Who we are

This website is operated by Matthew Robinson trading as Combat Hypnosis, a clinical hypnotherapy practice based in Norwich, United Kingdom. Matthew Robinson is the data controller for all personal data collected through this website.

Contact: hello@combathypnosis.com · 07495 990750 · Norwich, Norfolk, UK

What data we collect

We may collect the following categories of personal data:

Contact information — name, email address, phone number, provided when you contact us or submit an enquiry
Booking information — appointment details collected via Calendly when you book a consultation or session
Health information — information about your health, wellbeing or reasons for seeking hypnotherapy, shared voluntarily during consultation
Communications — messages sent via email, contact forms or WhatsApp
Usage data — pages visited, browser type, approximate location and device information, collected automatically via Google Analytics 4

Health information is classified as special category data under UK GDPR and is handled with additional safeguards.

How we use your data

We use personal data for the following purposes:

To respond to your enquiries and provide hypnotherapy services
To manage bookings and appointments
To maintain client records as required by our professional obligations
To send appointment reminders and follow-up communications (with your consent)
To improve this website and understand how visitors use it (analytics)
To comply with legal and professional regulatory obligations

Legal basis for processing

Contract — processing necessary to deliver services you have requested
Legitimate interests — website analytics and improving our service
Consent — marketing communications; use of non-essential cookies
Legal obligation — maintaining records as required by GHR, NCH and CNHC registration
Vital interests / explicit consent — where special category health data is processed

Third parties we use

We share data with the following trusted processors:

Calendly — appointment scheduling. Your booking data is processed under Calendly's privacy policy. Calendly is a US-based company with EU-US Data Privacy Framework certification.
Google Analytics 4 — website analytics. Usage data is anonymised where possible. You may opt out via your browser settings or a cookie opt-out tool.
Formspree — contact form processing. Message data is transmitted and stored temporarily on Formspree's servers.
WhatsApp (Meta) — if you contact us via WhatsApp, your messages are processed under Meta's privacy policy.

We do not sell your personal data to any third party.

How long we keep your data

Client session records — retained for 7 years from the last appointment, in accordance with professional practice guidelines
Enquiry and contact data — retained for 12 months, or until you request deletion
Analytics data — retained for 14 months within Google Analytics, then automatically deleted

Your rights

Under UK GDPR you have the right to:

Access — request a copy of the personal data we hold about you
Rectification — ask us to correct inaccurate data
Erasure — request deletion of your data (subject to legal retention requirements)
Restriction — ask us to limit how we use your data
Portability — receive your data in a portable format
Object — object to processing based on legitimate interests
Withdraw consent — at any time, without affecting prior processing

To exercise any right, contact us at hello@combathypnosis.com. We will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. All data transmissions via this website use HTTPS encryption. Session records are stored securely and access is restricted to Matthew Robinson.

Changes to this policy

We may update this privacy policy from time to time. Material changes will be noted on this page with an updated date. Continued use of this website following any changes constitutes acceptance of the updated policy.

Privacy Policy