‌Effective Date: 22 October 2026‌

1. Introduction

WHOLESALE STATIONERY SUPPLIES PTY. LTD. (“we”, “us”, or “our”) operates the e-commerce website available at www.wholesalestationeryau.com. This Privacy Policy is designed to clearly explain how we collect, use, store, share, and protect your personal data when you access, browse, or use our platform, purchase our wide range of stationery and office supplies, interact with our customer services, or engage with any features offered on our website.

We are committed to full compliance with all applicable data protection laws and regulations, including the General Data Protection Regulation (GDPR) for users in the European Economic Area, the California Consumer Privacy Act (CCPA) for users located in California, USA, the Australian Privacy Principles under the Privacy Act 1988 (Cth), and all other relevant regional, national, and international data protection legislations. We prioritize safeguarding your personal information security and your legitimate rights related to data privacy, and we only process your personal data in transparent, lawful, fair, and necessary ways.

By visiting our website, creating an account, placing an order, submitting inquiries, or using any of our services, you explicitly acknowledge that you have read, understood, and agree to all terms outlined in this Privacy Policy. If you do not agree with any provisions in this document, please do not access or use our website services.

2. Identity and Contact Information of the Data Controller

The data controller responsible for your personal information processing activities is:
‌WHOLESALE STATIONERY SUPPLIES PTY. LTD.‌

• Registered Address: 69 East Street, Rockhampton City, Queensland 4700, Australia
• Contact Email: ferndew@wholesalestationeryau.com
• Contact Phone Number: +61 7 3558 3328

You may reach out to us at any time using the above contact details for any questions, concerns, or requests related to your personal data and this Privacy Policy.

3. Scope of Application

This Privacy Policy applies to all personal data processing activities conducted through our website, covering but not limited to scenarios when you browse our product catalog of minimalist stationery, office organizers, pen holders, file folders, desk mats, and other office tools, register for a user account, place a wholesale or retail order for stationery products, make payments, participate in our promotional activities, submit product reviews, contact our customer support team, or interact with our website through any other forms. This policy applies to all users, customers, and visitors who access our platform regardless of their geographical location.

4. Types of Personal Data We Collect

We only collect personal data that is necessary to fulfill clearly specified, legitimate purposes, in line with the data minimization principle. The personal data we may collect is divided into two categories: mandatory data required for core service provision, and non-mandatory data collected to enhance your user experience.

4.1 Mandatory Personal Data

This category of data is strictly required for us to perform our contractual obligations and provide you with complete e-commerce services, and we cannot process your orders or provide core functions if you refuse to provide these data points:

• Full name, billing address, and shipping address (including street name, suburb, postcode, state, and country) to process order delivery and confirm transaction identity
• Valid contact phone number and active email address to send you order confirmation notifications, shipping updates, delivery arrangement reminders, and respond to your customer service inquiries
• Payment related information including billing details, payment method identifiers, and transaction records. We want to clarify that sensitive payment card information is directly processed by our licensed, PCI DSS compliant third-party payment processors, and we do not store full credit card or debit card details on our own servers
• Account credential information including your chosen account username and password when you register for a user account on our website, to help you manage your account information, view order history, and save shopping preferences
• Order related information including product selection, order number, transaction time, and purchase records to complete transaction management, after-sales support, and dispute resolution when needed.

4.2 Non-Mandatory Personal Data

You may voluntarily choose to provide these additional data points, or we may collect them automatically when you use our services, to help us improve our service quality and offer you a more customized shopping experience:

• Device and environment information: including your device type (mobile phone, desktop computer, tablet), operating system version, browser type and version, IP address, network type, and screen resolution, which we use to optimize our website compatibility across different devices, maintain service stability, and troubleshoot technical issues
• Usage behavior data: including your browsing history on our website, search queries for stationery products, click stream data, visit frequency, page stay duration, and navigation paths, to understand user preference trends
• Location information: you may grant us permission to access your approximate geolocation data, which we use to display region-specific shipping options and local relevant promotional offers
• Information you submit voluntarily in surveys, product feedback forms, product reviews, or customer service conversation records, including your opinions about our stationery products and service suggestions
• If you choose to connect your social media accounts to log in to our website, we may receive the basic public profile information that your social media platform makes available, in accordance with your privacy settings on that third-party platform
• Data collected through Cookies and similar tracking technologies, as further explained in Section 7 of this policy.

