1. Scope and application
This Privacy Policy (“Policy”) describes how Our Life’s Work (“we,” “us,” or “our”), a design and technology studio based in West Hollywood, California, collects, uses, retains, and discloses personal information in connection with our marketing website, business communications, newsletter, client engagements, and client portals. “Personal information” means information that identifies, relates to, describes, or can reasonably be linked to an identified or identifiable individual, as defined by applicable law.
This Policy applies to information we process for the activities described below. Where we process personal information solely on a client’s behalf and in accordance with that client’s instructions, our processing is also governed by the applicable client agreement. The client is responsible for its own privacy notices and the lawfulness of the instructions it provides. Any more restrictive confidentiality or data protection obligations in our written agreement with a client continue to apply. Nothing in this Policy limits rights or obligations arising under applicable law.
2. Categories and sources of information
Depending on the nature of your interaction with us, we collect or receive the following categories of personal information:
- Contact and business information. Your name, email address, telephone number, organization, professional role, and information included in inquiries, meeting requests, and other communications with us.
- Newsletter information. Your email address, subscription status, and any preferences you provide when subscribing to or managing our updates.
- Client and portal information. Account and contact information, project briefs, files, comments, feedback, correspondence, and other materials supplied by you, your employer, or another organization in connection with an engagement or use of a client portal. Project materials may contain personal information about other individuals.
- Technical and usage information. IP address, browser and device information, page URLs, referring pages, approximate location, access times, site interactions, and performance information processed by our hosting and analytics services. Interactions include navigation, project and article links, booking links, FAQ and carousel controls, and views of website sections. Our custom analytics events do not intentionally include contact details, form entries, or client portal content. Page URLs and referrers may contain information included in a link.
- Protected-project access information. The project password submitted to our server for validation and the authorization information necessary to provide access to a protected case study, including the access cookie described in Section 6.
We obtain this information directly from you; from clients or other organizations that provide it in connection with our work; and automatically through your interaction with our website and the service providers described in this Policy. Please provide information about another person only where you are authorized to do so and have provided any notice required by applicable law.
3. Purposes and legal grounds
We process personal information for the following purposes:
- to respond to inquiries, evaluate prospective engagements, schedule meetings, and manage business relationships;
- to perform and administer client engagements, communicate about project work, provide portal access, and support the internal activities described in Section 5;
- to send newsletters and other commercial communications to subscribers and administer subscription preferences;
- to operate, maintain, secure, evaluate, and improve our website and services, including troubleshooting and preventing unauthorized access or misuse; and
- to maintain appropriate business records, comply with legal obligations, resolve disputes, and establish, exercise, or defend legal claims.
To the extent European Economic Area or United Kingdom data protection law applies, we rely on the legal basis appropriate to the processing: performance of a contract with you, or steps taken at your request before entering into one; our legitimate interests in conducting our business, communicating with business contacts, and operating and improving our services, subject to the required balancing of interests and rights; consent where required; or compliance with a legal obligation. A business relationship with your employer does not, by itself, make you a party to our contract. Disclosures for an AI provider’s independent model training remain subject to Section 5 and any separate legal requirements applicable to that use.
4. Disclosure of personal information
We disclose personal information to providers to the extent needed to operate our website and deliver our services. These include Vercel for website hosting, Sanity for website content management and delivery, Visitors for website analytics, Cal.com for meeting scheduling, and providers supporting email delivery, business communications, security, and client portal operations. A newsletter delivery provider processes subscriber addresses to distribute our updates. Portal providers may process client materials for hosting, storage, security, and transmission.
A recipient’s role and permitted processing depend on the service it provides and the applicable service arrangements, privacy terms, and law. External AI providers may also process information for their own purposes, as expressly described in Section 5.
We may disclose information in accordance with your instructions or a client’s authorized instructions, or where reasonably necessary to comply with applicable law or valid legal process, protect rights and safety, investigate misuse, or establish, exercise, or defend legal claims. We do not provide client portal materials to advertisers or data brokers. We do not disclose client portal materials for another company’s independent commercial purposes except for the AI uses described in Section 5 or a disclosure you or the client specifically authorize.
5. Client materials and artificial intelligence
We may submit client materials, including personal information contained in those materials, to external AI services to support our internal research, drafting, design, prototyping, development, and other activities undertaken in connection with our work. Submissions may include prompts, project files, and related content.
Use for provider model training. Depending on the applicable service terms and account settings, an AI provider may retain and use submitted prompts, files, and resulting outputs to develop, train, or improve third-party AI models. This processing serves the provider’s independent model development purposes in addition to supporting our work. Provider retention and the treatment of submitted material are governed by the applicable terms and settings and remain subject to applicable law.
Contractual and legal restrictions. Our use and disclosure of client materials remain subject to applicable law and the governing client agreement. This Policy does not amend that agreement, authorize processing prohibited by it, or retroactively authorize a new use of information collected under different commitments. Publication of this Policy, use of our website, or submission of materials does not by itself constitute consent where a separate consent or authorization is required.
