‍Effective Date: September 24, 2026
Last Updated: September 24, 2026

BMLA (“BMLA,” “we,” “us,” or “our”) is a landscape architecture firm located at 310 North Joy Street, Corona, California 92879. This Privacy Policy explains how we collect, use, disclose, and protect personal information through our website at bmla.net (the “Site”), and describes the cookies and similar technologies the Site uses.

By using the Site, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Site.

1. Scope of This Policy

This Policy covers information collected through the Site. It does not cover:

• Information collected offline, such as during in-person meetings, phone calls, or fax correspondence, except where that information is later combined with Site data.
• Information you provide directly to a client, consultant, contractor, public agency, or other third party in connection with a project.
• The privacy practices of third-party websites we link to, including Facebook, Instagram, LinkedIn, and Google Maps. Those sites are governed by their own privacy policies.

2. Information We Collect

2.1 Information You Provide to Us

The Site collects personal information only when you choose to give it to us. Specifically:

Contact form. Our Contact page includes a form that asks for your name, email address, and your message. We use this information solely to respond to your inquiry and to follow up about potential or ongoing project work.

Career inquiries. If you contact us about employment opportunities, you may send us your name, contact details, resume, portfolio, work history, and any other information you choose to include. We use this information to evaluate your candidacy.

Direct correspondence. If you email, call, or fax us using the contact details published on the Site, we will have whatever information you choose to share.

You are not required to provide any personal information to browse the Site, view our portfolio, or download our Statements of Qualifications (SOQs).

2.2 Information Collected Automatically

When you visit the Site, certain information is collected automatically by our hosting platform and analytics tools:

• IP address (which may be truncated or anonymized by our analytics provider)
• Browser type and version, operating system, and device type
• Screen resolution and general device characteristics
• Referring website or source that brought you to the Site
• Pages viewed, time spent on pages, scroll depth, and links clicked
• Approximate geographic location inferred from IP address (typically city or region level)
• Date and time of your visit
• SOQ PDF downloads and other file requests

2.3 Information We Do Not Intentionally Collect

We do not request, and the Site is not designed to collect:

• Social Security numbers, driver’s license numbers, or government identifiers
• Financial account, credit card, or payment card information
• Health information or biometric data
• Precise GPS location
• Information from children under 13 (see Section 10)

Please do not submit sensitive information of this kind through the Site’s contact form.

3. How We Use Information

We use the information described above for the following purposes:

• Responding to inquiries — replying to contact form submissions, scheduling consultations, and discussing potential commercial, high-density, master plan, public works, recreation, or residential projects.
• Providing services — communicating with clients, agencies, and project teams about work in progress.
• Recruiting — evaluating candidates who express interest in joining our design studio.
• Site operation and security — hosting the Site, delivering content and fonts, preventing abuse, and diagnosing technical problems.
• Analytics and improvement — understanding which portfolio sections and pages are most useful, how visitors find us, and how to improve the Site.
• Legal compliance — meeting recordkeeping, professional licensing, contractual, and legal obligations, and establishing or defending legal claims.

We do not sell your personal information. We do not share your personal information with third parties for cross-context behavioral advertising. We do not use the Site’s contact form data to send marketing emails unless you separately ask us to.

4. Legal Bases for Processing (EEA / UK Visitors)

If you are located in the European Economic Area or the United Kingdom, we process personal information on the following legal bases:

• Consent — for non-essential cookies and analytics, and for any optional communications you request. You may withdraw consent at any time.
• Legitimate interests — for operating and securing the Site, responding to business inquiries, and understanding Site usage, balanced against your rights and expectations.
• Contract — where processing is necessary to take steps at your request before entering into, or to perform, an agreement with you.
• Legal obligation — where we must retain or disclose information to comply with applicable law.

5. How We Share Information

We share personal information only in the following circumstances:

Service providers. We use third-party vendors who process data on our behalf, including:

• Webflow, Inc. — website hosting, content delivery, and contact form processing
• Google LLC — website analytics (Google Analytics) and web font delivery
• Adobe Inc. — web font delivery (Adobe Fonts / Typekit)
• Content delivery networks — jsDelivr and Amazon CloudFront, which deliver scripts and libraries used for Site animation and functionality
• Email and productivity providers — used to receive and respond to your messages

These providers are authorized to use your information only to perform services for us.

Professional advisors. Attorneys, accountants, insurers, and similar advisors, under obligations of confidentiality.

Legal and safety. When we reasonably believe disclosure is required by law, subpoena, court order, or governmental request, or is necessary to protect the rights, property, or safety of BMLA, our clients, or the public.

Business transfers. In connection with a merger, acquisition, reorganization, or sale of all or part of our business, subject to this Policy’s continued application to the transferred information.

We do not share your personal information with data brokers, advertising networks, or unaffiliated marketers.

6. Cookie Policy

6.1 What Cookies Are

Cookies are small text files placed on your device when you visit a website. They allow a site to recognize your browser, remember your preferences, and understand how the site is used. Similar technologies — including pixels, web beacons, local storage, and software development kits — perform comparable functions. In this Policy, “cookies” refers to all of these.

Cookies may be:

• First-party — set by bmla.net itself, or third-party — set by another domain, such as Google.
• Session — deleted when you close your browser, or persistent — remaining on your device until they expire or you delete them.

6.2 Categories of Cookies Used on This Site

Strictly Necessary Cookies. These are required for the Site to function and cannot be switched off through our Site. They are set by our hosting platform, Webflow, and support core functions such as page delivery, load balancing, form submission, and security. They do not store information used for marketing.

Analytics and Performance Cookies. These help us understand how visitors use the Site — which pages and portfolio categories are viewed, how visitors arrive, and where they encounter difficulty. We use Google Analytics for this purpose. The data is aggregated and used to improve the Site’s content and structure.

