Privacy policy

Who is responsible for your data

Lemniscate ehf, a private limited company registered in Iceland and trading as MyGardenova, is the data controller for the personal data processed through the MyGardenova service. You can reach us at hello@mygardenova.com.

What we collect

Account data (name, email address and login credentials), project data (your brief, measurements and preferences), the files you upload (photos, drawings, sketches and documents), support messages you send us, and basic usage and device data such as IP address and browser type used to keep the service secure and running.

Payment details are collected and processed by Paddle, our payment provider and Merchant of Record. We never see or store your card details.

How we use it and our legal basis

We use your data to create and manage your account, produce your garden design, answer revision requests and produce your report. The legal basis for this is performance of our contract with you.

We use usage and device data to keep the service secure, prevent fraud and improve the product, based on our legitimate interests. Where required, we may process data to comply with legal obligations. We do not sell your data or use it for advertising.

AI providers process your brief and photos to generate design suggestions on our behalf. Uploaded files are stored privately and are only accessible to your account and the MyGardenova team.

Who we share data with

We share data only as needed to run the service: with service providers and subprocessors who host, store and operate the service; with AI providers that process your brief and photos on our behalf; and with Paddle.com, which acts as Merchant of Record and receives the data needed to process your order, manage payments, handle tax compliance and invoicing, and deal with returns and refund requests.

We may also share data with professional advisers (legal, accounting) and with authorities where required by law.

How we protect your data

We apply appropriate technical and organisational measures to protect your data, including encryption in transit, private access-controlled file storage, and account-level access controls so that your project files are only visible to your account and the MyGardenova team.

Storage and deletion

We keep project data for as long as your account exists so you can return to your portal. When data is no longer needed it is deleted or anonymised. You can ask us to delete your account, project files and designs at any time by writing to hello@mygardenova.com, and we will do so within 30 days.

Your rights

You can request a copy of your data, ask for corrections, ask for deletion, restrict or object to processing, and withdraw consent where processing is based on consent. We respond within one month.

Lemniscate ehf is registered in Iceland and follows the GDPR. Customers in Iceland, the UK and the European Economic Area also have the right to complain to their data protection supervisory authority. Where data is transferred outside the EEA, we use appropriate safeguards such as standard contractual clauses.