Privacy Policy

1. Introduction and company information

This Privacy Policy explains how MapleBloom Garden Co. collects, uses, discloses, stores, and protects personal information in the course of operating its garden business in Canada. We are committed to handling personal information in a manner that is transparent, lawful, and consistent with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial privacy legislation.

MapleBloom Garden Co.

1240 Yonge Street, Toronto, ON M4T 1W5, Canada

Email: [email protected]
Phone: +1 (416) 782-6943

This Privacy Policy applies to personal information collected through our website, by email, by telephone, in person, through service inquiries, and in connection with our gardening products and services, including landscape consultations, garden design, planting, maintenance, delivery, and customer support.

2. Data collection and processing

We may collect the following categories of personal information, depending on your interactions with us:

• Contact information: name, address, email address, telephone number, and preferred contact method.
• Service and project information: property details, garden preferences, plant selections, service requests, site notes, photos you provide, and scheduling information.
• Transaction information: purchase history, invoices, payment status, and delivery details.
• Communication information: messages, feedback, inquiries, complaint details, and records of correspondence.
• Website and technical information: IP address, browser type, device identifiers, pages visited, time spent on pages, referral source, and cookie or similar tracking data.
• Marketing preferences: subscription status, communication preferences, and responses to promotions or newsletters.

We generally collect personal information directly from you. In some cases, we may collect information from third parties where permitted by law, such as payment processors, delivery providers, referral partners, or publicly available sources, or where you have authorized such collection.

We process personal information only as necessary for the purposes described in this Privacy Policy, and we limit collection to what is reasonable for those purposes.

3. Purpose of data processing

We use personal information for the following purposes:

• to provide gardening products and services, including consultations, design, installation, maintenance, and delivery;
• to respond to inquiries, requests, and customer support communications;
• to prepare quotes, estimates, contracts, invoices, and receipts;
• to schedule appointments, coordinate site visits, and manage service delivery;
• to process payments and prevent fraudulent or unauthorized transactions;
• to personalize recommendations based on your garden needs, preferences, and property conditions;
• to send service updates, administrative notices, and, where permitted, promotional communications;
• to improve our website, services, operations, and customer experience;
• to maintain business records and comply with legal, tax, accounting, and regulatory obligations;
• to protect our rights, property, staff, customers, and business operations;
• to manage disputes, claims, and legal proceedings.

4. Legal basis for processing

Where applicable, we rely on one or more of the following legal grounds to process personal information:

• Consent: where you have given clear consent for a specific purpose, such as receiving marketing emails or certain optional communications.
• Contractual necessity: where processing is necessary to enter into or perform a contract with you, such as providing gardening services or fulfilling an order.
• Legal obligation: where processing is required to comply with applicable laws, regulations, tax requirements, or lawful requests.
• Legitimate business purposes: where processing is necessary for reasonable business activities, provided that such interests are not overridden by your rights and interests, including service improvement, fraud prevention, and internal administration.
• Other lawful bases permitted under Canadian law: including circumstances where collection, use, or disclosure is otherwise authorized or required by law.

We will seek additional consent where required by law, and we will not use personal information for new purposes that are incompatible with the original purpose without appropriate notice or consent.

5. Data sharing and third parties

We may disclose personal information to third parties only where necessary and appropriate for the purposes described in this Privacy Policy, including:

• Service providers: companies that support our operations, such as website hosting, email delivery, customer relationship management, analytics, payment processing, accounting, scheduling, and IT support.
• Delivery and logistics partners: carriers and couriers involved in delivering plants, soil, tools, or other goods.
• Professional advisors: lawyers, accountants, auditors, insurers, and consultants.
• Authorities and regulators: government bodies, law enforcement, courts, or other parties where required or permitted by law.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction, subject to appropriate confidentiality protections.

We require third parties that process personal information on our behalf to protect it appropriately and to use it only for authorized purposes. We do not sell personal information.

6. Data transfer to third countries

Some of our service providers may store or process personal information outside of Canada, including in other provinces or in foreign jurisdictions such as the United States. As a result, personal information may be subject to the laws of those jurisdictions and may be accessible to courts, law enforcement, or regulatory authorities in those countries.

When personal information is transferred outside Canada, we take reasonable steps to ensure it is protected by contractual, technical, and organizational safeguards appropriate to the sensitivity of the information. These safeguards may include confidentiality commitments, security controls, and data processing agreements.

7. Storage duration

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, to meet legal, accounting, tax, or reporting requirements, to resolve disputes, and to enforce our agreements.

The retention period may vary depending on the type of information and the context in which it was collected. For example:

• customer and service records are retained for the duration of the relationship and for a reasonable period afterward;
• financial and transaction records are retained for the period required by applicable tax and accounting laws;
• marketing contact information is retained until you withdraw consent or unsubscribe, subject to any legal retention requirements;
• website logs and analytics data are retained for a limited period necessary for security, diagnostics, and performance analysis.

When personal information is no longer required, we will securely delete, anonymize, or otherwise dispose of it in accordance with our retention practices and applicable law.

8. User rights

Subject to applicable law, you may have the following rights regarding your personal information:

• Access: the right to request confirmation of whether we hold personal information about you and to obtain a copy of that information.
• Rectification: the right to request correction of inaccurate or incomplete personal information.
• Erasure: the right to request deletion of personal information in certain circumstances, subject to legal retention obligations and other lawful exceptions.
• Restriction: the right to request that we limit the use of your personal information in certain situations.
• Data portability: the right, where applicable, to request a copy of certain personal information in a structured, commonly used, and machine-readable format.
• Objection: the right to object to certain processing activities, including direct marketing where applicable.

To exercise any of these rights, please contact us using the details in the Contact Information section below. We may need to verify your identity before responding to your request. We will respond within a reasonable time and in accordance with applicable legal requirements.

9. Withdrawal of consent

Where our processing is based on your consent, you may withdraw that consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

You may withdraw consent for marketing communications by using the unsubscribe link in our emails or by contacting us directly. If you withdraw consent for certain information necessary to provide a service, we may no longer be able to provide that service or certain features of it.

10. Right to complain

If you have concerns about how we handle personal information, we encourage you to contact us first so that we can try to resolve the issue promptly and fairly.

You may also have the right to file a complaint with the appropriate privacy regulator in Canada, including the Office of the Privacy Commissioner of Canada, or with a provincial privacy authority where applicable.

Before filing a complaint, you may wish to contact us at [email protected] so we can review and address your concerns.

11. Data security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, loss, or destruction. These measures may include access controls, password protection, secure storage, encryption where appropriate, staff confidentiality obligations, and regular review of security practices.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect personal information, we cannot guarantee absolute security.

You are also responsible for protecting the confidentiality of any account credentials or information you share with us, and for notifying us promptly if you suspect unauthorized access or misuse.

12. Contact information

If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, please contact:

MapleBloom Garden Co.
1240 Yonge Street, Toronto, ON M4T 1W5, Canada
Email: [email protected]
Phone: +1 (416) 782-6943

13. Changes to privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will take reasonable steps to notify you, such as by posting the updated policy on our website or by other appropriate communication methods.

The revised Privacy Policy will be effective when posted unless otherwise stated. We encourage you to review this page periodically to stay informed about how MapleBloom Garden Co. protects personal information.