Lawn Sprite privacy notice Version mvp-monthly-2026-11-10-v1 — 10 November 2026 How the current Lawn Sprite app uses account, lawn and customer information. Who is responsible Lawn Sprite is operated by JMT Property Services Ltd, company number 15323232. Our registered office is Cropton House, Three Tuns Lane, Formby, Liverpool, England, L37 4AQ. For privacy requests, contact support@lawnsprite.co.uk (mailto:support@lawnsprite.co.uk). The registered office is not a walk-in support location. We are responsible for account administration, security, support and our own billing records. If an independent lawn-care business records its customers' details, that business decides why those records are needed and is responsible for informing its customers. We provide the workspace processing described in the business data schedule (business-data-2026-11-10.html). Our existing private Business workspace is operated by the same company. Information we handle and its source - Account details you give us, including email, account identifiers and sign-in or verification information. Our identity provider handles passwords and authenticator registration. - Lawn profiles and information you or your lawn-care provider record: location or address, dimensions, grass and conditions, dated observations, care history, visits, services, products and follow-up outcomes. - Customer contact details, private business notes and shared work reports entered by the responsible business. Customers see only the lawns and information that business has chosen to share with them. - Support correspondence and information supplied with a request. Avoid sending information we do not need. - Technical information needed to serve and protect the app, such as IP address, request time, browser information, account/session identifiers, errors, verification events and access or removal evidence. - When payment facilities are enabled, Stripe payment references, subscription status, paid-period dates and necessary invoice or accounting information. Card entry is handled by Stripe; the app does not store full card numbers or security codes. Information about a customer may come from their lawn-care provider, rather than directly from the customer. Ask that provider to explain the information they record and its use. Why we use it We use account and lawn information to provide the service you request, preserve your records, enforce the appropriate account allowance and provide requested downloads, sharing and account controls. For our direct account relationship, this is necessary to provide the service under our agreement with you. We use limited security and diagnostic information for our legitimate interests in preventing abuse, protecting accounts, resolving errors and stopping old backups from restoring removed access. We use necessary accounting information to meet legal obligations. Support information is used to answer your request and resolve problems. Optional future research, marketing or sharing with another brand needs a separate explained basis and appropriate choice. Creating an account or recording a lawn does not consent to a research database or to sending your personal records to Spritely Lawns or Formby Gardener. Who receives information Our authorised support and service operators may access information needed to run the service or resolve a request. Amazon Web Services provides hosting, storage, identity, security-code email and operational services. Stripe provides payment processing when enabled. Microsoft 365 handles messages you send to our support mailbox. Other app users receive information only through the relevant workspace permissions or sharing you or the responsible provider authorise. An invited customer cannot browse other customers or a provider's personal lawns. We may disclose information where required by law or necessary to establish or defend a legal claim. Location and supplier transfers The principal application databases and identity services use AWS's London region. Public interface delivery and supplier operations can involve processing in other countries. This is not a promise that every item is processed only in the UK. Supplier terms provide contractual safeguards for relevant international transfers. AWS's UK GDPR Addendum incorporates standard contractual clauses and the UK transfer addendum and applies automatically where required. Stripe's processing and transfer addenda describe its processor/controller roles and UK safeguards. Microsoft 365 support mail is covered by Microsoft's applicable service data-protection terms. Read AWS data-protection terms (https://aws.amazon.com/compliance/gdpr-center/), Stripe data processing (https://stripe.com/gb/legal/dpa), Stripe transfer terms (https://stripe.com/gb/legal/dta) and the Microsoft data-protection addendum (https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA). Contact support to request the relevant terms and safeguards. We keep a supplier and transfer record for the deployed service. Contact support for information about its applicable safeguards. How long information is kept Account and lawn information is kept while needed to provide the account and its requested records. You can use available removal controls or contact support. Business customer records may have a different lawful retention purpose: the responsible business must explain it. Deletion of active records does not immediately erase protected backup copies. The new account tables have a rolling backup recovery window of up to 35 days; separate recovery copies must be managed under the operational retention procedure. Restored copies must be checked against current removal evidence before use. Minimal removal and access-revocation evidence can remain after closure so an older backup cannot recreate a removed account, record or connection. We keep only what is needed for that protection and related legal or security purposes; this is separate from retaining the removed lawn content. Contact support to review an individual retention request. Accounting records are generally retained for six years after the end of the relevant company financial year, or longer where a legal requirement applies. Necessary support records are kept while resolving the request and for relevant complaints or legal claims. Diagnostic logs follow the retention configured for their purpose; the new account billing and email-service logs have seven-day retention. Cookies and device storage The app uses necessary session and security storage. If you choose to stay signed in, an encrypted, protected device cookie can keep a personal or Pro sign-in for up to 30 days, subject to expiry, revocation and account checks. Different account areas keep separate sessions. Sign out on a shared device and use your browser controls to remove saved site data when appropriate. These app pages contain no advertising or optional analytics trackers. Separate public websites have their own notices. A private invitation code is handled in the browser fragment and removed from the address bar; it is not a licence to share that link with someone else. Your rights and choices You can ask for access, correction, deletion or restriction, and for portability where it applies. You may withdraw consent for an optional activity without changing the lawfulness of earlier processing. Some records must be retained for a separate lawful purpose, so a request does not always require immediate removal of everything. You can object to processing based on legitimate interests. Tell support which processing you object to so we can consider your circumstances. Contact the responsible lawn-care business about its customer records; we will help direct a request where needed. We may need reasonable identity checks before disclosing or changing private records. Never send your password or security codes. You can complain to the Information Commissioner's Office (https://ico.org.uk/make-a-complaint/). You can also contact us first so we can investigate. Lawn suggestions and future intelligence Current care suggestions use the profile, dated observations and history available to the app. Missing information is not treated as proof that no work occurred. They do not make legal or similarly significant eligibility decisions about you. This version does not provide an automatic photo diagnosis or a live forecast. Any future use of identifiable lawn records for a shared intelligence database, AI service or personalised product subscription needs a separate explanation and safeguards. Removing names alone does not necessarily make location, photographs or a lawn history anonymous.