5. Purposes and Legal Bases for Processing Your Personal Data

We process your personal data only for explicitly stated, legitimate purposes, strictly within the scope you reasonably expect when using our stationery e-commerce platform, and with corresponding valid legal bases:

1. ‌Contract Performance‌: We process your mandatory personal data to fulfill the purchase and sales contract we enter into with you when you place an order, including completing order processing, arranging logistics and delivery, verifying payment status, processing returns and refunds as per our Return and Refund Policy, and providing after-sales customer support.
2. ‌Legitimate Interests‌: We process relevant personal data based on our legitimate business interests that do not override your fundamental privacy rights, for purposes including:
   • Conducting risk identification, fraud prevention, and account security protection, to prevent unauthorized account access, malicious transactions, and protect the safety of our users and our platform
   • Analyzing anonymized user behavior data to optimize our product selection, improve our website interface functionality, develop new stationery product lines that meet customer demands, and enhance overall operation efficiency
   • Providing you with personalized product recommendations for suitable office supplies, based on your past browsing and purchase history, to help you find the stationery products you need more efficiently. You can turn off the personalized recommendation function at any time in your account settings.
3. ‌Legal Compliance‌: We may process and disclose your personal data when it is necessary for us to comply with our legal obligations, including responding to valid lawful requests from judicial authorities, government regulators, or law enforcement agencies, fulfilling tax declaration and audit requirements, and complying with applicable local and international laws.
4. ‌Consent‌: For processing activities that are not covered by the above legal bases, such as sending you marketing newsletters about new stationery arrivals, limited-time wholesale discounts, and promotional activities, we will first obtain your explicit, separate consent. You have the full right to withdraw your previously given consent at any time, through the unsubscribe link in marketing emails, or by contacting us via our provided contact methods.

6. How We Share Your Personal Data

We will never sell, rent, or trade your personal data to any third parties for their independent marketing purposes without your explicit written consent. We may only share your personal data with carefully selected third parties under the following limited circumstances, and all these third parties will be required to strictly follow data protection agreements that impose confidentiality obligations and ensure they only process your data for the specified purposes:

• ‌Service Providers that Support Our Operations‌: We share necessary information with third-party service providers that help us run our platform and complete our service delivery, such as logistics and courier companies to fulfill product delivery, licensed payment processors to complete payment transactions, cloud service providers to host our website and securely store user data, and professional IT maintenance service providers who help us troubleshoot technical problems. All these third parties are strictly bound by data protection contracts to ensure the security of your personal data.
• ‌Legal and Regulatory Requirements‌: We may disclose your personal data if we determine in good faith that such disclosure is required by law, court order, valid government regulatory request, or to protect the legitimate rights, property, and personal safety of ourselves, our users, or the general public.
• ‌Business Transition Scenarios‌: In the event of a merger, acquisition, asset sale, or other type of business reorganization, your personal data may be transferred to the relevant successor entity, and we will ensure the confidentiality of personal data during this transition process, and give corresponding notifications to all affected users before the transfer takes place if required by applicable laws.

7. Cookies and Similar Tracking Technologies

Our website uses Cookies and other similar tracking technologies to collect non-personal and partial usage behavior data to improve your browsing experience. Cookies are small text files that are stored on your local device when you visit our website.
We use different categories of Cookies:

• ‌Necessary Strictly Functional Cookies‌: These Cookies are essential to make our website operate normally, they allow you to maintain your login status, keep products in your shopping cart during the browsing session, and complete the checkout process smoothly. You cannot disable these necessary Cookies through your browser settings, as they are required to provide basic e-commerce functions.
• ‌Performance and Analytics Cookies‌: These Cookies help us understand how visitors use our website, collect anonymous statistical data about which pages are accessed most frequently, if users encounter error messages during browsing, so that we can optimize our website performance and fix potential technical issues.
• ‌Functional Cookies‌: These Cookies remember your personalized preference settings, such as your chosen language, default shipping region, and saved shopping cart contents, to make your next visit to our website more convenient and customized.
• ‌Marketing Cookies‌: These Cookies may be used by our advertising partners to deliver relevant product advertisements about our stationery supplies to you on other third-party platforms, based on your browsing behavior on our website.

You can fully manage your Cookie preferences at any time through your web browser settings, including deleting existing stored Cookies and refusing to accept new Cookies. Please note that if you disable certain Cookies, some functions of our website may not operate at their full performance level.

