‌Effective Date: October 22, 2026‌

1. Introduction

Welcome to the privacy policy of BRANDON STATIONERY AND OFFICE SUPPLIES LIMITED, operating our official e-commerce website www.brandonoffice.com. At BRANDON OFFICE, we are committed to crafting high-quality, thoughtfully sourced office stationery and supplies designed to make every workspace intentional, organized, and a little more joyful. We recognize the fundamental importance of your personal data, and this policy is developed in full compliance with the EU General Data Protection Regulation (GDPR), applicable Irish data protection laws, and all relevant international privacy standards, to clearly explain how we collect, use, store, protect, and process your personal information when you browse, shop, and interact with our platform.

This policy applies to all personal information we process through our website, customer service channels, order fulfillment processes, and related service activities. By accessing and using www.brandonoffice.com, you acknowledge that you have fully read, understood, and agreed to the terms outlined in this privacy policy. We will never collect or process your personal data beyond the scopes and purposes explicitly stated herein, and we always prioritize the security and privacy rights of every user who visits our site to purchase our premium stationery products, from smooth-writing gel pens, thick lay-flat notebooks, to sturdy pen organizers and all our daily office essentials.

2. Data Controller Information

The data controller responsible for your personal information processing activities is:

‌Full Entity Name‌: BRANDON STATIONERY AND OFFICE SUPPLIES LIMITED
‌Operating Website‌: www.brandonoffice.com
‌Contact Email‌: synapz@brandonoffice.com
‌Physical Contact Address‌: Unit 3, Killerisk Business Park, Killerisk Road, Tralee, Co. Kerry, V92 WP11, Ireland
‌Contact Telephone Number‌: +353 66 7171555

If you have any questions, concerns, or requests related to your personal data and this privacy policy, you can reach out to us at any time through the contact methods listed above. We will respond to all legitimate inquiries within 30 calendar days of receiving your submission, in line with the requirements of GDPR.

3. Types of Personal Information We Collect

We strictly adhere to the data minimization principle set out in GDPR, meaning we only collect the minimum necessary personal information that is directly required to deliver our e-commerce services, process your orders, and enhance your shopping experience on our platform. The categories of personal data we may collect include:

• ‌Basic Account and Order Information‌: When you create an account, place an order, or complete a purchase on www.brandonoffice.com, we collect your full name, billing and shipping address, email address, contact phone number, and payment information (note that we never store full credit card details on our own servers, all payment processing is completed through PCI DSS certified third-party payment service providers to eliminate payment data leakage risks).
• ‌Website Usage and Technical Data‌: As you browse our site, we automatically collect technical information including your IP address, browser type and version, device fingerprint, operating system, time zone setting, referring website URLs, pages you viewed on our site, search terms you entered, and timestamp data for your access activities. This information helps us optimize our website performance, troubleshoot technical issues, and deliver a smooth browsing experience for all users looking to explore our new arrivals, best-selling stationery picks, and workspace refresh solutions.
• ‌Cookie and Similar Tracking Data‌: In compliance with the ePrivacy Directive and GDPR requirements, we use different categories of cookies on our website. Strictly necessary cookies are always enabled to support core site functions such as maintaining your shopping cart, remembering your login session, and processing anti-fraud checks during checkout, and these do not require your prior consent. Non-strictly necessary cookies, including analytical cookies that help us understand visitor traffic patterns, marketing cookies that allow us to share relevant product updates about our premium pen organizers, new stationery launches, and limited-time promotions with you, and personalization cookies that tailor product recommendations to your preferences, will only be activated after you provide explicit, free, and informed opt-in consent through our cookie consent banner. Our cookie banner always presents three equal visual-level options: “Accept All”, “Reject All”, and “Manage Settings”, and never hides the reject option in secondary pages to ensure the validity of your consent.
• ‌Voluntarily Provided Information‌: If you submit feedback, contact our customer support team, participate in our user surveys, or sign up for our official newsletter to get updates on our latest carefully picked office supplies and exclusive discounts, we will collect any additional information you voluntarily share with us, such as your preference for specific stationery product categories, feedback on our existing items, or suggestions for new products you hope to see in our collection.

We do not collect any special categories of sensitive personal data (including information related to your racial origin, religious beliefs, health status, or political opinions) through our website, and you are requested not to submit such sensitive information to us through any of our contact channels.

