Privacy Policy

Overview

Middleton Lawn Maintenance (“we”, “us”, or “our”) operates the website at middletonlawns.fun (the “Service”). This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information. We are committed to protecting your privacy and handling your data responsibly.

Information We Collect

When you use our Service, we may collect the following information:

• Account information — your name and email address when you create an account or sign in with Google.
• Contact details — your phone number and home address (house number on Middleton Street, Thamesford, ON), which you provide when setting up your profile or making a booking.
• Booking information — the date, time slot, service options, and any notes you provide when placing a booking.
• Payment information — we do not store payment card details. Payments are processed securely by Stripe, Inc. We only retain a reference to the Stripe session and payment intent ID for record-keeping.
• Usage data — basic technical information such as your browser type, device type, and pages visited, collected automatically through standard web server logs.

How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Process and confirm your lawn care bookings
• Send booking confirmations and service notifications
• Pre-fill your booking form for faster repeat bookings
• Communicate with you about your scheduled service
• Improve the reliability and functionality of the Service

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Google Sign-In

We offer the option to sign in using your Google account via Google OAuth 2.0. When you choose this option, Google shares your name and email address with us. We do not access your Google contacts, calendar, Gmail, or any other Google service data. We only use the information shared at sign-in to create and identify your account on our platform.

Data Storage & Security

Your data is stored in Supabase, a secure cloud database platform hosted on AWS infrastructure. All data is encrypted in transit using TLS and at rest using industry-standard encryption. Row-level security policies ensure that you can only access your own booking records. Payments are processed by Stripe, which is PCI DSS Level 1 certified — the highest level of payment security certification available.

Third-Party Services

We use the following third-party services to operate the platform:

• Supabase — authentication and database storage (Privacy Policy)
• Stripe — payment processing (Privacy Policy)
• Google OAuth — optional sign-in (Privacy Policy)
• Vercel — website hosting (Privacy Policy)

Cookies

We use only essential cookies necessary for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. Your login session is maintained using a secure, HTTP-only cookie set by Supabase.

Data Retention

We retain your account and booking information for as long as your account is active or as needed to provide the Service. Booking records are kept for a minimum of one year for operational and tax purposes. You may request deletion of your account and associated data at any time by contacting us.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct any inaccurate information
• Request deletion of your account and data
• Withdraw consent at any time (e.g. disconnect Google sign-in)
• Lodge a complaint with the Office of the Privacy Commissioner of Canada

Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of the Service after changes constitutes acceptance of the revised policy.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data: