (web beacons, pixels) to gather information during interactions. Some technologies maintain security, prevent crashes, fix bugs, save preferences, and support basic site functions.

Third parties and service providers may use tracking technologies on our Services for analytics and advertising, including ad management, interest-based targeting, and abandoned cart reminders (based on your communication preferences). Their technology provides advertising about products and services tailored to your interests, appearing on our Services or other websites.

Specific information about these technologies and cookie management appears in our cookie policy.

Google Analytics
We might share information with Google Analytics to track and analyse Service usage. To opt out of Google Analytics tracking across our Services, visit here.

For Google’s privacy practices, please review the Google Privacy & Terms page.

 5. HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?

In Short: We retain your information only as long as necessary to fulfil the purposes outlined in this Privacy Policy unless otherwise required by law.

Your personal information remains with us only as long as needed for the purposes stated in this Privacy Policy, except when laws require longer retention (tax, accounting, or other legal requirements). No purpose in this policy requires keeping your information beyond your account’s active life with us.

When legitimate business needs for processing your personal information end, we will delete or anonymise it. If immediate deletion proves impossible (for example, in backup archives), we will securely store and isolate your information until deletion becomes possible.

6. HOW DO WE KEEP YOUR PERSONAL INFORMATION SAFE?

In Short: Organisational and technical security measures help protect your personal information.

Appropriate and reasonable technical and organisational security measures safeguard any personal information we process. However, despite our efforts to secure your data, no electronic transmission over the Internet or information storage technology can guarantee 100% security. Hackers, cybercriminals, or unauthorised third parties might defeat our security and improperly collect, access, steal, or modify your information. While we strive to protect your personal information, transmission to and from our Services carries some risk. Accessing the Services within a secure environment offers the best protection.

7. DO WE COLLECT PERSONAL INFORMATION FROM MINORS?

In Short: Our policies prohibit knowingly collecting data from or marketing to children under 18 years of age.

Knowingly collecting, soliciting data from, or marketing to children under 18 years of age contradicts our practices. We also avoid knowingly selling such personal information. By using our Services, you confirm being at least 18 or acting as parent/guardian of a minor dependent with consent for Service use. Upon discovering any collected information from users under 18, we will deactivate the account and promptly delete such data. Please contact us at hello@littlestationeryshop.com if you become aware of any data collected from children under 18.

8. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

Withdrawing your consent
If processing your personal information relies on your consent (express and/or implied, depending on applicable law), you may withdraw consent at any time. Contact us at hello@littlestationeryshop.com or through our online form to withdraw consent.

This withdrawal won’t affect previous processing lawfulness nor, when permitted by law, will it impact processing conducted on lawful grounds other than consent.

Opting out of marketing and promotional communications
You can unsubscribe from marketing and promotional communications anytime by clicking unsubscribe links in our emails or contacting us at hello@littlestationeryshop.com or through our online form. After removal from marketing lists, we may still communicate with you for service-related messages, request responses, or other non-marketing purposes.

Account Information
To review or change your account information or terminate your account, contact us at hello@littlestationeryshop.com or through our online form.

After requesting account termination, we will deactivate or delete your account and information from active databases. Some information might be retained to prevent fraud, assist investigations, enforce legal terms, or comply with legal requirements.

Cookies and similar technologies
Most web browsers accept cookies by default. You can usually set your browser to remove or reject cookies if preferred. These changes might affect certain features or Services. For further information, see our Cookie Policy.

For questions or comments about your privacy rights, please email us at hello@littlestationeryshop.com.

9. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and applications include a Do-Not-Track (‘DNT’) feature signalling your preference against online browsing activity tracking and collection. Currently, no uniform technology standard exists for recognising and implementing DNT signals. Therefore, we don’t currently respond to DNT browser signals or other automatic opt-out mechanisms. Future adoption of mandatory online tracking standards will prompt policy updates to inform you about our practices.

10. DO WE MAKE UPDATES TO THIS PRIVACY POLICY?

In Short: Yes, we update this policy as necessary to maintain compliance with relevant laws.

This Privacy Policy may receive updates periodically. The updated version will display a revised date at the top. Material changes may warrant notification through prominent policy posting or direct messages. Regular review of this Privacy Policy helps you stay informed about how we protect your information.

11. HOW CAN YOU CONTACT US ABOUT THIS PRIVACY POLICY?

For questions or comments about this policy, you may contact our Data Protection Officer (DPO) by email at hello@littlestationeryshop.com, or by post at:

The Little Stationery Shop
Data Protection Officer
176 Water Street
Accrington, Lancashire BB5 6QU
United Kingdom

12. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on your country’s applicable laws, you may request access to personal information we collect from you, details about our processing methods, correction of inaccuracies, or deletion of your personal information. You might also withdraw consent to process your personal information. Applicable law may limit these rights in certain circumstances. To request review, update, or deletion of your personal information, please contact us.

Comments

Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

Suggested text: If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Suggested text: Visitor comments may be checked through an automated spam detection service.