Privacy Policy

Last Updated: September 2026

ButterflyKi LLC d/b/a Lisa Finn Hypnosis & Wellness ("Lisa Finn Hypnosis & Wellness," "we," "us," or "our") respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how we collect, use, store, and disclose personal information when you visit www.lisafinnhypnosis.com; submit a consultation or contact form; communicate with us; participate in a consultation or private hypnosis services; purchase products or services; receive emails or other communications from us; or use REBOOT and other digital programs we may offer (collectively, the "Services").

This Privacy Policy is intended to cover our website, consultation and booking process, private-client services, REBOOT, and other products and services offered by Lisa Finn Hypnosis & Wellness. Different parts of the Services involve different types of information, as described below.

1. INFORMATION WE COLLECT

The information we collect depends on how you interact with us and which Services you use.

Contact and Account Information

We may collect your name, email address, telephone number, mailing address, date of birth, account credentials, and other information you provide when you contact us, create an account, book a consultation, purchase a product or service, or become a private client.

Consultation and Inquiry Information

When you request or book a consultation, we may collect information about the issue or change you are seeking help with, how you heard about us, your responses to follow-up questions, and other information you voluntarily provide before or during the consultation.

Because people sometimes describe their concerns using medical, psychological, or diagnostic terminology, information submitted in connection with a consultation may include sensitive personal information or consumer health data. We collect and use this information for the purpose of evaluating the inquiry, preparing for the consultation, determining whether our services may be appropriate, and referring a prospective client elsewhere when the requested services are outside our scope.

Where required, we obtain affirmative consent before processing sensitive information. For example, our online consultation booking form includes a separate consent regarding information voluntarily submitted through the form.

Private-Client Information

If you become a private hypnosis client, we may collect additional information through client forms, email, written correspondence, consultations, and sessions. This may include:

contact and identifying information;
family or relationship information that is relevant to understanding your personal context;
information about your goals, habits, behaviors, experiences, thoughts, feelings, and concerns;
information concerning prior hypnosis experiences;
history information that may be relevant to determining whether hypnosis is appropriate or whether a modification, referral, or professional clearance may be advisable;
information about spiritual or religious beliefs or preferences when you voluntarily provide that information and it is relevant to the approach or techniques you may be comfortable using;
session notes, communications, forms, and other client records; and
audio or video recordings when a session is recorded.

Some of this information may be considered sensitive personal information or consumer health data under applicable law. We collect it for purposes connected with screening, providing hypnosis services, understanding your preferences and goals, maintaining the client relationship and confidential client record, and meeting applicable legal or professional obligations.

Lisa Finn Hypnosis & Wellness does not provide medical or mental health diagnosis or treatment. Information collected from private clients is used within the scope of the hypnosis and educational services we provide and is not used to diagnose or treat medical or mental health conditions.

REBOOT and Digital Program Information

When you use REBOOT or another digital program, we may collect information such as your name, email address, account information, purchase information, program access and activity, and information you choose to enter into interactive features.

Within REBOOT, users may choose to enter personal reflections and worksheet responses concerning thoughts, feelings, habits, patterns, goals, experiences, and insights. These responses may be associated with the user's account and stored or processed through the platform used to provide REBOOT.

REBOOT is an educational and personal-development program. It is not intended to collect medical records, diagnoses, treatment information, medication information, protected health information, or other sensitive health information through the REBOOT platform. Users are instructed not to enter this type of information into REBOOT worksheets, comments, messages, account fields, or other interactive features.

REBOOT is hosted using technology provided by Passion.io. Passion.io processes information necessary to provide account access, store user-entered content, track program activity, deliver digital content, provide technical functionality, and operate the platform. Passion.io requires app creators to maintain their own privacy policy and identify Passion.io as a data processor.

If you choose to complete REBOOT worksheets using a Google Doc, journal, notebook, or printed worksheets rather than entering answers into the app, those materials are controlled by you unless you separately choose to send them to us. A Google Doc that you save to your own Google Drive is governed by your relationship with Google and is not stored by us merely because we provided the worksheet template.

