Privacy Policy

Overview

This Privacy Policy describes how we handle personal information under Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation. It applies to our website, bookings, customer support, and related services offered by Lawnly across Canada.

Effective date: 08 December 2025

Information We Collect

• Contact details (name, email, phone)
• Service details (address, property size, preferences)
• Technical data (browser type, pages viewed)

Additional categories

• Account data: quotes, invoices, payment status (payment processing handled by PCI-DSS compliant providers; we do not store full card numbers).
• Communications: emails, messages, call notes for customer support and quality assurance.
• Location context: service address and approximate region to route crews and schedule work.
• Device and usage data: IP address, device identifiers, referring pages, time on page, and interactions for analytics and security.
• Preference data: marketing preferences, consent records, and cookie choices.
• Photos you provide or authorize us to capture to document quotes or service outcomes.

How We Collect Information

• Directly from you when you request a quote, create an account, schedule service, or contact support.
• Automatically through cookies and similar technologies when you visit our website.
• From service partners who assist in fulfilling your booking (e.g., field crews, scheduling platforms) where permitted by law and your consent.

How We Use Information

• Provide quotes and perform services
• Communicate about scheduling and updates
• Improve our service and safety

Detailed purposes

• Account management: creating and maintaining your account, preferences, and consent records.
• Customer support: responding to inquiries, troubleshooting, and dispute resolution.
• Operations: routing crews, verifying addresses, optimizing schedules, and ensuring quality control.
• Security and fraud prevention: detecting suspicious activity and protecting our systems and users.
• Research and analytics: understanding usage trends to improve features and performance.
• Compliance: meeting legal, regulatory, tax, and insurance obligations in Canada.
• Marketing with consent: sending service tips, promotions, or surveys in accordance with CASL (Canada’s Anti-Spam Legislation).

Lawful Basis and Consent (Canada)

We collect, use, and disclose personal information with your knowledge and consent, except where otherwise permitted or required by law. Our primary lawful bases include:

• Consent: you provide information to request quotes, book services, or opt in to marketing communications.
• Legitimate business purposes permitted under PIPEDA: to operate, secure, and improve our services, proportional to your reasonable expectations.
• Legal obligations: to comply with applicable laws, regulations, audits, and lawful requests from authorities.

You may withdraw consent to non-essential uses (such as marketing) at any time. Withdrawal does not affect processing already performed and may impact our ability to provide certain services.

Sharing and Disclosure

We do not sell personal information. We disclose information only as necessary for the purposes described above:

• Service providers: scheduling, dispatch, customer support, cloud hosting, analytics, and payment processors.
• Field crews and contractors: limited data needed to perform services at your property.
• Legal and safety: compliance with court orders, enforcement of terms, and responding to lawful requests.
• Business transactions: in the context of a merger, acquisition, or asset transfer, subject to safeguards and notice where required.

Service providers are bound by confidentiality obligations and may only use your data as instructed by us.

International Transfers

Your information may be processed or stored outside your province or outside Canada (for example, in the United States) by our service providers. We use contractual and organizational safeguards to ensure a comparable level of protection as required by Canadian law. However, your data may be subject to the laws and lawful access requests of those jurisdictions.

Retention

We retain personal information only as long as necessary to fulfill the purposes described, or as required by law. Typical retention periods include:

• Account and service records: up to 7 years after your last interaction for tax, audit, and legal compliance.
• Support communications: 24–36 months for training and dispute resolution.
• Analytics data: 14–26 months in aggregated or de-identified form where feasible.
• Marketing preferences and consent logs: retained until you withdraw consent plus a reasonable verification period.
• Photos and job documentation: until service completion and warranty windows close, then archived or deleted per policy.

When data is no longer needed, we securely delete, anonymize, or aggregate it according to industry standards.

Your Rights

Subject to limited exceptions under Canadian law, you have the right to:

• Access your personal information and request a copy.
• Request correction of inaccurate or incomplete information.
• Withdraw consent to non-essential processing (e.g., marketing).
• Request explanations of our data handling practices and safeguards.
• Challenge our compliance through our privacy office and, if unresolved, to the Office of the Privacy Commissioner of Canada or your provincial commissioner where applicable.

We may take reasonable steps to verify your identity before responding. We will respond within reasonable timelines prescribed by law.

Security

We use administrative, technical, and physical safeguards to protect personal information, including encryption in transit, access controls, network monitoring, employee training, least-privilege access, and incident response procedures. No method of transmission or storage is completely secure; we continually enhance safeguards to address evolving risks.

Cookies

We use essential cookies for site operation and your preferences.

Types of cookies we use

• Essential: required for core functionality, security, and load balancing.
• Preferences: remember your settings such as theme choice and cookie consent.
• Analytics: help us understand site usage and improve performance (aggregated where feasible).

You can manage cookies via your browser settings. If you disable non-essential cookies, some features may be limited. Your cookie consent choices are stored locally on your device.

Children’s Privacy

Our services are intended for individuals who can enter into contracts for property services. We do not knowingly collect personal information from children under the age of 13. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

Automated Decision-Making

We may use rule-based logic to estimate quotes or schedule availability. These tools support our staff and do not replace meaningful human review. You may request human review of decisions that significantly affect you.

Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. Material changes will be highlighted by updating the effective date and, where appropriate, providing additional notice. Your continued use of our services after an update indicates your acceptance of the revised policy.

How to Exercise Your Rights

To access, correct, or delete personal information, or to withdraw consent for marketing, contact us using the details below. Please describe your request with enough detail to allow us to locate the relevant records.

• Proof of identity may be required for security and to protect your privacy.
• Some information may be exempt from access or deletion requests where prohibited by law or necessary to comply with legal obligations.
• We will provide reasons if we are unable to fulfill part of your request.

Contact

[email protected] • +1 (647) 555-1842

Escalation

If your concern remains unresolved, you may contact the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner. We will provide additional details upon request.