Privacy Policy

Welcome, and thank you for your interest in Bowman Bathrooms ("Bowman Bathrooms", "Bowmans", "we," or "us"). This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website at https://bowmanbathrooms.co.uk (the "Site") or use our luxury bathroom design and installation services.

This Privacy Policy complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and the Privacy and Electronic Communications Regulations (PECR). By using our Site or services, you agree to the data practices described in this Policy.

Data Controller: Bowman Bathrooms is the data controller responsible for your personal information. You can contact us using the details in the "How to Contact Us" section below.

Definitions

"Client"

means a customer of Bowman Bathrooms.

"Client Data"

means personal data, reports, addresses, and other files, folders or documents in electronic form that a User of the Service stores within the Service.

"Personal Data"

means any information relating to an identified or identifiable natural person.

"Public Area"

means the area of the Site that can be accessed both by Users and Visitors, without needing to log in.

"Restricted Area"

means the area of the Site that can be accessed only by Users, and where access requires logging in.

"User"

means an employee, agent, or representative of a Client, who primarily uses the restricted areas of the Site for the purpose of accessing the Service in such capacity.

"Visitor"

means an individual other than a User, who uses the public area, but has no access to the restricted areas of the Site or Service.

1. Information We Collect

1.1 Information You Provide to Us

When you use our services, you may provide us with personal information, including:

• Contact Information: Name, email address, phone number, postal address, postcode
• Project Information: Details about your bathroom project, budget, timeline, preferences
• Communication Records: Content of enquiries, emails, phone calls, and messages
• Booking Information: Showroom visit appointments, consultation bookings
• Marketing Preferences: Your consent choices for receiving marketing communications

Legal Basis: We process this information based on:

• Contract Performance: To provide the services you've requested
• Legitimate Interests: To respond to enquiries and improve our services
• Consent: For marketing communications (you can withdraw consent at any time)

1.2 Information Collected Automatically

When you visit our Site, we automatically collect certain information:

• Device Information: IP address, browser type, device type, operating system
• Usage Information: Pages visited, time spent, navigation paths, referring websites
• Location Data: General geographic location based on IP address
• Cookie Data: See "Cookies and Tracking Technologies" section below

Legal Basis: Legitimate interests (website security, analytics, improving user experience). For analytics cookies, we rely on your consent obtained through our cookie banner.

2. How we use the information we collect

We use the information that we collect in a variety of ways in providing the Service and operating our business, including the following:

2.1 Operations

We use the information � other than Client Data � to operate, maintain, enhance and provide all features of the Service, to provide the services and information that you request, to respond to comments and questions and to provide support to users of the Service. We process Client Data solely in accordance with the directions provided by the applicable Client or User.

2.2 Improvements

We use the information to understand and analyse the usage trends and preferences of our Visitors and Users, to improve the Service, and to develop new products, services, feature, and functionality. Should this purpose require Bowman Bathrooms to process Client Data, then the data will only be used in anonymized or aggregated form.

3. Cookies and Tracking Technologies

3.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our Site. They help us provide you with a better experience by remembering your preferences and understanding how you use our Site.

3.2 Cookie Consent

When you first visit our Site, you'll see a cookie banner asking for your consent to use analytics cookies. You can:

• Accept All: Allows all cookies including analytics
• Reject All: Only essential cookies will be used

Your choice is stored in your browser's local storage and will be remembered for future visits. You can change your preference at any time by clearing your browser's local storage or contacting us.

3.3 Types of Cookies We Use

Essential Cookies (Always Active)

These cookies are strictly necessary for the Site to function. They cannot be disabled.

• bowmans_cookie_consent: Stores your cookie consent preference (localStorage, persistent)

Analytics Cookies (Require Consent)

We use Google Analytics 4 (GA4) to understand how visitors use our Site and improve our services. These cookies are only activated if you consent via our cookie banner.

Google Analytics with Consent Mode: We implement Google's Consent Mode v2, which:

• Sets analytics_storage to "denied" by default
• Only enables tracking after you accept cookies
• Uses cookieless pings when consent is denied
• Anonymizes IP addresses automatically

For more information about Google Analytics and privacy, visit: Google Privacy Policy

3.4 Managing Cookies

You can control cookies through:

• Browser Settings: Most browsers allow you to refuse or delete cookies. Visit allaboutcookies.org for guidance.
• Google Analytics Opt-out: Install the Google Analytics Opt-out Browser Add-on
• Our Cookie Banner: Change your preferences when visiting our Site

Note: Disabling cookies may affect Site functionality and your user experience.

4. Who We Share Your Information With

We do not sell, rent, or trade your personal information. We may share your information with:

4.1 Service Providers

We work with trusted third-party service providers who assist us in operating our business:

• Website Hosting: To host and maintain our Site
• Email Services: To send communications and manage enquiries
• Analytics: Google Analytics (only with your consent)
• CRM Systems: To manage customer relationships and project information

All service providers are contractually required to protect your data and only use it for the purposes we specify.

4.2 Publicly Shared Information

Any information that you voluntarily choose to include in a Public Area of the Service, such as a public profile page, will be available to any Visitor or User who has access to that content.

3.2 Service providers

We work with third party service providers who provide website, application development, hosting, maintenance, and other services for us. These third parties may have access to, or process Personal Data or Client Data as part of providing those services for us. We limit the information provided to these service providers to that which is reasonably necessary for them to perform their functions, and our contracts with them require them to maintain the confidentiality of such information.

3.3 Non-personally identifying information

We may make certain automatically-collected, aggregated, or otherwise non-personally-identifiable information available to third parties for various purposes, including (i) compliance with various reporting obligations; (ii) for business or marketing purposes; or (iii) to assist such parties in understanding our Clients', Users' and Visitors' interests, habits, and usage patterns for certain programs, content, services, and/or functionality available through the Service.

