Privacy Policy

We are committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and safeguard your information.

Last Updated: 15 January 2026
Effective Date: 15 January 2026

1. Introduction

Stationery & Gifts Ltd ("we", "us", "our") operates this website and is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase from us.

Our registered address is 257 Upper Newtownards Road, Belfast, BT4 3JF, United Kingdom. We are registered in Northern Ireland under company number 15284739. Our VAT number is GB 412 8376 94.

By using this website, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use this website. For any questions or concerns regarding this Privacy Policy, please contact us at [email protected] or call +44 28 9065 4321.

2. Cookie Categories

We use cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and deliver personalised advertising. Cookies are divided into three mandatory categories:

Essential Cookies

Purpose: These cookies are necessary for core site functionality, security, session management, and maintaining your shopping basket.

Examples: session_id, csrf_token, cookie_consent_status, cart_items

Consent Required: No — these cookies are activated automatically as they are essential for the website to function properly.

Retention: Session duration or up to 12 months for preference storage such as cookie consent choices and language settings.

Analytics Cookies

Purpose: These cookies help us measure traffic, understand user behaviour, analyse site performance, and improve our services based on how visitors interact with our website.

Tools Used: Google Analytics 4

Examples: _ga, _ga_XXXXXXX, _gid, _gat

Consent Required: Yes — these cookies are activated only after you explicitly accept them through our cookie consent banner.

Retention: Up to 14 months from the date of collection. IP addresses are anonymised to protect your privacy.

Marketing and Advertising Cookies

Purpose: These cookies enable remarketing, personalised ad delivery across Google and Meta platforms, conversion tracking, and measurement of advertising campaign effectiveness.

Consent Required: Yes — these cookies are activated only after you accept them through our cookie consent banner.

Retention: Up to 540 days, which is the default retention period for Google Ads conversion tracking and remarketing lists.

3. Marketing Cookies — Detailed Disclosures

Our use of marketing and advertising cookies is governed by strict transparency requirements. Below are the mandatory disclosures regarding our advertising practices:

Third-Party Ad Serving

Third-party vendors, including Google, use cookies to serve advertisements based on your previous visits to this website and other sites across the internet. This enables us to show relevant advertisements to people who have expressed interest in our products.

Advertising Partners

We work with advertising partners such as Google and Meta (Facebook and Instagram) to deliver advertisements tailored to your interests across various websites, apps, and platforms you visit. These partners act as independent data controllers for data processed within their own systems.

Remarketing Services

We use remarketing services to advertise to previous visitors of our website. After visiting our site, you may see our advertisements on other websites, applications, or platforms you visit. Remarketing allows us to present offers and products that may be of interest based on your browsing behaviour. We do not create remarketing lists from sensitive data categories including health information, financial status, religion, political views, or sexual orientation.

YouTube and Google Display Network

Advertisements promoting our products may appear across Google services including YouTube, Gmail, Google Search, and the Google Display Network, which encompasses millions of websites and mobile applications.

Tracking Technologies in Use

We use the following tracking technologies on this website to deliver and measure advertising effectiveness:

  • Cookies (first-party and third-party)
  • Tracking pixels including Google Ads tag (gtag.js) and Meta Pixel
  • Device identifiers such as browser fingerprints and anonymised IP addresses
  • Conversion event tags that record when users complete specific actions

Advertising Measurement and Conversion Tracking

We use conversion tracking to understand which advertisements lead to actions on our website such as form submissions, telephone calls, product purchases, or newsletter signups. This data allows us to measure campaign effectiveness, optimise our advertising spend, and allocate budget appropriately. Conversion data may be shared with Google Ads and Meta for campaign measurement and reporting purposes. All data sharing is conducted under strict contractual safeguards.