4. Legal Bases and Purposes for Processing Your Personal Data

All of our personal data processing activities are supported by valid legal bases defined in GDPR, and we only use your data for the clearly stated, explicit purposes below, and will never process your data for any incompatible additional purposes without notifying you in advance and obtaining separate consent where required:

1. ‌Performance of Contract‌: We process your name, shipping address, payment details, and contact information to fulfill the purchase contract we enter into with you when you place an order on our site. This includes processing your payment, arranging order fulfillment, coordinating delivery with our logistics partners, sending you order status updates, processing returns and exchanges, and resolving any post-purchase service issues related to your stationery products.
2. ‌Legitimate Interests‌: Where it does not override your fundamental privacy rights, we process your website usage data, analytical cookie data, and order history information to pursue our legitimate business interests, including optimizing our website functionality, improving our product offerings to add more high-quality office stationery items that match our customers’ needs, preventing fraud and unauthorized account access, and sending you service-related non-promotional updates that are necessary to maintain your account and normal use of our platform.
3. ‌Your Explicit Consent‌: For all processing activities that rely on your free, specific, informed, and unambiguous consent, including sending you our marketing newsletters, activating non-necessary analytical and marketing cookies, and using your personal data for personalized product recommendations, we will always obtain your explicit opt-in consent first. You retain the full right to withdraw your consent at any time, through the cookie management settings on our website, the unsubscribe link at the bottom of all marketing emails, or by contacting our support team directly. Withdrawing your consent will not affect the lawfulness of any data processing we completed before your withdrawal.
4. ‌Compliance with Legal Obligations‌: We process your personal data as required by applicable laws, including retaining order and tax records for the duration required by Irish tax regulations, cooperating with competent data protection authorities, law enforcement agencies, and judicial bodies when we receive formal lawful requests for information disclosure, and fulfilling our statutory obligations as an e-commerce business operating within the European Union.

5. Sharing and Disclosure of Your Personal Data

We will never sell, rent, or trade your personal information to any unrelated third parties for commercial purposes without your explicit separate consent. We may only share your necessary personal data with the following limited categories of trusted third parties, and we have signed formal Data Processing Agreements (DPA) with all these partners to enforce strict data protection standards that align fully with GDPR requirements:

• ‌Fulfillment and Logistics Partners‌: We share your name, shipping address, and contact phone number with our trusted courier and logistics service providers, solely for the purpose of delivering the stationery products you purchased from us to your designated location in a timely, accurate manner.
• ‌Payment Service Providers‌: We share the minimal required payment information with our PCI-compliant payment processing partners, to complete your order payment, verify transaction legitimacy, and process any refunds you are eligible for under our return policy.
• ‌Authorized Service Vendors‌: We may share limited necessary data with our trusted website hosting service providers, cloud infrastructure partners, IT maintenance teams, and analytics platform providers, who process your data on our behalf to support the normal operation of our website, maintain data security, and help us optimize our user shopping experience.
• ‌Legal and Regulatory Disclosures‌: We reserve the right to disclose your personal data if we are required to do so by a valid, lawful order from a court, regulatory authority, data protection agency, or law enforcement body, or if disclosure is necessary to protect our legal rights, property, and the personal safety of our staff, customers, and members of the public.

For any transfer of your personal data to countries or regions outside of the European Economic Area (EEA), we will take all required GDPR-mandated safeguards: we will either confirm that the destination jurisdiction has an adequacy decision issued by the European Commission, or we will sign the EU Standard Contractual Clauses (SCCs) with the relevant data recipients to ensure that your personal data receives the same level of data protection as required under GDPR. You can request a copy of these appropriate safeguard documents from us at any time using the contact information provided earlier in this policy.

6. Retention and Security of Your Personal Data

We follow the strict storage limitation principle under GDPR, and we will only retain your personal data for as long as it is strictly necessary to fulfill the specific purposes for which it was originally collected:

• For account-related personal data, we will retain your information for the full duration that your account remains active on www.brandonoffice.com. If you choose to close your account, we will delete all your personal account data within 90 days, except for the limited data we are required to retain to comply with legal tax, accounting, and regulatory record-keeping obligations, which we will retain for the full statutory retention period specified under Irish law.
• For order transaction records, we will retain the relevant data for 7 years after your order is completed, to meet the requirements of local tax supervision, product warranty, and after-sales service follow-up.
• For website usage analytics data, we will anonymize or delete all personal identifiers within 12 months of collection.
• For marketing consent records, we will retain the records until you choose to unsubscribe from our marketing communications, plus a 3-month buffer period to prove our compliance with consent requirements.

To protect your personal data from unauthorized access, alteration, disclosure, destruction, or leakage, we implement strict technical and organizational security measures fully aligned with GDPR requirements: all data transmission between your browser and our website is protected by end-to-end 256-bit TLS encryption, we conduct regular data protection impact assessments (DPIA) for all high-risk data processing activities, we perform periodic security audits and system updates, and we restrict access to your personal data to only a small number of authorized staff members who need to access the data to perform their job duties, and all these staff are bound by strict confidentiality obligations. In the unlikely event that a personal data security breach occurs that poses a high risk to your rights and freedoms, we will notify the relevant competent data protection authority within 72 hours after becoming aware of the breach, and notify you directly without undue delay if the breach is likely to result in a high adverse impact on your personal rights.