Recordings, Transcripts, and AI-Assisted Summaries

Consultations may be recorded and transcribed. At the time of booking, you are asked to choose whether you consent to consultation recording, transcription, and the potential use described below.

If you consent and later become a client, a consultation recording or transcript may be processed using AI-enabled tools to create a confidential summary for our internal use in providing hypnosis services. If you do not consent, your consultation may proceed without AI-assisted summarization.

Private hypnosis sessions may also be audio or video recorded as disclosed in our client paperwork. Any recording made as part of private services becomes part of the confidential client record.

AI-enabled tools may be provided by third-party technology providers. When we use such a tool, information may be processed by that provider in order to provide the requested transcription, summarization, or related functionality. We do not collect, use, or sell personal data for the purpose of training large language models. We use AI-enabled tools for the limited service-support purposes described in this Policy; a provider's own handling of information is also subject to its applicable terms, privacy practices, and account settings.

Payment and Transaction Information

Payments may be processed through third-party payment services, which may include services integrated with Wix or Passion.io and providers such as Stripe, PayPal, Venmo, or other payment processors we use from time to time.

We do not intend to store complete payment-card numbers on our own systems. Payment processors may collect payment information directly and maintain their own privacy and security practices. We may receive transaction information such as your name, email address, product or service purchased, date, amount, payment status, and transaction identifier.

Information Collected Automatically

When you visit our website or use certain digital Services, we and our service providers may automatically collect information such as:

Internet Protocol (IP) address;
browser and device information;
operating system;
general location information derived from an IP address;
pages, lessons, or features viewed;
dates and times of visits;
referring pages or sources;
interactions with emails or digital content; and
cookie, analytics, and similar technology information.

We use this information to operate and secure the Services, understand how they are used, troubleshoot problems, improve functionality, measure marketing effectiveness, and understand how people find us.

2. SENSITIVE PERSONAL INFORMATION AND CONSUMER HEALTH DATA

Certain information that you voluntarily provide may be considered sensitive data under applicable privacy laws. This may include information revealing physical or mental health conditions, diagnoses, disability or treatment, religious beliefs, or other legally protected sensitive information.

We limit collection of sensitive information to information that is reasonably relevant to the purpose for which it is requested. We may collect sensitive information in connection with consultation screening and private-client services because it can help us determine whether our services are appropriate, whether a different approach or referral may be advisable, and how to provide the services requested.

Where consent is required by law, we obtain affirmative consent before processing sensitive information. You may revoke consent by contacting us at Lisa@LisaFinnHypnosis.com. We will stop processing information based on that consent as required by applicable law, subject to information we may lawfully retain for recordkeeping, legal, safety, dispute-resolution, or other permitted purposes.

We do not sell consumer health data. We do not use private-client sensitive information or consumer health data for targeted advertising.

3. HOW WE USE PERSONAL INFORMATION

We may use personal information to:

respond to questions, inquiries, and consultation requests;
schedule and conduct consultations;
evaluate whether our services may be appropriate for a prospective client;
refer an individual to another professional when the requested work is outside our scope;
provide private hypnosis and educational services;
create and manage accounts for digital programs;
provide access to REBOOT and other digital products or programs;
process transactions and maintain transaction records;
communicate about appointments, purchases, programs, accounts, or Services;
provide customer and technical support;
maintain confidential client records;
create internal consultation summaries when the individual has consented to the applicable recording/transcription/AI use;
send newsletters, educational content, announcements, and marketing communications when permitted;
request feedback or conduct surveys;
operate, maintain, secure, and improve our website and Services;
understand website traffic, referral sources, and marketing effectiveness;
detect or prevent fraud, misuse, security incidents, or prohibited activity;
maintain business, accounting, tax, and legal records;
enforce our agreements and policies;
comply with legal obligations; and
protect our rights and the rights and safety of our clients, users, and others.

We may also use aggregated or de-identified information for analytics, service improvement, or business purposes when the information cannot reasonably be used to identify an individual.

4. EMAIL, TELEPHONE, TEXT, AND MARKETING COMMUNICATIONS

We may contact you by email, telephone, text message, or other means in connection with a consultation, booking, purchase, client relationship, account, program, or other Service you requested.