Advertising Technologies Active on This Site

The following advertising and analytics technologies are currently active on this website:

  • Google Ads conversion tracking (gtag.js and Google Tag Manager)
  • Google Analytics 4 for traffic analysis and user behaviour insights
  • Google Remarketing Tag for displaying personalised advertisements
  • Meta Pixel for Facebook and Instagram advertising measurement

Opting Out of Personalised Advertising

You have the right to opt out of personalised advertising at any time. You may do so through the following channels:

  • Google Ads Settings: Visit https://adssettings.google.com to manage your Google advertising preferences
  • Your Online Choices (EU): Visit https://www.youronlinechoices.eu for European users
  • Network Advertising Initiative: Visit https://optout.networkadvertising.org
  • Digital Advertising Alliance: Visit https://optout.aboutads.info

Please note that opting out of personalised advertising does not remove advertisements entirely. You will continue to see non-personalised advertisements that are not based on your browsing behaviour or interests.

Cookie Preference Management

You can manage your cookie preferences at any time by clicking the link in our website footer or by using your browser settings to block or delete cookies. The cookie preference panel allows you to accept or reject each category independently. Essential cookies cannot be disabled as they are necessary for the website to function.

4. Consent Requirements

Cookie Consent Banner

When you first visit our website, you will see a cookie consent banner offering three clear options:

  • Accept All Cookies: Activates essential, analytics, and marketing cookies
  • Reject Non-Essential: Activates only essential cookies required for site functionality
  • Manage Preferences: Opens a detailed panel where you can select specific cookie categories

Analytics and marketing cookies will not be activated until you explicitly accept them. The banner is dismissible without accepting, and rejecting non-essential cookies means only essential cookies will remain active. The banner includes a direct link to this Privacy Policy for your reference.

Consent Statement

By clicking "Accept All Cookies", you consent to the storing of cookies on your device for analytics and advertising purposes, including personalised advertising delivered by Google and Meta. You may withdraw your consent at any time through the cookie preferences panel accessible in the website footer. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

EEA and UK Users

Users in the European Economic Area and the United Kingdom receive this consent notice in full compliance with the General Data Protection Regulation (GDPR) and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, and freely given consent under GDPR Article 6(1)(a). Your consent is recorded with a timestamp and may be audited upon request by a supervisory authority.

Withdrawal of Consent

You may withdraw your consent at any time by clicking "Manage Cookie Preferences" in the website footer or by clearing cookies through your browser settings. Withdrawal of consent does not affect the lawfulness of processing that occurred while your consent was valid. After withdrawal, only essential cookies will remain active, and you will no longer receive personalised advertising based on your activity on our website.

5. Data Sharing with Advertising Partners

We share certain data with advertising partners for campaign delivery, optimisation, and measurement purposes. The following outlines the recipients of your data and the categories of information shared:

Google LLC

Data Shared: Cookie identifiers, conversion events (such as form submissions and purchases), anonymised behavioural data including pages visited and time on site, remarketing list membership, and device information.

Purpose: Advertising delivery, remarketing, conversion tracking, and campaign performance measurement across Google Search, YouTube, Gmail, and the Google Display Network.

Google's use of your data is governed by their Privacy Policy, available at https://policies.google.com/privacy. Google acts as an independent data controller for data processed within their advertising systems.

Meta Platforms, Inc.

Data Shared: Meta Pixel events including page views and conversion actions, custom audience membership for retargeting purposes, and anonymised user identifiers.

Purpose: Advertising delivery on Facebook and Instagram, conversion measurement, custom audience creation for remarketing, and campaign performance analysis.

Meta's use of your data is governed by their Data Policy, available at https://www.facebook.com/privacy/policy. Meta acts as an independent data controller for data collected via the Meta Pixel and processed within their platform.

We do not sell personal data to third parties. All transfers of data to Google and Meta operate under Standard Contractual Clauses approved by the European Commission where applicable. Your data is processed for advertising targeting and campaign measurement purposes only and is not resold to unaffiliated third parties.

Google and Meta may use the data we share across their own platforms in accordance with their respective privacy policies. We encourage you to review those policies directly to understand how these companies handle your information.

6. Lead Forms and Contact Requests

When you submit a contact form, request a quote, sign up for our newsletter, or register interest in our products or services, we collect the information you voluntarily provide. This typically includes your full name, email address, telephone number, and the content of your message or enquiry.