Requests concerning future AI use of personal information may be submitted using the contact details in Section 12. Where material has already been used to train a model, deletion of the original submission may not remove its influence from the trained model. This technical limitation does not diminish any obligation we or a provider have under applicable law or a binding agreement.
6. Cookies, analytics, and third-party services
Website analytics. We use Visitors in its standard mode, with persistent tracking disabled, and do not use its identity features. This mode does not set analytics cookies or track individuals across other websites. Visitors receives page URLs, referrers, interactions, browser and device details, approximate location, and performance data. According to its published practices, it derives a changing visitor signature from request information and discards IP addresses after processing, apart from temporary abuse-prevention records. It does not send analytics events when a browser enables Global Privacy Control or Do Not Track. Further information is available in the Visitors data policy.
Essential access cookies. A protected case study uses a secure, HTTP-only access cookie limited to that project’s path. The cookie expires within eight hours and is used to maintain authorized access. It is not used for advertising. We do not load Visitors analytics or the Cal.com booking embed on protected case-study pages, including after access is granted.
Meeting scheduling. On other pages, the Cal.com embed script is requested when the page loads and may receive ordinary browser request information. Opening the calendar or submitting a booking results in further processing by Cal.com, including information you provide and any cookies or similar technologies used by its service. We do not forward our page’s query parameters to the booking widget.
External services. Our website includes links to independently operated services, including social platforms and AI assistants. An AI assistant link may transmit a prewritten prompt concerning publicly available information about Our Life’s Work. Information you subsequently provide to that service is subject to its own privacy practices. Third-party services may collect information about your activity across their services or other websites in accordance with those practices. We do not use our marketing website to track your activity across unrelated websites for behavioral advertising. Browser privacy signals do not prevent processing necessary to provide a service you request.
7. Retention of personal information
We retain personal information for the period reasonably necessary for the purposes described in this Policy, taking into account the nature and sensitivity of the information, the duration of our relationship, applicable contractual requirements, legal recordkeeping obligations, and the need to resolve disputes or establish, exercise, or defend legal claims.
Inquiry and meeting records are retained as needed to respond and manage the relationship. Subscriber information is retained while a subscription remains active; after an unsubscribe request, we may retain limited suppression or compliance records to honor that request. Client materials are retained for the engagement and applicable closeout, contractual, and recordkeeping requirements. The protected-project access cookie expires within eight hours.
Visitors states that it retains most analytics records while our account remains active and deletes performance metrics after one year. AI providers retain submissions in accordance with their applicable terms and settings; the model-training considerations in Section 5 may affect the extent to which previously submitted material can be removed.
8. Security and international processing
We maintain administrative and technical safeguards reasonably appropriate to the nature of the information we process. No method of internet transmission or electronic storage is entirely secure. If you become aware of a suspected security issue affecting information provided to us, please notify us using the contact details below.
Our operations are based in the United States. Personal information may be processed in the United States and in other countries where we or our providers operate. Those countries may provide different data protection rights from your country of residence. Where applicable law restricts an international transfer, the transfer remains subject to the safeguards or other lawful transfer conditions required by that law. You may contact us for information about the arrangements relevant to your personal information.
9. Individual rights and choices
Subject to applicable law, you may have the right to request access to personal information and information about its processing; correction of inaccurate information; deletion; a portable copy; restriction of or objection to certain processing; and withdrawal of consent where processing is based on consent. Where provided by applicable law, you may also opt out of a sale or sharing of personal information, targeted advertising, or other specified processing, and appeal a decision concerning your request.
To submit a request, including an objection to future AI use of information about you, email studio@ourlifeswork.com and describe the request and your relationship with us. An authorized agent may act on your behalf where permitted by law. We may request information reasonably necessary to verify identity and authority. We will respond within the period required by applicable law and explain any applicable limitation or ground for declining a request. We will not discriminate against you for exercising a privacy right.
Withdrawal of consent applies prospectively and does not affect the lawfulness of processing undertaken before withdrawal. You may also lodge a complaint with the competent data protection or privacy regulator where that right is available. Where we process information solely on a client’s instructions, we may refer your request to that client and assist as required by our agreement and applicable law.
You may unsubscribe from commercial emails through the link in those messages. An unsubscribe request does not prevent us from sending communications necessary to administer an existing engagement, provide a requested service, or meet a legal obligation. Browser settings may allow you to block cookies or enable privacy signals; blocking an essential cookie may prevent access to a protected case study.
10. Children’s personal information
Our website and services are directed to organizations and adults and are not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, please contact us so that we can investigate and take appropriate action.
11. Changes to this Policy
We may update this Policy to reflect changes in our practices, services, or legal obligations. The revised Policy will be posted on this page with an updated effective date. For a material change, we will provide any additional notice and obtain any consent required by applicable law before applying the change. An amendment does not override a binding client agreement or retroactively authorize a use inconsistent with commitments applicable when information was collected.
12. Contact information
Questions or requests can be sent to studio@ourlifeswork.com or Our Life’s Work, 8605 Santa Monica Blvd PMB 946704, West Hollywood, CA 90069.