If you subscribe to our mailing list or otherwise consent to marketing communications, we may send information about Lisa Finn Hypnosis & Wellness, REBOOT, educational content, events, programs, offers, or related Services.

You may unsubscribe from marketing emails at any time by using the unsubscribe link in the email or by contacting Lisa@LisaFinnHypnosis.com. Unsubscribing from marketing messages does not prevent us from sending transactional, scheduling, account, program-access, or other administrative communications necessary to provide Services you requested.

5. COOKIES, ANALYTICS, AND ADVERTISING TECHNOLOGIES

Our website and service providers may use cookies, pixels, analytics tools, and similar technologies to operate the website, remember preferences, maintain security, understand website activity, improve user experience, and measure marketing and advertising effectiveness.

We may use analytics or advertising services to understand how visitors find and use our website and to measure the performance of marketing campaigns. We do not provide private-client health information, private-client records, or REBOOT worksheet reflections to advertising platforms for targeted advertising.

Depending on the technology used and applicable law, certain cookie-based advertising activities may be considered targeted advertising. Where required, we provide or rely on available tools that allow users to manage non-essential cookies or advertising preferences.

You may also be able to manage cookies through your browser settings. Disabling certain cookies may affect website functionality.

6. HOW AND WITH WHOM WE SHARE INFORMATION

We do not sell consumer health data. We also do not sell personal information to third parties as a standalone transaction for monetary consideration.

We may use analytics and advertising technologies that involve disclosure of cookie identifiers, device information, IP addresses, or website interaction data to analytics or advertising providers. Depending on the technology used and applicable law, some of these activities may be treated as targeted advertising or as a sale of personal data. Where applicable, we provide or rely on available mechanisms for consumers to exercise required opt-out rights.

We may otherwise disclose personal information to service providers that help us operate our business and provide the Services. The categories of information shared depend on the service being provided.

Website, Booking, and Account Platforms

Providers such as Wix may process contact information, booking information, form responses, technical information, and related account or transaction data in order to host our website, provide forms and booking functionality, send notifications, or support

other website functions.

Digital Program Platforms

Passion.io processes REBOOT account information, program access and activity, and information users choose to enter into REBOOT in order to host and operate the digital program platform.

Video Conferencing, Recording, and Transcription Providers

Providers such as Zoom may process names, contact information, audio, video, transcripts, and meeting information when we use those services for consultations or sessions and enable relevant recording or transcription features.

AI-Enabled Service Providers

When a person has provided the applicable consent, AI-enabled service providers may process consultation recordings or transcripts for the limited purpose of generating an internal summary or assisting with related administrative organization for the services provided.

Payment Processors

Payment processors may receive contact, billing, and payment information necessary to process transactions.

Email and Communication Providers

Email, email-marketing, and communication providers may process names, email addresses, messages, subscription preferences, and communication history in order to deliver communications or provide related functionality.

Analytics and Advertising Providers

Analytics or advertising providers may receive cookie identifiers, device information, IP addresses, website interaction data, and similar technical information when those tools are enabled.

Professional Advisors and Legal Requirements

We may disclose information to attorneys, accountants, consultants, insurers, or other professional advisors when reasonably necessary. We may also disclose information when required or permitted by law, legal process, subpoena, court order, government request, or when reasonably necessary to protect our legal rights or the safety and rights of others.

Business Transfers

If all or part of our business is sold, transferred, merged, reorganized, or otherwise changes ownership, information may be transferred as part of that transaction as permitted by law.

7. PRIVATE-CLIENT CONFIDENTIALITY

Client confidentiality is important to Lisa Finn Hypnosis & Wellness. Private-client records are handled as confidential records and are not released to another person or organization without authorization except as permitted or required by law.

Private-client information may be disclosed when required by legal process or applicable law, or in other circumstances in which disclosure is legally permitted or required. Additional confidentiality information may be included in the client documents provided in connection with private services.

