Legal

Privacy Policy

We collect as little as we need, we never sell it, and we tell you plainly what we do with it.

Who we are

Expansion Lab is operated by Work of the Woods LLC, a California limited liability company doing business as Expansion Lab ("Expansion Lab," "we," "us"). This policy covers expansionlab.io (the "Site") and how we handle information you give us through the Site, by email, and in the course of working with us. Our online community and courses live on a separate platform at community.expansionlab.io, which has its own privacy policy that applies once you are inside it.

What we collect

Information you give us directly: your name and email address when you subscribe to our newsletter or write to us, and anything you choose to include in an email or a conversation with us about coaching, the Leadership Lab, enterprise work, or speaking.

Information collected automatically: like most websites, our hosting provider records standard technical data when you visit, such as your IP address, browser type, the pages you view, and the time of your visit. We may use aggregate analytics to understand how the Site is used. We do not use advertising trackers, retargeting pixels, or third-party ad networks on the Site.

Information from working with us: coaching is personal work. Clients often share sensitive information about their lives, health, relationships, and organizations, including in labs that involve breathwork and other physiological practices. Anything you share in a coaching relationship is treated as confidential, is used only to serve you, and is never sold, shared for marketing, or disclosed to your employer or anyone else without your consent, except where the law requires it.

How we use it

• To send you the newsletter you asked for, which you can leave at any time using the unsubscribe link in every email.
• To respond to your inquiry and, if you become a client, to deliver the work we agreed to.
• To run, secure, and improve the Site.
• To meet our legal, accounting, and tax obligations.

We do not sell your personal information, and we do not share it with third parties for their own marketing. We have never done so, and we do not intend to.

Who handles it on our behalf

We use a small number of service providers to run the business. Each one is bound to use your information only to provide its service to us. They are: Kit (email newsletter delivery), Circle (our community and course platform), Stripe (payment processing; we never see or store your full card number), Google Workspace (email and documents), and our website host. We may also disclose information if required by law, to protect the rights or safety of Expansion Lab or others, or as part of a sale or reorganization of the business, in which case this policy would continue to apply to it.

Cookies

The Site itself sets no cookies of its own for tracking. Third-party services we embed or link to, such as Kit, Circle, and Stripe, may set cookies on their own domains under their own policies. You can control cookies through your browser settings.

Your choices and rights

You can unsubscribe from our emails at any time. You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing hello@expansionlab.io. We will respond within 30 days and may need to verify your identity first. We will not treat you differently for exercising these rights.

California residents have additional rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act, including the right to know, the right to delete, the right to correct, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined in California law, so there is nothing to opt out of. We do not respond to browser Do Not Track signals because there is no tracking on the Site to turn off. California's "Shine the Light" law lets residents request information about disclosures to third parties for direct marketing; we make no such disclosures.

If you are in the European Economic Area or the United Kingdom, the legal bases on which we process your information are your consent (for the newsletter), the performance of a contract (for client work), and our legitimate interest in running and securing the Site. You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local supervisory authority. To exercise any of them, email us.

Retention

We keep newsletter data until you unsubscribe. We keep client records for as long as we work together and as long afterward as our legal and tax obligations require, then delete or anonymize them. We keep correspondence for as long as it is useful to serve you.

Security

We use reputable providers, encrypted connections, and access limited to the people who need it. No system is perfectly secure, and we cannot guarantee the security of information sent over the internet, but we take reasonable care with what you entrust to us.

Children

The Site and our services are for adults. We do not knowingly collect information from anyone under 18. If you believe we have, contact us and we will delete it.

Changes

If we change this policy in a material way, we will post the new version here with a new effective date and, where we have your email, tell you. Continued use of the Site after a change means you accept it.