Functional Cookies. These support enhanced features and appearance, including the delivery of typefaces from Adobe Fonts and Google Fonts, and the loading of animation libraries. Some font and CDN providers may set cookies or log requests when their resources load.

Advertising / Targeting Cookies. The Site does not use advertising or targeting cookies. We do not run retargeting pixels, advertising networks, or social media tracking pixels on this Site.

6.3 Specific Cookies in Use

The following cookies were observed on the Site. Names, purposes, and durations are set by the providers and may change without notice.

• _ga — set by Google Analytics. Analytics cookie used to distinguish unique visitors. Expires after 2 years.
• _ga_DVB85KZ8WG — set by Google Analytics 4. Analytics cookie that maintains session state for our analytics property. Expires after 2 years.
• _gid — set by Google Analytics. Analytics cookie used to distinguish unique visitors. Expires after 24 hours.
• _gat_gtag_UA_98004733_1 — set by Google Analytics. Analytics cookie that throttles the rate of data requests. Expires after 1 minute.
• Webflow platform cookies — set by Webflow, our hosting provider. Strictly necessary cookies supporting site hosting, delivery, and form handling. Expire between the end of your browsing session and 1 year.

Third-party resources loaded by the Site — including Adobe Fonts (use.typekit.net), Google Fonts, jsDelivr, and Amazon CloudFront — receive your IP address and browser information as a technical necessity of delivering those files, and may log that information under their own policies.

6.4 How to Control Cookies

Browser settings. Most browsers let you view, block, and delete cookies. Instructions are available in the help documentation for Google Chrome, Safari, Microsoft Edge, and Mozilla Firefox. Blocking all cookies may cause parts of the Site to function incorrectly.

Google Analytics opt-out. You can prevent Google Analytics from using your data across all websites by installing the Google Analytics Opt-out Browser Add-on.

Do Not Track and Global Privacy Control. The Site does not currently respond to browser “Do Not Track” signals, because no uniform industry standard for interpreting them exists. We do honor the Global Privacy Control (GPC) signal as a valid opt-out of sale and sharing where applicable law requires it — noting that we do not sell or share personal information in any event.

Mobile devices. Your device settings may offer additional controls for limiting ad tracking or resetting advertising identifiers.

7. Data Retention

We keep personal information only as long as needed for the purposes described in this Policy:

• Contact form submissions and correspondence — retained while we evaluate and respond to your inquiry, and thereafter for our business records, typically up to three years from last contact, unless a project relationship extends that period.
• Client and project records — retained for the duration of the engagement and afterward as required by our professional, contractual, insurance, and legal obligations, which for landscape architecture and public works projects may extend for ten years or more.
• Employment inquiries — generally retained for up to two years, unless you ask us to delete them sooner.
• Analytics data — retained according to Google Analytics’ configured retention period, after which it is deleted or aggregated.

When information is no longer needed, we delete it or de-identify it.

8. Data Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encrypted transmission (HTTPS) across the Site, access controls limiting staff access to business need, and reliance on established hosting and service providers who maintain their own security programs.

No method of transmission or storage over the internet is completely secure. We cannot guarantee absolute security, and you transmit information to us at your own risk. Please do not send confidential project documents, contract terms, or sensitive personal information through the Site’s contact form; contact us by phone first so we can arrange a secure channel.

9. Your Privacy Rights

9.1 All Visitors

You may contact us at any time to request access to the personal information we hold about you, ask us to correct inaccurate information, ask us to delete information we no longer need, or ask us to stop contacting you. We will respond within a reasonable period.

9.2 California Residents

California residents have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), to the extent it applies to us. These include the right to:

• Know what categories and specific pieces of personal information we have collected, the sources, our purposes, and the categories of third parties with whom we share it
• Delete personal information we collected from you, subject to exceptions
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information — we do not sell or share personal information, so there is nothing to opt out of
• Limit the use of sensitive personal information — we do not collect sensitive personal information through the Site
• Non-discrimination — we will not deny you services, charge different prices, or provide a different quality of service because you exercised a privacy right

Categories of personal information collected in the past 12 months: identifiers (name, email address, IP address); internet or network activity (browsing and interaction with the Site); and, for job applicants, professional or employment-related information. We disclosed identifiers and internet activity information to the service providers listed in Section 5 for business purposes only.

To exercise these rights, contact us using the information in Section 13. We will verify your request by asking you to confirm details we already hold, such as the email address used to contact us. You may use an authorized agent, who must provide written proof of authorization.

9.3 EEA, UK, and Other Jurisdictions

If you are located in the EEA or UK, you have rights to access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests, as well as the right to withdraw consent and to lodge a complaint with your local supervisory authority.

Residents of other U.S. states with comprehensive privacy laws — including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and Montana — may have comparable rights. We honor these requests where the applicable law requires it.

10. Children’s Privacy

The Site is directed to design professionals, property owners, developers, and public agencies. It is not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 where a higher age applies). If you believe a child has provided us personal information, contact us and we will delete it.

11. International Visitors

The Site is operated in the United States and our service providers store data primarily in the United States. If you access the Site from outside the U.S., you understand that your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country. Where required, we rely on appropriate transfer mechanisms such as the European Commission’s Standard Contractual Clauses.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the “Last Updated” date at the top of this page. Material changes will be noted prominently on the Site. Your continued use of the Site after an update constitutes acceptance of the revised Policy.

13. Contact Us

Questions, requests, or concerns about this Privacy Policy or our handling of personal information:

BMLA
310 North Joy Street
Corona, California 92879

Phone: 951.737.1124
Fax: 951.737.6551

Please write “Privacy Request” in the subject line so we can route your message promptly.

‍