Privacy Policy

Lucid Studio LLC is a growth marketing studio based in California, United States. We are the business responsible for the personal information described here. This policy applies to information collected through the Services and through communications with us. It does not apply to third-party websites or services we link to, which have their own policies.

When we perform services for a client under a written agreement, we may process personal information about that client's customers or website visitors on the client's behalf. In that case we act as a service provider (or processor) to the client, the client's own privacy policy governs that information, and our handling of it is governed by our agreement with the client.

The categories below follow the categories used in the CCPA. We collect only what we need for the purposes in How we use it.

Sensitive personal information. We do not ask for, and ask you not to send us, sensitive personal information such as Social Security, driver's license or passport numbers, financial account credentials, precise geolocation, health information, or information about racial or ethnic origin, religion or sexual orientation. We do not use or disclose sensitive personal information to infer characteristics about you. Client portal passwords are handled by our authentication provider and are never visible to us.

Diagnosis answers. Your answers to our two-minute diagnosis stay in your browser. They are only sent to us if you choose to book a consultation, copy your brief to us, or email it to us.

• Directly from you, when you fill in a form, book a call, email us, or use the client portal.
• Automatically from your browser or device when you use the site.
• From service providers that help us run the Services, such as our scheduling provider when you book a call.
• From publicly available sources, such as a company's own website or public business profiles, when we research a business before a call.
• From a client, when they give us access to their accounts or data so we can do the work they hired us for.

We use personal information for these business purposes:

• To respond to inquiries, schedule and prepare for consultations, and send booking confirmations and reminders.
• To recommend services and prepare proposals, including using the budget, goals and website you share.
• To deliver contracted services, manage client accounts and the client portal, process signatures and approvals, and invoice.
• To review seat requests for The Studio and provide members with access to its materials.
• To review job applications and communicate with applicants.
• To send service-related messages and, where permitted, marketing emails you can opt out of at any time (see Marketing communications).
• To operate, secure, debug and improve the Services, detect and prevent fraud, abuse and security incidents.
• To comply with law, enforce our Terms and Conditions, and establish, exercise or defend legal claims.

We do not use personal information for purposes that are incompatible with the purposes above without telling you first. We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

We disclose personal information only as follows:

• Service providers that process it on our behalf under contracts that limit their use of it, in the categories of: website hosting and infrastructure; database and authentication; scheduling and video meetings; email and productivity software; AI writing and research tools; project management; e-signature and document storage; and accounting and payments. In the past 12 months we have disclosed identifiers, professional or business information, commercial information, and internet or network activity to these categories of service providers for business purposes.
• Professional advisers, such as lawyers and accountants, under duties of confidentiality.
• Legal and safety: where required by law, subpoena or court order, or where we believe disclosure is necessary to protect the rights, property or safety of Lucid Studio, our clients or others.
• Business transfers: in connection with a merger, acquisition, financing or sale of all or part of our business, subject to this policy.
• With your direction or consent, for example when you ask us to introduce you to a partner.

We do not display a client's name, logo or results on the Services without their permission. We may quote reviews that clients have chosen to post publicly about us (for example, on our Google Business Profile), with attribution as published, and will remove a quote on request.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined in the CCPA, and we have not done so in the past 12 months. We do not knowingly sell or share the personal information of consumers under 16. Because we do not sell or share personal information, we do not offer an opt-out link for those activities; if this ever changes, we will update this policy and provide one before doing so.

We keep tracking to a minimum. As of the date above, the site uses:

• Strictly necessary technologies that make the site and client portal work, such as authentication cookies for signed-in clients and a cookie that remembers a Studio seat request.
• Local storage in your browser to remember a display preference. It never leaves your device.
• Server logs kept by our hosting provider (IP address, browser, page requested and time) for security and reliability.

We do not currently use advertising pixels, third-party analytics, session recording, keystroke logging, chat widgets, or any technology that records or intercepts the content of your communications with the site. If we add analytics or advertising technologies, we will update this policy first and, where required by law, ask for your consent. You can block or delete cookies in your browser settings; some parts of the client portal will not work without them.

When you choose to book a consultation, our scheduling page is provided by Calendly and opens in a window on our site. The details you enter on our booking form (name, email, website, budget, the services you want help with and your notes) are passed to Calendly so they arrive with your booking. Calendly, and Google Meet for the video call, process that information under their own privacy policies and may set their own cookies. Links to our social media profiles take you to those platforms, which have their own policies. We are not responsible for the practices of third parties.