Legal Basis for Processing

The legal basis for processing your contact form data is your explicit consent under GDPR Article 6(1)(a). Where a service relationship exists or is being established, we also process your data for the performance of a contract under GDPR Article 6(1)(b). By submitting a form, you consent to us using your information to respond to your enquiry and provide the services you have requested.

Data Retention

Form submission data is retained for up to two years from the date of submission. This retention period allows us to maintain records of customer communications and comply with legitimate business and legal requirements. If a longer retention period is required by applicable law, we will retain your data only for as long as necessary to fulfil those obligations.

Your Rights

You may request deletion of your contact form data at any time by contacting us at [email protected] or calling +44 28 9065 4321. We will process your request within 30 days and confirm deletion in writing.

Privacy Policy Link Placement

A link to this Privacy Policy appears adjacent to every submission button on our website. Submitting a form constitutes your acknowledgment of this Privacy Policy and your consent to the processing described herein.

7. Google Services — Full Disclosure

This website uses the following Google services to improve functionality, analyse traffic, and deliver advertising:

Google Analytics 4

Google Analytics 4 collects anonymised usage data including pages viewed, time spent on site, device information, browser type, geographical location (country and city level only), and behavioural signals such as scroll depth and click patterns. IP anonymisation is enabled to protect your privacy by masking the last octet of your IP address. Data retention is set to 14 months, after which analytics data is automatically deleted. Users may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout.

Google Ads Conversion Tracking

Google Ads conversion tracking records when a user completes a defined action on our website such as submitting a contact form, making a telephone call, completing a purchase, or signing up for our newsletter after clicking one of our advertisements. This data is used solely for measuring advertising campaign performance, calculating return on investment, and optimising future campaigns. Conversion data is retained for up to 540 days.

Google Remarketing

Google Remarketing allows us to show advertisements to previous visitors of our website across Google's advertising network. Remarketing lists are created based on pages visited, products viewed, and actions taken on our website. We do not create remarketing lists from sensitive data categories including health information, financial status, religion, political views, or sexual orientation. All remarketing lists comply with Google's advertising policies and applicable data protection laws.

Google Tag Manager

Google Tag Manager is a tag management system that deploys tracking tags on our behalf. No personal data is collected by Google Tag Manager itself; it acts solely as a container for the tags and scripts listed above, including Google Analytics, Google Ads, and remarketing tags.

Governing Policies

Google's advertising products and data practices are governed by their comprehensive policies available at https://policies.google.com/technologies/ads. We recommend reviewing these policies to understand how Google processes data across their services.

8. Meta Advertising Services — Full Disclosure

This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram platforms. The Meta Pixel is a snippet of code that records user interactions on our website and transmits this data to Meta for advertising purposes.

Data Collected by Meta Pixel

The Meta Pixel may record the following information:

  • Page views and time spent on specific pages
  • Conversion events including form submissions, newsletter signups, and product purchases
  • Custom audience membership for retargeting purposes
  • Device information including browser type, operating system, and screen resolution
  • Anonymised identifiers and cookies

Prohibited Data Collection

We do not use the Meta Pixel to collect sensitive personal data. We do not target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies and data protection regulations.

Independent Data Controller

Meta acts as an independent data controller for data collected via the Meta Pixel and processed within the Meta platform. Meta's use of your data is governed by their Data Policy, available at https://www.facebook.com/privacy/policy. We encourage you to review Meta's policy to understand how they process your information across Facebook, Instagram, and related services.

Managing Your Ad Preferences on Meta

To manage your advertising preferences on Meta platforms, including opting out of personalised advertising, visit https://www.facebook.com/adpreferences/. You can control which advertisers can reach you, view explanations for why you see specific ads, and adjust your ad settings.

9. Prohibited Content Self-Declaration

This website does not promote, sell, or facilitate access to prohibited product or service categories. We strictly comply with Google Ads policies and Meta Ads policies. Specifically, we do not advertise or sell:

  • Weapons, firearms, ammunition, or explosive materials
  • Controlled substances, illegal drugs, or drug paraphernalia
  • Counterfeit goods, fake documents, or services that enable dishonest behaviour
  • Unlicensed gambling services or online casinos
  • Adult content, sexually explicit material, or escort services
  • Products or services that make misleading health or financial claims
  • Pyramid schemes, get-rich-quick programmes, or financial scams

All advertising conducted through Google Ads and Meta Ads complies with the respective platform policies in full. Our business operates transparently within legal and ethical boundaries.

