Privacy Policy

 

for Office Stash PTY LTD trading as Proteastationery.co.za

Last Updated: 18 October 2025

 

1. Introduction and Responsible Party

 

This Privacy Policy details how Office Stash PTY LTD (the “Responsible Party”), trading as Protea Stationery, processes your Personal Information in compliance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”). We are committed to protecting your privacy and ensuring transparency.

 

1.1 Contact Details of the Responsible Party

 

For all data-related inquiries, including requests to access or update your information, please contact our designated Information Officer:

Detail Information
Legal Entity Office Stash PTY LTD
Physical Address 61 Beckberg Avenue, Die Hoewes, Centurion, 0157, South Africa
Information Officer Email sales@proteastationery.co.za
Contact Number +27 87 255 3644

 

2. Personal Information We Collect

 

We only collect and process information that is necessary for the successful operation of our online stationery business and the fulfilment of our services to you.

Data Category Purpose of Collection Examples of Data Collected
Identity & Contact Data Order delivery, account creation, communication. Name, surname, physical delivery address, email address, phone number, date of birth (for identity checks).
Financial & Transactional Data Processing payments and managing refunds. Details of purchases, payment method, banking details (for refunds only). We DO NOT store full credit card details.
Technical & Usage Data Website performance, security, and analysis. IP address, browser type, operating system, pages viewed, time spent on site, and referrer websites.
Location Data Calculating accurate shipping costs and ensuring delivery. Geographic location from which you access the Platforms and the delivery address.

 

3. Lawful Basis and Processing Purposes

 

We process your Personal Information based on one or more of the following lawful grounds:

POPIA Lawful Basis Processing Activities
Contract Fulfilling and delivering your order; providing post-sales support (returns, refunds).
Consent Sending direct marketing communications (newsletters, promotions), where you have explicitly opted-in.
Legal Obligation Maintaining financial records for tax and audit purposes; cooperating with law enforcement.
Legitimate Interest Improving our website and service delivery; detecting and preventing fraud and security breaches.

 

3.1 Data Sharing with Third Parties

 

We only share data when essential for business purposes. When we do, we ensure strict confidentiality and contractual agreements are in place. Examples include:

  • Courier Partners (e.g., The Courier Guy): Sharing your name, physical address, and phone number for the sole purpose of delivery.
  • Payment Processors: Sharing transaction details to securely process your payment.
  • IT and Cloud Service Providers: Storing data securely and maintaining website functionality.

 

4. Detailed Cookie Policy (Technical Data)

 

The Platforms use cookies to enhance your shopping experience and gather Technical Data. A cookie is a small file placed on your device’s hard drive that allows the website to recognise and remember you.

Cookie Type Purpose Your Control
Strictly Necessary Enable core site functionality, cart storage, and checkout security. The site cannot function without these. Cannot be disabled (automatically accepted upon use).
Analytical/Performance Collect anonymous data on how visitors use the site (e.g., Google Analytics). Helps us improve site speed and content. You can opt-out via your browser settings or a site banner.
Functionality Remember preferences (e.g., login details, language) to provide a personalised experience. You can opt-out via your browser settings or a site banner.

By continuing to use our Platforms, you consent to the use of cookies. You can manage cookie preferences via your browser settings at any time.

 

5. Security, Retention, and International Transfer

 

 

5.1 Security Measures

 

We have implemented technical and organisational security measures (as required by POPIA) to protect your data against loss, misuse, and unauthorised access. These measures include:

  • Use of SSL encryption across all transactional pages.
  • Secure internal access controls for handling Personal Information.
  • Periodic review and updating of our security protocols.

 

5.2 Data Retention

 

We retain your Personal Information only for as long as necessary to fulfil the purposes for which it was collected, as well as to meet any legal or accounting requirements. Once your data is no longer needed, we will securely destroy or permanently de-identify it.

 

5.3 International Data Transfer

 

Where we use international cloud service providers for data hosting or back-up, your information may be transferred outside the borders of South Africa. We ensure that such transfers are conducted in accordance with POPIA’s requirements, guaranteeing that the recipient is subject to laws that provide an adequate level of protection.

 

6. Your Data Subject Rights (POPIA)

 

As a data subject, you have the right to request the following from Office Stash PTY LTD:

Your Right How to Exercise It
Right of Access Request confirmation that we hold your data and request a copy of that data.
Right to Rectification Request the correction of any incomplete or inaccurate Personal Information.
Right to Deletion Request the destruction or deletion of your Personal Information, where there is no legal obligation for us to retain it.
Right to Object Object to the processing of your data, particularly for direct marketing purposes.
Right to Withdraw Consent Withdraw any consent you previously gave us for data processing.

 

6.1 Complaints

 

Should you feel that we have processed your Personal Information unlawfully, you have the right to lodge a complaint with the Information Regulator (South Africa):