Privacy Policy

Effective Date: July 11, 2025

Website: https://www.gardenhero.ca
Owned and Operated By: Social Oak Media Inc.
Mailing Address: 31 Fireside Burrow, Cochrane, AB, T4C 0T3, Canada
Phone: (587) 324-8505
Email: [email protected]

1. Purpose

This Privacy Policy outlines how we collect, use, disclose, and protect your personal data when you visit or use our Site. It applies to all users, including those accessing the Site globally. Our compliance includes the Personal Information Protection and Electronic Documents Act (PIPEDA), the General Data Protection Regulation (GDPR), Canada’s Anti-Spam Legislation (CASL), and the U.S. CAN-SPAM Act.

2. Consent

By using our Site, creating an account, or submitting personal data, you agree to the collection and use of your information in accordance with this Privacy Policy. For EU/EEA users, data is processed on the basis of consent, performance of a contract, legal obligations, or legitimate interests.

3. Personal Data We Collect

A. Automatically Collected Information:

• IP address
• Browser and device type
• Operating system
• Referring URL
• Pages visited and usage statistics
• Cookies and session data

B. Information You Provide Directly:

• Name, email, and phone number
• Billing and shipping address
• Payment details (handled by third-party processors)
• Account login credentials
• Comments or feedback
• Order and subscription history

C. Third-Party Integrations: Some services (e.g. analytics, social media, payment processors) may collect data through embedded content or pixels.

4. How We Use Your Data

We use your data for the following purposes:

• To create and manage user accounts
• To fulfill orders for physical and digital products
• To manage paid subscriptions and recurring billing
• To deliver course and resource access
• To respond to customer service inquiries
• To send marketing and promotional messages (with consent)
• To comply with legal and regulatory obligations
• To improve site performance and user experience

5. GDPR – Rights for EU/EEA Users

We are committed to passive compliance with GDPR. If you are located in the EU/EEA, you have the right to:

• Access your personal data
• Correct inaccuracies
• Delete your data
• Object to or restrict processing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with your local data protection authority

We only process data where lawful grounds exist (e.g., consent, contractual necessity, legal obligation, or legitimate interest).

6. CASL and CAN-SPAM Compliance

We only send commercial electronic messages (CEMs) where:

• We have your express consent, or
• An existing business relationship allows for implied consent (CASL-compliant)

All marketing emails and SMS messages include:

• Clear identification of the sender
• Contact information
• An easy-to-use opt-out mechanism (e.g., “unsubscribe” or replying "STOP")

7. How We Store and Protect Your Data

• All data is transmitted over encrypted HTTPS connections
• Access is limited to authorized personnel only
• Payment details are never stored on our servers
• Hosting and third-party services are selected for strong security practices
• Firewalls and regular software updates are employed

Data is retained:

• For as long as needed to fulfill its purpose (e.g. for active accounts)
• Up to 7 years for tax and legal compliance

8. Cookies & Tracking Technologies

We use cookies for:

• Site functionality and session management
• Analytics (e.g., Google Analytics with IP anonymization)
• Remembering login and cart contents

Cookie Consent:
EU/EEA visitors are presented with a cookie consent banner. Non-essential cookies (e.g. analytics) are only used after opt-in consent.

Users can manage or disable cookies in their browser settings at any time.

9. Third-Party Services

We may share data with third-party service providers for payment processing, shipping, analytics, or customer communications. These providers are bound by confidentiality and legal obligations.

We are not responsible for the privacy practices of third-party websites linked on our Site. Please review their policies before interacting.

10. User Accounts & Comments

• Your information is stored and visible to site administrators
• You can view and update your profile at any time
• You may request deletion of your account and associated data
• We retain comments and metadata indefinitely unless deletion is requested

11. Children's Privacy

We do not knowingly collect or process data from children under 13. If we learn such data has been collected, it will be deleted immediately. Parents may contact us to request removal.

12. How to Access or Manage Your Data

To access, update, or delete your data, or to exercise any privacy rights, contact our Privacy Officer:

Ty Heembrock
📧 [email protected]
📞 (587) 324-8505

We will respond to all inquiries within 30 days as required by law.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in laws or operations. Updates will be posted here with a new effective date. For significant changes, we may notify you by email or site announcement.