10. Landing Page Integrity Statement

The content of this website accurately represents the products and services advertised. We do not employ bait-and-switch practices where advertisements promise one thing and the landing page delivers another. The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors, regardless of traffic source.

We do not use cloaking techniques to show different content to search engines or advertising platforms than we show to human visitors. We do not employ automatic redirects that send users to different pages without their knowledge or consent. We do not vary website content based on traffic source, referrer, or user agent. All visitors receive the same transparent, honest experience.

11. Children's Privacy

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors without verifiable parental consent. Our products and services are intended for adults and young adults who are of legal age to make purchasing decisions.

If we discover that we have inadvertently received personal data from a person under the age of 16 without verifiable parental consent, we will delete that information promptly from our systems. If you are a parent or guardian and believe we have collected data from your child, please contact us immediately at [email protected] so we can take appropriate action.

12. International Data Transfers

Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. maintain their primary data centres and processing facilities.

These international data transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission. SCCs provide appropriate safeguards for personal data transferred outside the EEA, ensuring that your data receives a level of protection equivalent to that required under GDPR.

If you would like to receive a copy of the applicable Standard Contractual Clauses governing data transfers to our service providers, please contact us directly at [email protected] and we will provide them upon request.

13. Your Rights Under GDPR (Articles 15-22)

If you are located in the European Economic Area or the United Kingdom, you have the following rights regarding your personal data:

Right of Access (Article 15)

You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within 30 days of your request.

Right to Rectification (Article 16)

You have the right to request correction of inaccurate or incomplete personal data. We will update our records promptly upon verification of the correct information.

Right to Erasure (Article 17)

Also known as the "right to be forgotten", you may request deletion of your personal data where there is no compelling reason for us to continue processing it. Exceptions apply where we have legal obligations to retain certain records.

Right to Restriction of Processing (Article 18)

You may request that we limit how we process your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller where technically feasible.

Right to Object (Article 21)

You may object to processing of your personal data based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Right to Withdraw Consent (Article 7.3)

Where processing is based on your consent, you have the right to withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing that occurred while consent was valid.

To exercise any of these rights, please email us at [email protected] or call +44 28 9065 4321. We will respond to your request within 30 days. We may ask you to verify your identity before processing requests to protect your privacy and security.

Right to Lodge a Complaint

You also have the right to lodge a complaint with your local supervisory authority if you believe we have not handled your personal data appropriately:

  • EU Users: European Data Protection Board at https://edpb.europa.eu
  • UK Users: Information Commissioner's Office at https://ico.org.uk

14. What Data We Collect

We collect and process the following categories of personal data:

  • Full Name: Collected when you place an order, submit a contact form, or create an account
  • Email Address: Used for order confirmations, customer service communications, and newsletter subscriptions (with consent)
  • Telephone Number: Collected for delivery updates and customer service purposes
  • Delivery Address: Required to fulfil orders and ship products to your specified location
  • Billing Address: Necessary for payment processing and fraud prevention
  • IP Address: Automatically collected for security, fraud detection, and anonymised analytics (last octet masked)
  • Browser Type and Version: Used to optimise website performance and compatibility
  • Device Type and Operating System: Collected to ensure responsive design and proper functionality across devices
  • Cookies and Tracking Identifiers: As described in the Cookie Categories section above
  • Usage Data: Including pages visited, time spent on site, navigation paths, and click patterns for analytics purposes
  • Form Submission Content: Messages, enquiries, and personalisation requests you submit through contact forms
  • Conversion Events: Records of completed actions such as form submissions, newsletter signups, and purchases
  • Payment Information: Credit card details are processed securely by our payment processor and are not stored on our servers

15. Legal Basis for Processing (GDPR Article 6)

For each category of data we collect, we rely on one of the following legal bases under GDPR Article 6:

Contact Form Data

Legal Basis: Consent (Article 6.1.a) — you voluntarily provide information and consent to us contacting you. Where a service relationship exists, we also rely on contract performance (Article 6.1.b).

