Privacy policy

Last updated: 2 September 2026

Who we are

H2 Clinic is a family-run molecular hydrogen therapy clinic at 26 Jeffords Close, Norton Fitzwarren, Somerset TA2 6FH. We are the data controller for the information described below, which means we decide how and why it is used.

You can reach us at contact@h2clinic.co.uk or on 07361 600629.

What this website collects

This site carries no advertising pixels and sets no cookies at all until you interact with it. An essential cookie is set only when you sign in, to keep you signed in.

Analytics is optional and off by default. A banner asks whether we may count page views; if you say yes, we record which pages are visited and where visitors came from — without your address, name or any identifier — and, if we have enabled Google Analytics, Google sets its own cookies to help us understand visits. If you say no, nothing is counted and we do not ask again on that device. You can change your mind by clearing this site’s cookies in your browser.

If you use the booking form to pay online, or the “Ask for a callback” form to request a call, we do collect what you type into those two forms — details below.

Our hosting provider keeps standard server logs, which include the address of the computer requesting a page. These are kept for up to 30 days, for security and for finding faults.

When you book and pay online

The booking form on /book takes your name, email address and phone number, and hands your card payment to Stripe, the payment company we use to process online payments. Stripe collects and stores your card details on its own secure systems — we never see or store your card number.

Once Stripe confirms your payment went through, we save a record of your order in our own database: your name, email, what you bought, the amount paid and a payment reference from Stripe. We use this to know what you have paid for, to credit sessions to your account, and to email you a confirmation.

Lawful basis: performance of a contract — we need these details to take payment and provide the sessions you have bought. Stripe processes your payment as our processor, under its own privacy policy, which you can read at stripe.com/gb/privacy.

When you ask for a callback

The “Ask for a callback” form takes your name, phone number, your preferred day and time, and anything you add in the notes. We email this straight to ourselves so we can ring you back — it is not saved in any database or list.

Lawful basis: legitimate interests — you have asked us to call you, and we need these details to do that.

What we collect when you book

When you book by telephone, email or WhatsApp, we take your name, a contact number, and the date and time you have chosen. We need this to hold your appointment, to know who is arriving and when, and to contact you if something changes at our end.

Lawful basis: performance of a contract — you have asked us to provide a session and we cannot do that without these details.

When you get in touch

If you email, ring or message us, we keep what you send so that we can reply and so we have a record of the conversation.

Lawful basis: legitimate interests — responding to someone who has contacted us.

If you tell us something about your health

You do not need to give us any health information to book. If you choose to tell us something — for example that you are pregnant, that the steps at the entrance would be difficult, or that you are under the care of a doctor — we record only what we need in order to look after you safely on the day.

Lawful basis: your explicit consent. You can ask us to delete it at any time, and doing so will not affect your booking.

Paying

You can pay online by card through Stripe when you book on /book, or arrange payment directly with us if you book by phone. Either way, we keep a record of what was paid and when, because tax law requires it, but we never hold your card number ourselves.

Who else sees your information

We do not sell your personal information. We share it only with:

• Stripe — processes card payments made through /book and holds your card details
• Hostinger — hosting for this website, our email and our order database
• Our accountant and HMRC — where we are required to keep or report financial records

Stripe processes some payment data outside the UK, including in the United States. Those transfers are covered by Stripe’s UK-approved safeguards (the UK Addendum to the standard contractual clauses).

How long we keep it

• Booking and order records: for as long as you remain a client, and then for six years from your last visit — the same period tax law sets for the financial records they support
• Financial records: six years, as UK tax law requires
• Enquiries and callback requests that do not lead to a booking: deleted once the conversation has clearly ended

Your rights

Under UK GDPR and the Data Protection Act 2018 you have the right to:

• ask what information we hold about you, and get a copy
• have anything inaccurate corrected
• ask us to delete your information, where we are not required to keep it
• object to how we are using it, or ask us to restrict that use
• withdraw consent at any time, where consent is what we relied on
• ask for your information in a portable format

To use any of these rights, email contact@h2clinic.co.uk. We will respond within one month. There is no charge.

If you are not happy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

Changes to this policy

If we change how we handle your information, we will update this page and change the date at the top. Material changes will be brought to your attention rather than made quietly.