Privacy Notice
Last updated: 22 February 2026
Alenzo Collective B.V. ("we", "us", "our"), trading as Bowie, is committed to protecting your privacy. This Privacy Notice explains how we collect, use, and safeguard your personal data when you use our platform at meetbowie.com, in accordance with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and the Dutch UAVG (Uitvoeringswet Algemene Verordening Gegevensbescherming).
1. Data controller
The data controller responsible for processing your personal data is:
For any privacy-related questions or requests, you can reach us at the email address above.
2. What data we collect
We collect as little data as possible. Here is an overview of the personal data we may process:
Analytics & usage data (via Google Tag Manager)
- IP address (anonymised where possible)
- Browser type, version, and language
- Device type and screen resolution
- Pages visited, time spent, and navigation path
- Referring URL (how you arrived at our site)
- Country and approximate city-level location (derived from IP)
Tool inputs and saved results
When you use our tools while logged in (Rent Auditor, Box 3 Objection, Tax Advisor), the data you enter and the results generated are stored securely in our EU database (Supabase, hosted in Frankfurt) linked to your account. This allows you to access your history and continue where you left off. If you use tools without an account, no data is stored on our servers.
Contact data
If you contact us via email, we process your name, email address, and the content of your message solely to respond to your enquiry.
3. Purposes and legal basis
We process your personal data for the following purposes:
Website analytics
To understand how visitors use our platform, improve user experience, and measure the effectiveness of our tools.
Legitimate interest (Art. 6(1)(f) GDPR) — we have a legitimate interest in understanding and improving our service. You can opt out via your browser settings or our cookie preferences.
Account management
To create and maintain your Bowie account, authenticate you, and provide access to your saved audits, letters, and tax returns.
Performance of a contract (Art. 6(1)(b) GDPR) — necessary to provide the account-based service you have requested.
Providing our tools
To enable the Rent Auditor, Box 3 Objection tool, Tax Advisor, and other features — including saving results and generating AI-powered analysis.
Performance of a contract (Art. 6(1)(b) GDPR) — processing is necessary to deliver the service you have explicitly requested.
AI-powered analysis (Tax Advisor)
To send your tax data to Anthropic's Claude API to generate plain-language explanations, identify deduction opportunities, and produce optimisation suggestions. No AI-generated result constitutes certified tax advice.
Performance of a contract (Art. 6(1)(b) GDPR) — the AI analysis is a core component of the Tax Advisor service you have requested.
4. Cookies and tracking technologies
We use Google Tag Manager (GTM) to manage analytics and marketing tags on our platform. GTM may set the following types of cookies:
Strictly necessary cookies
Essential for the website to function. These do not require consent.
Analytics cookies
Help us understand how visitors interact with our platform (e.g., Google Analytics via GTM). These are loaded only with your consent where required.
Marketing cookies
Used to track visitors across websites for advertising purposes. Currently not in use, but GTM allows us to add these in the future — always with appropriate consent.
You can manage your cookie preferences at any time through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling cookies may affect the functionality of our platform.
5. Third-party processors and data sharing
We share personal data only with the following categories of processors, and only to the extent necessary:
Supabase Inc.
Database hosting, authentication, and file storage for all account data, audit results, saved letters, tax return data, and AI-generated insights.
Data is hosted exclusively in the EU (Frankfurt, Germany — AWS eu-central-1). Supabase is SOC 2 Type 2 certified. We have entered into a Data Processing Agreement (DPA) with Supabase.
Privacy PolicyAnthropic PBC
AI language model processing (Claude API) — used within the Tax Advisor feature to generate explanations, flag deductions, and produce optimisation suggestions based on the tax data you provide.
API requests are processed globally. Anthropic does not use API inputs or outputs to train its models. No data is stored by Anthropic beyond the duration of the API request. We have entered into a Data Processing Agreement (DPA) with Anthropic.
Privacy PolicyWe do not sell, rent, or trade your personal data to any third parties. We do not share data with data brokers or advertisers.
6. International data transfers
Our primary infrastructure is hosted in the European Union (Frankfurt, Germany). Where data is processed outside the EU/EEA (for example, by Google for analytics), we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs) in accordance with Article 46(2)(c) GDPR, and we verify that the recipient provides adequate protection.
7. Data retention
We retain personal data only for as long as necessary for the purposes described in this notice:
Analytics data
Retained for a maximum of 14 months, in line with Google Analytics data retention settings.
Contact enquiries
Retained for up to 12 months after the last correspondence, unless a longer period is required for legal purposes.
Account data
Retained for the duration of your account. Permanently deleted within 30 days of account deletion.
8. Your rights
Under the GDPR, you have the following rights regarding your personal data:
Right of access
You can request a copy of the personal data we hold about you.
Right to rectification
You can request correction of inaccurate or incomplete personal data.
Right to erasure
You can request deletion of your personal data where there is no compelling reason for continued processing.
Right to restriction
You can request that we restrict the processing of your personal data in certain circumstances.
Right to data portability
You can request a copy of your data in a structured, commonly used, machine-readable format.
Right to object
You can object to processing based on legitimate interest. We will cease processing unless we demonstrate compelling legitimate grounds.
Right to withdraw consent
Where processing is based on consent, you can withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, email us at hello@meetbowie.com. We will respond within 30 days. If your request is complex, we may extend this by a further two months, and we will inform you of any such extension.
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):
9. Security measures
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include: HTTPS encryption in transit across our entire platform; encryption at rest for all data stored in our EU database (Supabase, Frankfurt); Row Level Security (RLS) ensuring each user can only access their own data; strict access controls limiting staff access to individual user data; SOC 2 Type 2 certified infrastructure (Supabase); no long-term storage of raw API prompts containing personal data; and regular review of our security practices.
10. Children's privacy
Our platform is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child under 16, please contact us at hello@meetbowie.com and we will promptly delete it.
11. Automated decision-making and AI
Our Rent Auditor and Box 3 tools perform deterministic calculations based on published Dutch legal formulas — these are not AI-driven. Our Tax Advisor feature uses Claude (an AI language model by Anthropic) to generate explanations and deduction suggestions based on the data you provide. This does not constitute automated decision-making with legal effects under Article 22 GDPR: all outputs are informational suggestions you must independently review and verify. Bowie does not file your tax return on your behalf. All AI-generated results are clearly labelled as indicative and do not constitute certified tax or legal advice. You should verify all suggestions with an independent tax professional where appropriate.
12. Changes to this notice
We may update this Privacy Notice from time to time to reflect changes in our practices or applicable law. The updated notice will be posted on this page with a new "Last updated" date. We encourage you to review this page periodically. Material changes will be communicated prominently on our platform where appropriate.