Privacy Policy

Effective date: October 1, 2026 Bowman Design Direction (“we,” “us,” or “our”) operates bowman.design. This policy explains how we collect, use, and disclose personal information through our website and related client services, and the choices available to you.

Information you provide

When you contact us, submit the Connections form, subscribe to our newsletter, or use our client services, we collect the information you provide. This may include your name, email address, phone number, company or organization, website address, project details, and correspondence. If you have a client account, we also process account and profile information, appointment details, support requests, project discussions, and files you submit through the client services you use. Please provide only information needed for your inquiry or project, and avoid submitting sensitive personal information unless we have agreed on an appropriate way to handle it.

Website and technical information

Our website and the providers that operate and protect it may process technical information such as IP addresses, browser and device information, requested pages, timestamps, and security logs. We use this information to deliver the website, diagnose problems, prevent abuse, and maintain security. Necessary cookies support functions such as authentication, security, and remembering privacy choices. Optional cookies are controlled through our CookieYes consent banner. See our Cookie Policy for further information.

Google Analytics and Google Tag Manager

With your analytics consent, we use Google Analytics 4 to understand website use and improve our website. Analytics information can include pages viewed, interactions, referral sources, browser and device information, approximate location, and cookie identifiers. We also record an event when a visitor reaches the Connections thank-you page, with a form label identifying the Connections form. The configured lead event does not include the name, email address, phone number, or message entered in that form. Google Tag Manager manages the delivery of our consent and analytics tags. Our current configuration blocks the Google Analytics tags until analytics consent is granted. Rejecting optional cookies does not prevent you from submitting an inquiry. Google processes analytics information on its systems. Google states that GA4 does not log or store individual IP addresses, although it uses IP addresses to derive approximate location. This does not mean that our hosting or security providers do not process IP addresses separately. We do not currently run paid advertising. Our Analytics property is not linked to Google Ads, and ads personalization is disabled for all regions. Google signals and user-provided data collection are also disabled. For more information, read How Google uses information from sites or apps that use its services, Google’s Privacy Policy, and Google Analytics privacy controls. You can change your optional-cookie choices through the website’s cookie preferences. Your browser also provides controls for deleting or restricting cookies. Restricting necessary cookies may affect login and other website functions.

Accounts and WordPress cookies

For registered users, WordPress stores profile information, and WordPress and our client tools use necessary cookies to authenticate users, maintain login sessions, remember interface preferences, and support account security. Cookie duration varies by function and whether a user chooses options such as “Remember Me.” Logging out removes applicable login-session cookies. Other account and administrative features may use additional necessary cookies. See our Cookie Policy for cookie-specific purposes and durations. Password-reset emails may include the IP address from which the reset was requested. Registered users can manage available profile fields through their account. Administrators can access profile information to operate and support the service. Contact us for help with information you cannot change yourself or to request account deletion.

Uploaded files and external content

Images and other uploaded files may contain embedded metadata, including location information. Anyone who is permitted to access and download a file may be able to read that metadata. Remove unnecessary metadata before uploading files. Some pages may contain external links or embedded content, such as videos. Providers of embedded content may receive technical information and, where permitted, use cookies or record interactions, including interactions associated with an account you hold with them. Their privacy policies govern their own processing. A link to an external website does not make that website subject to this policy.

How we use information

We use information to respond to inquiries; plan and deliver projects; manage accounts, appointments, and support; communicate about our services; maintain business records; improve the website; protect our systems; and meet applicable legal obligations. If you choose to receive our newsletter, we use your contact information to send it. Newsletter signup is optional, and you can unsubscribe through the link in our emails or by contacting us. Inquiry and project communications are separate from newsletter subscriptions. We manage newsletter contacts and campaigns with FluentCRM on our WordPress website and deliver website email through Amazon Simple Email Service (Amazon SES), using FluentSMTP. Our newsletter system uses tracking pixels and tracked links to record email opens and link clicks and help us understand engagement. Email software may block or automatically load images, so open records are not always an accurate indication that a person read an email. You can block remote images in your email application and unsubscribe to stop future newsletters. Our contact-management system can request profile images from Gravatar using a hash derived from an email address. Its enabled fallback can also request an initials image from UI Avatars using a contact name. These requests can occur in our contact-management tools even though public comments are disabled. See Automattic’s Privacy Policy for Gravatar information.

Disclosure to others

We disclose information as needed to providers that help us deliver hosting, security, communications, consent management, analytics, and client services. Our website uses Kinsta for hosting, CookieYes for consent management, Google for analytics, and Amazon SES for email delivery. We use WordPress and the Fluent tools to manage forms, contacts, appointments, projects, support, and uploaded files on our website. FluentBooking is connected to Google Calendar and Zoom; booking details are shared with those services to create calendar events and meetings. We also use Google Workspace and Google Drive separately from the website for business email and project collaboration; website file management itself takes place in WordPress. Our contact tools also use the avatar services described above. Project information may also be shared with people who are authorized to work on your project, as needed to provide the agreed services. We use Intuit QuickBooks to prepare and send client invoices and offer payment options outside our website. This involves processing client contact details, invoice information, and payment status. If you pay through QuickBooks, your payment information is handled by Intuit and its payment service providers. Our website does not collect credit-card details. See Intuit’s Global Privacy Statement for information about Intuit’s privacy practices. We do not sell your personal information. We may disclose information when required by law, to protect rights or security, or in connection with a business transfer, subject to applicable requirements. Providers may process information in countries other than your own.

Retention and security

We retain information for as long as reasonably needed for the purposes described in this policy, including ongoing projects, account support, business records, dispute resolution, and legal obligations. Retention depends on the type of information and the reason we hold it. Closing an account does not necessarily require immediate deletion of records we must retain for those purposes. Backup copies may remain until they are replaced or deleted through the applicable backup cycle. For professional engagements, retention, export, transition, and deletion of Client Data are also governed by the applicable signed Master Services Agreement (MSA) and Statement of Work (SOW). Those agreements govern engagement-specific contractual obligations concerning Client Data, subject to applicable law. They do not limit privacy rights or obligations that applicable law requires. See our Terms and Conditions for the relationship between website use and signed client agreements. Our current Google Analytics retention settings are two months for event data and fourteen months for user data, with the user-data retention period reset by new activity. These controls do not apply to most standard reports based on aggregated data. We use reasonable safeguards to protect information. No internet transmission or storage system can be guaranteed completely secure.

Your choices and requests

You can decline optional cookies, change your cookie preferences, unsubscribe from newsletters, and ask us about personal information we hold about you. Depending on applicable law, you may have rights to access, correct, delete, or receive a copy of your information, or to restrict or object to certain processing. We may need to verify your identity before responding. We may retain information where permitted or required for legal, administrative, or security purposes. If you have a WordPress account, you may also request an export or erasure of the personal data available through WordPress’s privacy tools; these tools do not necessarily cover every record in other systems.

Children

Our website and services are intended for adults seeking business and professional services. If you believe a child has submitted personal information that should not have been collected, please contact us so we can review and address it.

Changes and contact

We may update this policy when our practices change. The effective date above identifies the latest version.

Bowman Design Direction
Attn: Bill Bowman – Privacy inquiries
12 B Highland Avenue
Arlington, MA 02476 USA

Email: privacy@bowman.design
Contact form: Connections