Analytics Data

Legal Basis: Consent (Article 6.1.a) — analytics cookies are activated only after you explicitly accept them through our cookie consent banner.

Marketing and Remarketing Data

Legal Basis: Consent (Article 6.1.a) — marketing cookies and personalised advertising are activated solely after you provide explicit consent.

Order Processing Data

Legal Basis: Contract performance (Article 6.1.b) — processing your order, arranging delivery, and providing customer service are necessary to fulfil our contractual obligations to you.

Security and Fraud Prevention

Legal Basis: Legitimate interest (Article 6.1.f) — we have a legitimate interest in protecting our business, customers, and website from fraudulent activity, security threats, and abuse.

Legal and Regulatory Compliance

Legal Basis: Legal obligation (Article 6.1.c) — certain data retention is required to comply with tax, accounting, and consumer protection laws.

16. Data Retention Periods

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations. Specific retention periods for different data categories are as follows:

  • Contact Form Submissions: Retained for 2 years from the date of submission to maintain customer service records and respond to follow-up enquiries
  • Analytics Data (Google Analytics 4): Retained for 14 months, after which it is automatically deleted from Google's systems
  • Marketing Cookies (Google Ads): Retained for up to 540 days to support remarketing campaigns and conversion attribution
  • Email Communications: Retained for the duration of the customer relationship plus 1 year to maintain service continuity and handle any post-relationship queries
  • Order and Transaction Records: Retained for 7 years to comply with UK tax and accounting regulations
  • Server Logs: Retained for 90 days for security monitoring and troubleshooting purposes
  • Cookie Consent Records: Retained for 3 years to satisfy regulatory audit requirements and demonstrate compliance with GDPR
  • Newsletter Subscriptions: Retained until you unsubscribe or request deletion

After the applicable retention period expires, personal data is securely deleted or anonymised so it can no longer identify you. You may request earlier deletion by contacting us, subject to our legal obligations to retain certain records.

17. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. Our security measures include:

  • Secure Socket Layer (SSL) encryption for all data transmitted between your browser and our servers
  • Payment processing through PCI DSS compliant third-party providers who maintain the highest security standards
  • Regular security audits and vulnerability assessments
  • Access controls limiting employee access to personal data on a need-to-know basis
  • Secure backup systems with encryption at rest and in transit
  • Regular staff training on data protection and information security

While we take all reasonable precautions to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but will notify you promptly of any data breach that poses a risk to your rights and freedoms, as required by GDPR Article 33.

18. Third-Party Links

Our website may contain links to third-party websites, social media platforms, or external services that are not operated by us. We are not responsible for the privacy practices or content of these external sites.

When you click a link to a third-party website, you are subject to that site's own privacy policy and terms of service. We encourage you to review the privacy policies of any third-party sites you visit to understand how they collect, use, and protect your personal information.

19. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes to this policy, we will notify you by displaying a prominent notice on our homepage for a minimum of 14 days before the changes take effect.

The "Last Updated" date at the top of this policy indicates when it was most recently revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Your continued use of our website after changes to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, please discontinue use of our website and contact us to request deletion of your data.

20. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

Company Name: Stationery & Gifts Ltd

Registered Address: 257 Upper Newtownards Road, Belfast, BT4 3JF, United Kingdom

Company Registration Number: 15284739

VAT Number: GB 412 8376 94

Email: [email protected]

Telephone: +44 28 9065 4321

We are committed to resolving any privacy concerns promptly and transparently. Our customer service team is available Monday to Friday, 9:00 AM to 5:00 PM GMT.

Important Information: All products are for general office, study, creative and gifting use. Personalised items are non-returnable unless faulty. Prices include VAT where applicable. Product images are for illustrative purposes and actual items may vary slightly in appearance. We strive to display colours accurately but screen settings may affect how they appear.