We use commercially available AI tools (for example, AI writing and research assistants) to help with our own work, such as drafting, summarising notes, and analysing marketing performance. Information entered into these tools is processed by their providers under the providers' own terms and privacy policies, which may allow them to retain it or use it to improve their services. For that reason we limit what we put into AI tools: we do not enter sensitive personal information, passwords or payment details, and we avoid entering personal information where the task does not require it. A person on our team reviews AI output before it is used, and we do not use AI to make decisions about you that produce legal or similarly significant effects. AI tool providers are among the service providers described in How we disclose it.

We keep personal information only as long as reasonably necessary for the purposes it was collected for, then delete or de-identify it:

• Inquiries and booking details that do not become a client relationship: up to 24 months after our last contact.
• Client records, contracts and invoices: for the length of the engagement and up to 7 years afterward, for tax, accounting and legal purposes.
• Studio seat requests and membership records: while you are a member, and up to 24 months after membership ends.
• Job applications: up to 24 months, unless you ask us to delete them sooner.
• Server and security logs: generally up to 12 months.

We may keep information longer where the law requires it or to resolve disputes and enforce our agreements.

We use reasonable administrative, technical and physical safeguards appropriate to the information we hold, including encryption in transit (HTTPS), access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a security breach affecting your personal information, we will notify you and any required authorities as required by law.

If you are a California resident, you have the following rights under the CCPA, subject to certain exceptions. We extend these rights to all users of the Services regardless of whether the CCPA applies to us.

• Right to know and access the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes, and the categories of third parties to whom we disclosed it.
• Right to delete personal information we collected from you.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of personal information. We do not sell or share personal information (see No sale or sharing).
• Right to limit the use of sensitive personal information. We do not use sensitive personal information for purposes that would trigger this right.
• Right to non-discrimination. We will not deny you services, charge you a different price, or provide a different quality of service because you exercised your rights.

Notice of financial incentive. Membership in The Studio is free. We do not offer any financial incentive in exchange for personal information beyond providing the materials you request.

Shine the Light. California Civil Code Section 1798.83 lets California residents ask for information about personal information disclosed to third parties for their own direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

Minors in California. If you are under 18 and a registered user, you may ask us to remove content you posted publicly. We do not offer any service that publishes user content publicly.

Depending on where you live, you may have similar rights under other U.S. state privacy laws, including rights to access, correct, delete and obtain a copy of your personal information, and to opt out of targeted advertising, sale or certain profiling. We honour these requests on the same terms described here. If we deny your request, you may appeal by replying to our response with the subject line "Privacy appeal"; we will respond within the time required by law, and if you are not satisfied you may contact your state attorney general.

Email carter@lucidstudiollc.com with the subject line "Privacy request" and tell us which right you want to exercise. We will confirm receipt within 10 business days and respond within 45 calendar days. If we need more time (up to a further 45 days), we will tell you why.

To protect you, we will verify your identity by matching information you give us with information we already hold, usually your email address and details of your interaction with us. You may use an authorised agent; we will ask for written, signed permission and may ask you to verify your identity directly. We do not charge for requests unless they are manifestly unfounded or excessive.

We send marketing emails only to people who have given us their email address and, where required, consent. Every marketing email identifies us, includes our contact details, and contains a working unsubscribe link, in line with the federal CAN-SPAM Act. We process unsubscribe requests within 10 business days. You will still receive messages about an active booking, engagement or account. We do not send marketing text messages or make marketing calls using automated technology without your prior express written consent, as required by the Telephone Consumer Protection Act. Booking reminders by text are optional and only sent if you provide your number to our scheduling provider for that purpose.

The Services are intended for adults and businesses, and are not directed to children under 16. We do not knowingly collect personal information from children under 13, consistent with the Children's Online Privacy Protection Act, or sell or share the information of anyone under 16. If you believe a child has given us personal information, email us and we will delete it.

The Services are operated from the United States and intended for U.S. users. If you use them from elsewhere, your information will be transferred to, stored and processed in the United States, where data protection laws may differ from those in your country.

We do not track you across third-party websites, and we do not allow third parties to collect personally identifiable information about your online activities over time and across websites through our Services. Because of this, the site does not change its behaviour in response to browser "Do Not Track" signals. We treat a Global Privacy Control (GPC) signal as a valid request to opt out of the sale or sharing of personal information for that browser; since we do not sell or share personal information, no further action is needed.

We may update this policy as our practices or the law change. The date at the top shows when it was last updated. If we make material changes, we will post the updated policy here and, where appropriate, notify you by email or through the Services before the change takes effect. We review this policy at least once every 12 months.

Lucid Studio LLC, California, United States.
Email: carter@lucidstudiollc.com
Accessibility: if you have a disability and need this policy in another format, email us and we will provide it. See also our Accessibility Statement.