3.4 Law enforcement, legal process and compliance

We may disclose Personal Data or other information if required to do so by law or in the good-faith belief that such action is necessary to comply with applicable laws, in response to a facially valid court order, judicial or other government subpoena or warrant, or to otherwise cooperate with law enforcement or other governmental agencies.

We also reserve the right to disclose Personal Data or other information that we believe, in good faith, is appropriate or necessary to (i) take precautions against liability, (ii) protect ourselves or others from fraudulent, abusive, or unlawful uses or activity, (iii) investigate and defend ourselves against any third-party claims or allegations, (iv) protect the security or integrity of the Service and any facilities or equipment used to make the Service available, or (v) protect our property or other legal rights, enforce our contracts, or protect the rights, property, or safety of others.

3.5 Change of ownership

Information about Users and Visitors, including Personal Data, may be disclosed and otherwise transferred to an acquirer, successor or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction, as well as in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets and only if the recipient of the User or Visitor Data commits to a Privacy Policy that has terms substantially consistent with this Privacy Policy.

Client Data may be physically or electronically transferred to an acquirer, or successor or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction, as well as in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets, for the sole purpose of continuing the operation of the Service, and only if the recipient of the Client Data commits to a Privacy Policy that has terms substantially consistent with this Privacy Policy.

5. Your Rights Under UK GDPR

Under UK data protection law, you have the following rights:

5.1 Right of Access

You can request a copy of the personal information we hold about you (Subject Access Request). We'll provide this within one month, free of charge.

5.2 Right to Rectification

You can ask us to correct inaccurate or incomplete personal information.

5.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal information in certain circumstances, such as:

• The information is no longer necessary for the purpose it was collected
• You withdraw consent (where consent was the legal basis)
• You object to processing and there are no overriding legitimate grounds
• The information has been unlawfully processed

5.4 Right to Restriction of Processing

You can ask us to suspend processing your personal information in certain situations.

5.5 Right to Data Portability

You can request your personal information in a structured, commonly used, and machine-readable format and transfer it to another controller.

5.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes (including profiling).

5.7 Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing, including profiling. We do not currently use automated decision-making.

5.8 Right to Withdraw Consent

Where we rely on consent to process your data (e.g., marketing communications, analytics cookies), you can withdraw consent at any time.

5.9 How to Exercise Your Rights

To exercise any of these rights, please contact us at info@bowmanbathrooms.co.uk. We'll respond within one month. If your request is complex, we may extend this by two months and will let you know.

Right to Complain: If you're unhappy with how we've handled your personal information, you have the right to complain to the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

6. Marketing Communications

We will only send you marketing communications if you have:

• Opted in to receive them (e.g., via checkbox on contact forms)
• Previously enquired about our services (soft opt-in under PECR)

Every marketing email includes an unsubscribe link. You can also opt out by:

• Emailing us at info@bowmanbathrooms.co.uk
• Calling our showrooms

We'll process your opt-out request within 10 business days. You'll continue to receive essential service communications (e.g., booking confirmations) even if you opt out of marketing.

7. Third Party Services

The Service may contain features or links to web sites and services provided by third parties. Any information you provide on third-party sites or services is provided directly to the operators of such services and is subject to those operators' policies, if any, governing privacy and security, even if accessed through the Service. We are not responsible for the content or privacy and security practices and policies of third-party sites or services to which links or access are provided through the Service. We encourage you to learn about third parties' privacy and security policies before providing them with information.

8. Children's Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you are under 18, please do not use our Site or provide any information.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@bowmanbathrooms.co.uk and we will delete it.

9. Data Security

We follow generally accepted industry standards to protect the information submitted to us, both during transmission and once we receive it. We maintain appropriate administrative, technical and physical safeguards to protect Personal Data against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse, and any other unlawful form of processing of the Personal Data in our possession. This includes, for example, firewalls, password protection and other access and authentication controls. We use SSL technology to encrypt data during transmission through public internet, and we also employ application-layer security features to further anonymize Personal Data.

However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. We cannot ensure or warrant the security of any information you transmit to us or store on the Service, and you do so at your own risk. We also cannot guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards. If you believe your Personal Data has been compromised, please contact us as set forth in the "How to Contact Us" section.

If we learn of a security systems breach, we will inform you and the authorities of the occurrence of the breach in accordance with GDPR law.

10. Data Retention

We only keep your personal information for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements.

Retention periods:

• Enquiries (no project): 2 years from last contact
• Project information: 6 years after project completion (UK tax law requirement)
• Marketing consent: Until withdrawn or 2 years of inactivity
• Website analytics: 26 months (Google Analytics default)
• Cookie consent: Until you clear browser storage or change preference

After these periods, we securely delete or anonymize your information. Some information may be retained in backups for up to 3 months before permanent deletion.

11. International Data Transfers

Your information is primarily stored and processed in the United Kingdom. Some of our service providers may process data outside the UK, including:

• Google Analytics: May process data in the USA and EEA countries

Where we transfer data outside the UK, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the UK authorities
• The recipient is in a country with adequacy regulations from the UK
• The recipient has appropriate certifications (e.g., EU-US Data Privacy Framework)

12. Changes to This Policy

Please revisit this page periodically to stay aware of any changes to this Policy, which we may update from time to time. If we modify the Policy, we will make it available through the Service, and indicate the date of the latest revision, and will comply with applicable law. Your continued use of the Service after the revised Policy has become effective indicates that you have read, understood and agreed to the current version of the Policy.

13. How to Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or have concerns about how we handle your personal information, please contact us:

We aim to respond to all enquiries within one month. For complex requests, we may extend this by two months and will let you know if this is necessary.