Privacy Policy of Maple Bloom Garden Co.

Effective Date: July 7, 2026

1. Introduction and Company Information

This Privacy Policy explains how Maple Bloom Garden Co. (“Maple Bloom Garden Co.”, “we”, “us”, or “our”) collects, uses, discloses, stores, and protects personal information in the course of operating our garden business in Canada. We are committed to protecting personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial privacy legislation.

This Policy applies to personal information collected through our website, by telephone, by email, in person, through service requests, quotations, purchases, consultations, delivery arrangements, customer support, marketing communications, and any other interaction with Maple Bloom Garden Co.

Business and contact details:
Maple Bloom Garden Co.
2450 Yonge Street, Toronto, ON M4P 2H5, Canada
Email: [email protected]
Phone: +1 (416) 782-5943

2. Data Collection and Processing

We collect personal information that is necessary for operating our garden business and providing our products and services. Depending on your interactions with us, we may collect the following categories of personal information:

• Identification and contact information: name, address, email address, telephone number, and preferred communication method.
• Transaction information: purchase history, invoices, payment status, delivery details, and service records.
• Service and project information: garden consultation details, landscaping preferences, property-related instructions, plant selections, scheduling information, and project notes.
• Account and communication information: messages sent to us, customer service records, feedback, and correspondence.
• Technical information: IP address, browser type, device information, website usage data, cookies, and similar technologies where applicable.
• Marketing preferences: consent choices, newsletter subscriptions, and communication preferences.
• Payment-related information: limited billing details necessary to process payments, typically handled through secure third-party payment processors.

We collect personal information directly from you where possible. We may also collect information from third parties where permitted by law, such as payment processors, delivery providers, or service partners involved in fulfilling your request.

We process personal information in a lawful, fair, and reasonable manner and limit collection to what is necessary for identified purposes.

3. Purpose of Data Processing

We use personal information for the following purposes:

• to provide garden-related products and services;
• to respond to inquiries, prepare quotations, and schedule consultations or deliveries;
• to process orders, payments, refunds, and invoices;
• to manage customer relationships and maintain service records;
• to personalize recommendations based on garden preferences, seasonal needs, and project requirements;
• to send service updates, appointment reminders, and administrative communications;
• to send marketing communications where permitted and, if required, where consent has been obtained;
• to improve our website, services, operations, and customer experience;
• to detect, prevent, and investigate fraud, misuse, security incidents, or unlawful activity;
• to comply with legal, regulatory, tax, accounting, and recordkeeping obligations;
• to enforce our agreements and protect our rights, property, and safety, as well as those of our customers and others.

4. Legal Basis for Processing

Under Canadian privacy law, we generally process personal information with your knowledge and consent, except where otherwise permitted or required by law. Depending on the circumstances, our legal basis for processing may include:

• Consent: where you have given express or implied consent for a specific purpose, such as receiving marketing emails or requesting a consultation.
• Contractual necessity: where processing is necessary to provide requested products or services, fulfill orders, or manage customer accounts.
• Legitimate business purposes: where processing is necessary for reasonable business operations, fraud prevention, service improvement, or internal administration, and where such processing is appropriate under applicable law.
• Legal and regulatory obligations: where processing is required to comply with applicable laws, court orders, tax requirements, or lawful requests from authorities.

Where consent is relied upon, you may withdraw it at any time subject to legal or contractual restrictions and reasonable notice.

5. Data Sharing and Third Parties

We do not sell personal information. We may disclose personal information to third parties only where necessary and appropriate for the purposes described in this Policy, including:

• Service providers: hosting providers, email service providers, customer relationship management tools, analytics providers, payment processors, and IT support providers.
• Delivery and logistics partners: carriers, couriers, and delivery contractors involved in fulfilling orders or service appointments.
• Professional advisors: accountants, auditors, lawyers, insurers, and other advisors subject to confidentiality obligations.
• Authorities and legal recipients: government bodies, regulators, law enforcement, or other parties where disclosure is required or permitted by law.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality protections.

We require third parties that process personal information on our behalf to protect it appropriately and to use it only for the purposes we specify.

6. Data Transfer to Third Countries

Some of our service providers may store or process personal information outside Canada, including in the United States or other jurisdictions. As a result, your personal information may be subject to the laws of those jurisdictions and may be accessible to courts, law enforcement, or regulatory authorities in those countries.

Where personal information is transferred outside Canada, we take reasonable steps to ensure that it is protected by contractual, technical, and organizational safeguards appropriate to the sensitivity of the information and the risks associated with the transfer.

7. Storage Duration

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory requirements, to resolve disputes, and to enforce our agreements.

Retention periods vary depending on the type of information and the purpose for which it is used. For example:

• customer and transaction records may be retained for the period required for tax, accounting, and business recordkeeping purposes;
• service communications and project notes may be retained for a reasonable period to support customer service and warranty or dispute handling;
• marketing consent records may be retained until you withdraw consent or request deletion, subject to legal retention obligations;
• technical logs and website analytics data may be retained for security, troubleshooting, and performance analysis for a limited period.

When personal information is no longer required, we will securely delete, destroy, or anonymize it in accordance with applicable law and our retention practices.

8. User Rights

Subject to applicable law and certain exceptions, you may have the following rights regarding your personal information:

• Access: to request confirmation of whether we hold personal information about you and to obtain a copy of that information.
• Rectification: to request correction of inaccurate, incomplete, or outdated personal information.
• Erasure: to request deletion of personal information where permitted by law.
• Restriction: to request that we limit the processing of your personal information in certain circumstances.
• Data portability: to request a copy of certain personal information in a structured, commonly used, and machine-readable format where applicable.
• Objection: to object to certain processing activities, including direct marketing where applicable.

To exercise your rights, please contact us using the details in the Contact Information section below. We may need to verify your identity before responding. We will respond within a reasonable time and in accordance with applicable legal requirements.

9. Withdrawal of Consent

Where we rely on your consent to process personal information, you may withdraw that consent at any time by contacting us or, where available, using the unsubscribe or preference-management options provided in our communications.

Please note that withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. In some cases, we may still be permitted or required to retain or process certain information under applicable law or for legitimate business purposes.

10. Right to Complain

If you have concerns about our privacy practices, we encourage you to contact us first so we can attempt to resolve the issue promptly.

You may also have the right to file a complaint with the Office of the Privacy Commissioner of Canada or, where applicable, a provincial privacy regulator if you believe your personal information has been handled in a manner that does not comply with applicable privacy laws.

11. Data Security

We use reasonable physical, organizational, and technical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. These safeguards may include:

• access controls and role-based permissions;
• secure storage and encryption where appropriate;
• staff confidentiality obligations and privacy training;
• monitoring and logging of systems where appropriate;
• secure disposal practices for records and devices;
• vendor due diligence and contractual security requirements.

No method of transmission or storage is completely secure. While we strive to protect personal information, we cannot guarantee absolute security.

12. Contact Information

If you have questions about this Privacy Policy, our privacy practices, or wish to exercise your rights, please contact:

Maple Bloom Garden Co.
2450 Yonge Street, Toronto, ON M4P 2H5, Canada
Email: [email protected]
Phone: +1 (416) 782-5943

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. Any updated version will be posted with a revised effective date.

We encourage you to review this Privacy Policy periodically. Your continued use of our services after changes are posted may constitute acceptance of the updated Policy, to the extent permitted by law.