8. Data Security Protection Measures

We attach the highest priority to the security of your personal data, and we implement a full set of technical and organizational security measures to protect your personal information from unauthorized access, accidental loss, destruction, tampering, leakage, or misuse:

• All data transmission between your browser and our website is encrypted through industry standard SSL/TLS technology, to ensure the security of data during transmission over the public internet
• Our servers that store user personal data are hosted in secure, certified data centers with multi-layer physical access control, 24/7 security monitoring, and regular backup mechanisms
• All our internal team members who need to access user personal data to perform their work are strictly bound by signed confidentiality agreements, and only have access to the minimum scope of personal data necessary to complete their job responsibilities. We conduct regular privacy protection training for all our staff
• We conduct periodic security audits, vulnerability scans, and risk assessments for our information systems, to continuously update and improve our data security protection capabilities.

9. Your Rights Related to Personal Data

Depending on your geographical location and applicable data protection laws, you may have the following complete set of rights related to your personal data processed by us:

1. ‌Right of Access‌: You can submit a request to us to obtain a copy of all personal data we hold about you, and get detailed information about how we process your personal data.
2. ‌Right to Rectification‌: If you find that any of your personal data stored on our system is inaccurate or incomplete, you have the right to require us to correct and update that information without unreasonable delay.
3. ‌Right to Erasure (Right to be Forgotten)‌: Under specific circumstances, such as when the personal data is no longer necessary for the original collection purpose, or when you withdraw your consent for processing and there is no other legal basis for us to retain your data, you can request us to delete all your personal data from our system, subject to a few exceptions where we are legally obliged to retain certain data for statutory compliance reasons.
4. ‌Right to Restriction of Processing‌: You have the right to require us to temporarily stop processing your personal data under scenarios such as when you dispute the accuracy of your data, when you believe our processing activities are unlawful, or when we no longer need the data but you require the data for legal claim purposes.
5. ‌Right to Data Portability‌: You can request us to provide the personal data you have provided to us, in a structured, commonly used, machine-readable format, and you have the right to transmit that data to another data controller without our obstruction.
6. ‌Right to Object‌: You can object to our processing of your personal data that is based on our legitimate interests at any time, including objecting to us using your data for direct marketing purposes, which we will stop processing for that purpose immediately after receiving your objection.
7. ‌Right to Withdraw Consent‌: For any processing activity that you previously provided explicit consent for, you can withdraw that consent at any time, which will not affect the lawfulness of processing we completed before your consent withdrawal.
8. ‌Right to Lodge a Complaint‌: If you are not satisfied with our response to your data privacy related request, or you believe our processing of your personal data violates applicable data protection laws, you have the right to submit a complaint to the local data protection supervisory authority in your jurisdiction.

To exercise any of the above rights, you can simply send your request to us via email at ferndew@wholesalestationeryau.com, or call our contact phone +61 7 3558 3328. We will respond to your verified identity request without any undue delay, and no later than 30 calendar days from the date we receive your request. In order to protect your account security and prevent fraudulent identity request, we may first verify your identity by requesting you to provide certain necessary information to confirm that you are the owner of the relevant personal data.

10. Data Retention Period

We will not retain your personal data for any longer than the duration necessary to achieve the specific purposes for which we originally collected the data, as required by applicable laws. In general:

• We will retain your order related data for the full duration required to complete the transaction, fulfill after-sales obligations, and comply with local commercial, tax, and accounting legal requirements, which is usually 7 years after your transaction completion in line with Australian statutory record keeping rules
• If you maintain an active user account on our website, we will retain all your account related personal data for the entire period until you request us to delete your account
• For personal data that we process based on your separate consent, we will retain the data until you withdraw your consent.

After the corresponding data retention period expires, we will completely delete your personal data, or process it to be fully anonymized so that it can no longer be associated back to any specific identifiable natural person.

11. Updates to This Privacy Policy

We reserve the right to revise and update the terms of this Privacy Policy from time to time, to adapt to new business operation requirements, follow newly issued laws and regulatory requirements, or adjust our data processing practices according to new technological developments.
When we make material changes to this Privacy Policy, we will prominently publish the revised version on the footer of our website at www.wholesalestationeryau.com, clearly mark the new effective date, and we may also send a notification email to all our registered user accounts, and display a prominent pop-up reminder on the website for you to review the updated terms. Your continued access to our website and use of our services after the effective date of the revised Privacy Policy will be regarded as your full acceptance of the updated terms. If you do not agree with the revised new policy, please stop using our website services immediately.

12. Contact Us

If you have any questions, comments, concerns, or requests regarding this Privacy Policy or our personal data processing practices, please do not hesitate to contact us at any time through the following channels:

• Attn: Data Protection Officer, WHOLESALE STATIONERY SUPPLIES PTY. LTD.
• Postal Address: 69 East Street, Rockhampton City, Queensland 4700, Australia
• Email: ferndew@wholesalestationeryau.com
• Phone: +61 7 3558 3328