8. DATA STORAGE AND RETENTION

Personal information may be maintained in paper records, local electronic storage, email systems, website and booking platforms, digital-program platforms, payment systems, and other service-provider systems used to operate our business.

Private-client records may include paper forms, electronic communications, notes, recordings, transcripts, and other records. Some private-client electronic records and recordings may be maintained on local or external storage under our control. Communications sent through email are also processed and stored by the applicable email service provider.

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including providing Services, maintaining appropriate client and business records, meeting contractual obligations, resolving disputes, protecting legal rights, and complying with applicable accounting, tax, legal, or regulatory requirements. Retention periods may vary based on the type of record and the circumstances.

When information is no longer reasonably necessary, we may delete, anonymize, or securely dispose of it, subject to applicable

legal requirements and technical limitations.

9. DATA SECURITY

We use reasonable administrative, technical, and physical safeguards designed to protect personal information in light of the nature of the information and the way it is maintained.

We also rely on third-party technology providers that maintain their own security measures. No method of electronic transmission or storage can be guaranteed to be completely secure. Accordingly, while we take reasonable steps to protect information, we cannot guarantee absolute security.

10. YOUR PRIVACY RIGHTS

Depending on where you live and applicable law, you may have rights regarding your personal information. Connecticut residents may have rights under the Connecticut Data Privacy Act, including the right to:

confirm whether we process your personal data and access that data;
correct inaccuracies in your personal data;
request deletion of personal data, subject to applicable exceptions;
obtain a portable copy of certain personal data processed by automated means;
opt out of certain processing for targeted advertising, the sale of personal data, or qualifying automated profiling;
revoke consent to processing of sensitive data; and
appeal certain decisions concerning a privacy-rights request.

We do not collect, use, or sell personal data for the purpose of training large language models.

To exercise a privacy right, revoke consent, or submit an appeal, email Lisa@LisaFinnHypnosis.com. Please provide enough information for us to understand the request and reasonably verify your identity. You are not required to create a new account solely to exercise your privacy rights.

We will respond to valid privacy requests within the time required by applicable law. Connecticut law generally requires a response within 45 days, subject to a permitted extension in appropriate circumstances.

If we decline to take action on a Connecticut privacy request, you may appeal by emailing Lisa@LisaFinnHypnosis.com with the subject line "Privacy Appeal." We will respond to the appeal within the period required by applicable law and, if an appeal is denied, provide information about how you may contact the Connecticut Attorney General to submit a complaint.

We will not discriminate against you for exercising privacy rights provided by applicable law.

11. THIRD-PARTY WEBSITES AND SERVICES

Our website, communications, digital programs, or other Services may contain links to third-party websites, applications, platforms, or services that we do not own or control.

This Privacy Policy does not govern those third parties. Their collection and use of information are governed by their own privacy policies and terms. We encourage you to review the privacy practices of third-party services before providing information to them.

12. CHILDREN AND MINORS

Our general website is not directed to children under age 13, and we do not knowingly collect personal information online from children under 13 without appropriate authorization.

REBOOT and digital programs provided through Passion.io are intended for adults age 18 and older.

We may provide private services to minors in appropriate circumstances with parent or legal-guardian involvement and consent

as applicable. Information relating to a minor receiving private services is handled as part of the confidential client record and subject to applicable law and the client documentation used for those services.

13. INTERNATIONAL AND OUT-OF-STATE PROCESSING

Some technology providers we use may process or store information outside Connecticut or outside the United States. When you use our Services, information may therefore be processed in other jurisdictions, subject to the applicable provider's terms, privacy practices, contractual protections, and applicable law.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our Services, business practices, technology providers, or legal obligations.

The most recent month and year in which this Privacy Policy was updated will appear at the top of the policy. If we make a material change that requires additional notice or consent under applicable law, we will provide that notice or obtain consent as required.

15. CONTACT US

If you have questions about this Privacy Policy, would like to exercise a privacy right, revoke consent, or have a concern about how personal information is handled, please contact:

ButterflyKi LLC d/b/a Lisa Finn Hypnosis & Wellness

PO Box 7262

Wilton, CT 06897

Email: Lisa@LisaFinnHypnosis.com