Data Processing Addendum (DPA)
Three Seasons LLC
Website: https://www.threeseasonsllc.com/
Effective Date: July 21, 2026
Last Updated: July 21, 2026
Data Processing Addendum
This Data Processing Addendum (“DPA“) forms part of any agreement between Three Seasons LLC (“Processor,” “Service Provider,” “we,” “our,” or “us“) and any customer, business client, contractor, or organization (“Controller,” “Customer,” or “you“) that engages Three Seasons LLC to provide landscaping, lawn maintenance, irrigation, hardscaping, nursery, outdoor living, or related services where personal data may be processed.
This DPA applies only to the extent that Three Seasons LLC processes Personal Data on behalf of a Customer.
1. Definitions
For purposes of this DPA:
Applicable Privacy Laws means all applicable privacy and data protection laws governing the processing of Personal Data, including, where applicable:
- General Data Protection Regulation (EU GDPR)
- UK GDPR
- California Consumer Privacy Act (CCPA), as amended by the CPRA
- Other applicable U.S. federal or state privacy laws
Controller means the entity determining the purposes and means of processing Personal Data.
Processor means the entity processing Personal Data on behalf of the Controller.
Personal Data means information relating to an identified or identifiable individual.
Processing includes collecting, storing, organizing, accessing, using, transmitting, disclosing, deleting, or otherwise handling Personal Data.
2. Scope
This DPA governs Personal Data processed by Three Seasons LLC while providing services such as:
- Landscaping services
- Landscape design
- Lawn maintenance
- Irrigation services
- Hardscape installation
- Outdoor living projects
- Tree and shrub care
- Nursery sales
- Property consultations
- Customer support
- Website inquiries
- Project scheduling
3. Categories of Personal Data
Depending on the services provided, Personal Data may include:
- Names
- Company names
- Property addresses
- Billing addresses
- Email addresses
- Telephone numbers
- Project details
- Photographs submitted by customers
- Payment-related information (processed through secure payment providers)
- Appointment information
- Communications with our staff
Three Seasons LLC does not intentionally collect sensitive personal information unless necessary for providing requested services.
4. Categories of Data Subjects
Data subjects may include:
- Residential customers
- Commercial customers
- Prospective customers
- Property owners
- Authorized representatives
- Vendors
- Business contacts
- Website visitors
5. Purpose of Processing
Personal Data is processed only as necessary to:
- Respond to inquiries
- Prepare estimates
- Schedule appointments
- Deliver requested services
- Manage landscaping projects
- Process payments
- Communicate with customers
- Maintain business records
- Improve customer service
- Comply with legal obligations
Three Seasons LLC will process Personal Data only on documented instructions from the Customer unless otherwise required by law.
6. Customer Responsibilities
The Customer represents and warrants that:
- Appropriate legal authority exists to provide Personal Data.
- Required notices have been provided to individuals.
- Any required consent has been obtained.
- Instructions provided to Three Seasons LLC comply with applicable law.
The Customer remains responsible for determining the lawful basis for processing Personal Data.
7. Processor Responsibilities
Three Seasons LLC agrees to:
- Process Personal Data only as instructed by the Customer.
- Maintain appropriate confidentiality.
- Limit access to authorized personnel.
- Implement reasonable administrative, technical, and physical safeguards.
- Notify the Customer if we believe an instruction violates applicable law.
- Assist the Customer, where reasonably possible, in meeting applicable legal obligations.
8. Confidentiality
All employees, contractors, and authorized personnel with access to Personal Data are required to maintain appropriate confidentiality obligations.
Access to Personal Data is limited to personnel who require such access to perform their job responsibilities.
9. Security Measures
Three Seasons LLC maintains reasonable safeguards appropriate to the nature of the information processed, including:
- Secure networks where appropriate
- Password-protected systems
- Access controls
- Employee access limitations
- Anti-malware protections
- Regular software updates
- Secure data transmission where practical
- Vendor security reviews when appropriate
While we take reasonable precautions, no security system can guarantee absolute protection.
10. Subprocessors
Three Seasons LLC may engage trusted third-party service providers (“Subprocessors”) to assist in providing services, including:
- Website hosting providers
- Cloud storage providers
- Email service providers
- Customer relationship management (CRM) systems
- Payment processors
- Scheduling software
- Accounting software
- IT support providers
- Marketing service providers
These providers may process Personal Data only as necessary to provide contracted services.
Where appropriate, Three Seasons LLC will require subprocessors to maintain appropriate confidentiality and security obligations.
11. International Transfers
If Personal Data is transferred outside the country in which it was collected, Three Seasons LLC will take commercially reasonable steps to ensure appropriate safeguards are implemented where required by applicable law.
12. Data Subject Requests
Where applicable, Three Seasons LLC will reasonably assist the Customer in responding to requests involving:
- Access
- Correction
- Deletion
- Data portability
- Processing restrictions
- Objections to processing
If Three Seasons LLC receives a request directly from an individual regarding Personal Data processed on behalf of a Customer, we may refer the request to the Customer unless prohibited by law.
13. Security Incidents
If Three Seasons LLC becomes aware of a confirmed security incident affecting Personal Data processed on behalf of a Customer, we will notify the Customer without undue delay after becoming aware of the incident.
Such notification may include, where available:
- Nature of the incident
- Categories of affected information
- Known or estimated impact
- Steps taken to investigate
- Mitigation efforts
- Recommended customer actions, if applicable
Notification does not constitute an admission of liability.
14. Data Retention and Deletion
Three Seasons LLC retains Personal Data only as long as necessary to:
- Perform contracted services
- Maintain required business records
- Comply with legal obligations
- Resolve disputes
- Enforce contractual rights
Upon termination of services and where legally permissible, Personal Data may be securely deleted, anonymized, or returned to the Customer upon written request.
Certain records may be retained where required by law.
15. Audits
Upon reasonable written request, Three Seasons LLC may provide information reasonably necessary to demonstrate compliance with this DPA.
Any audit request must:
- Be reasonable in scope.
- Protect confidential information.
- Minimize disruption to business operations.
- Be subject to mutually agreed confidentiality obligations.
16. Limitation of Liability
This DPA does not expand either party’s liability beyond the limitations contained in any applicable service agreement.
Where no separate agreement exists, liability shall be governed by applicable law.
17. Termination
This DPA remains effective for as long as Three Seasons LLC processes Personal Data on behalf of the Customer.
Applicable confidentiality, security, and legal obligations survive termination where required by law.
18. Governing Law
This DPA shall be governed by the laws of the State of Florida, unless another governing law is required by applicable data protection legislation.
19. Contact Information
Questions regarding this Data Processing Addendum or our data handling practices may be directed to:
Three Seasons LLC
3720 57th Street East
Palmetto, FL 34221
Phone: (941) 748-4613
Website: https://www.threeseasonsllc.com/