7. Your Rights as a Data Subject

Under the GDPR, as a user located within the European Economic Area, you hold a comprehensive set of statutory rights regarding your personal data processing activities with us:

1. ‌Right of Access‌: You have the right to request a free copy of all the personal data we hold about you, and to obtain clear information about how we process your data, the purposes of processing, the categories of data recipients we have shared your information with, and the data retention period we apply to your data.
2. ‌Right to Rectification‌: If you find that any of the personal data we hold about you is inaccurate, incomplete, or outdated, you can contact us at any time, and we will promptly correct and update the relevant information free of charge.
3. ‌Right to Erasure (Right to be Forgotten)‌: You have the right to request that we delete all your personal data in full, in circumstances such as when the personal data is no longer necessary for the original purposes we collected it for, when you withdraw your consent for the processing that had no other legal basis, or when our processing of your data violates applicable GDPR regulations, subject to the exceptions that allow us to retain a minimal amount of data when we have a legal obligation to keep records for regulatory compliance.
4. ‌Right to Restriction of Processing‌: You have the right to request that we suspend the processing of your personal data, for example when you contest the accuracy of your data, when our processing of the data is unlawful, or when we no longer need the data for our original processing purposes but you still require the data for the establishment, exercise, or defense of legal claims.
5. ‌Right to Data Portability‌: You have the right to receive all the personal data you have provided to us, in a structured, commonly used, machine-readable format, and you have the right to request us to transmit this data directly to another designated data controller, where the processing is based on your consent or on the performance of a contract with you.
6. ‌Right to Object‌: You have the right to object to our processing of your personal data that is based on our legitimate interests, at any time on grounds relating to your particular situation. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is for the establishment, exercise, or defense of legal claims. You also have the absolute right to object to the processing of your personal data for direct marketing purposes at any time, with no additional justification required.
7. ‌Right to Withdraw Consent‌: You can withdraw any consent you previously provided to us for data processing activities, at any time, through the easy-to-use self-service features on our website, or by contacting our support team directly. Withdrawing your consent will not impact the lawfulness of any processing we carried out before your withdrawal.
8. ‌Right to Lodge a Complaint‌: If you believe that our processing of your personal data violates the requirements of GDPR, you have the right to lodge a complaint directly with the competent national data protection authority in your country of residence, or with the Irish Data Protection Commission, which is our lead supervisory authority for data protection matters.

To exercise any of the above rights, you can submit your request by sending an email to our dedicated team at synapz@brandonoffice.com. We will verify your identity before processing your request to make sure we are responding to the legitimate data subject, and we will complete our response and take relevant action within 30 calendar days of receiving your verified request. In complex cases that involve a large volume of your personal data, we may extend the response period by a maximum of two months, and we will notify you of this extension and the reasons for the delay within the initial 30-day window.

8. Children’s Privacy

Our e-commerce platform and the products sold on www.brandonoffice.com are general audience office stationery supplies, and we do not intentionally collect personal information from children under the age of 16. If we become aware that we have accidentally collected personal data from a child under 16 years old without the verifiable consent of their parent or legal guardian, we will immediately take steps to delete that personal data completely from all our systems and records, as required by GDPR provisions related to children’s information society services. If you believe we may have collected personal data from a child under 16, please contact us immediately at synapz@brandonoffice.com so we can resolve the issue promptly.

9. Amendments to This Privacy Policy

We may update and revise this privacy policy from time to time to reflect changes in our business operations, new product and service features, updates to applicable EU and Irish data protection laws, and regulatory guidance issued by data protection authorities. When we make material changes to this policy, we will clearly display the updated version on the homepage of www.brandonoffice.com, highlight the effective date at the top of the revised policy, and send a notification to the registered email address of all our account holders to draw their attention to the updates. We encourage you to review this privacy policy periodically to stay informed of our latest data processing practices. Your continued use of our website and services after the effective date of the revised privacy policy will constitute your acknowledgement and agreement to the updated terms.

10. Contact Information

If you have any questions, comments, concerns, or formal data subject requests related to this privacy policy, our personal data processing practices, or GDPR compliance matters, please do not hesitate to reach out to us at any time:

Company Name: BRANDON STATIONERY AND OFFICE SUPPLIES LIMITED
Website: www.brandonoffice.com
Email Address: synapz@brandonoffice.com
Postal Address: Unit 3, Killerisk Business Park, Killerisk Road, Tralee, Co. Kerry, V92 WP11, Ireland
Telephone Number: +353 66 7171555

We are dedicated to protecting the privacy and personal data of every customer who shops with us for our high-quality office stationery products, and we will work with you to address all your privacy-related inquiries and requests in a timely, transparent, and fully compliant manner.