Last updated: 21 August 2026

 

This Privacy Policy explains how Vicci O'Reilly, trading as Vicci O'Reilly Hypnotherapy, collects, uses and protects your personal information when you visit www.viccioreilly.com, book or receive services, or take part in associated memberships, workshops or online communities.

 

Vicci O'Reilly is the data controller for the personal information covered by this policy.

For privacy enquiries, contact office@viccioreilly.com.

 

What information I collect

Depending on how you interact with me, I may collect:

• your name, email address and telephone number;

• booking, payment and purchase information;

• messages sent through email, WhatsApp, forms or the website;

• information you provide through assessments or questionnaires;

• client notes relating to hypnotherapy or emotional wellness services;

• information about your health, wellbeing, relationships or personal experiences where relevant to our work;

• community profile information, posts or comments you choose to share;

• website usage information such as IP address, browser and device information; and

• cookie and analytics information where applicable.

 

I do not receive or store your full debit or credit card details. Online payments are processed through Wix Payments and relevant payment providers.

 
Why I use your information

I use personal information where necessary to:

• respond to enquiries;

• manage bookings and purchases;

• provide hypnotherapy and emotional wellness services;

• communicate with you about your appointments or services;

• maintain appropriate client records;

• administer memberships, workshops and online communities;

• process payments and maintain financial records;

• operate, secure and improve my website and services; and

• comply with legal, tax, insurance or professional obligations.

 

Depending on the purpose, I rely on performance of a contract, legal obligations, legitimate interests or consent as my lawful basis for processing your information.

 
Health and sensitive information

Hypnotherapy and emotional wellness work may involve information about your physical or mental health, emotional wellbeing or personal experiences.

Health information is classed as special category data under UK data protection law.

 

Where I need to process this information to provide services to you, I rely on an appropriate lawful basis and, where required, your explicit consent.

 

You can withdraw consent at any time by contacting office@viccioreilly.com. However, if the information is necessary for me to provide a service safely and appropriately, I may be unable to continue that service.

 
Client notes and confidentiality

Digital client notes are stored on a secure external hard drive and access is restricted.

 

Information shared during individual sessions is treated confidentially. There may be limited circumstances where information needs to be disclosed, for example where:

• there is a serious risk of harm to you or another person;

• disclosure is required by law or court order; or

• information is necessary to establish, exercise or defend a legal claim.

Where appropriate and legally permitted, I will discuss this with you.

Session recordings

Zoom sessions may be recorded only with your permission where a recording is being provided to you following the session.

Recordings are not used for marketing, training, testimonials or social media without separate permission.

Once your recording has been successfully provided to you, I do not keep it as part of your ongoing client record and it is deleted as soon as reasonably practicable.

Services I use

To operate the business and provide services, personal information may be processed through third-party providers including:

• Wix and Wix Payments for the website, bookings, memberships and payments;

• Microsoft 365 and GoDaddy for business email;

• Zoom for online sessions, workshops and events;

• WhatsApp/Meta where you choose to communicate with me through WhatsApp; and

• banking, payment, accounting, IT or professional service providers where necessary.

These providers process information according to their own privacy and security practices.

Some providers may process information outside the UK. Where required, appropriate safeguards are used for international transfers of personal data.

I do not sell your personal information.

Online communities

If you join an online community connected with my services, information you choose to post, including your profile, comments, questions and other contributions, may be visible to other community members.

Please consider this before sharing personal or sensitive information publicly within a community space.

Information shared privately with me as part of individual client work will not be posted within a community without your permission.

Marketing

I may offer email or other electronic marketing in the future.

Where required, marketing will only be sent where you have consented or where another lawful basis for electronic marketing applies.

You can unsubscribe from marketing at any time. This will not prevent you from receiving necessary messages relating to bookings, purchases or services you are currently using.

How long I keep information

I only keep information for as long as reasonably necessary.

Client notes and related professional records may ordinarily be retained for up to seven years after our work together ends, where required for professional, insurance or legal purposes.

Financial records are retained for the period required by UK tax law.

Session recordings are deleted after they have been successfully provided to you.

Other information, such as enquiries or community data, is retained only for as long as reasonably necessary for the purpose for which it was collected.
 
Cookies

The website may use necessary cookies as well as optional analytics or marketing cookies.

Where consent is legally required, non-essential cookies will only be used after you have made your choice through the website's cookie controls.

Your rights

Under UK data protection law, depending on the circumstances, you may have the right to:

• access the personal information I hold about you;

• have inaccurate information corrected;

• ask for information to be deleted;

• restrict or object to certain uses of your information;

• request transfer of certain information;

• withdraw consent where processing relies on consent; and

• object to your information being used for direct marketing.

To exercise your rights, contact office@viccioreilly.com.

I may need to verify your identity before responding to a request.

Age restriction

My services, memberships and online communities are intended for adults aged 18 and over.

I do not knowingly provide these services to or intentionally collect personal information from anyone under 18.

Complaints

If you have concerns about how your information has been handled, please contact me first at office@viccioreilly.com so I can try to resolve the issue.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at www.ico.org.uk.
 
Changes to this policy

I may update this Privacy Policy when my services, systems or legal obligations change.

The latest version will always be available at www.viccioreilly.com.

Last updated: 21 August 2026