Privacy Policy
LBJ Therapy Last updated: 20/09/2026
1. Who We Are
Leanne Bogen-Johnston is a BACP registered psychotherapeutic counsellor based at 60-162 Church Rd, Brighton and Hove, Hove BN3 2DL. I am the data controller for the personal information you share with me.
Contact details:
Email: lbjtherapies@gmail.com
Phone: 07957000881
Postal address: 27 Goldstone Road, Hove, BN3 3RN
ICO registration number: ZC021651
Data Protection Officer or nominated contact for data queries: Leanne Bogen-Johnston
2. What Information I Collect
In the course of providing counselling services, I may collect:
Information you provide directly:
Contact details (name, address, phone number, email)
Date of birth • GP details and relevant medical/health history
Emergency contact details
Information shared during assessment and in sessions, including sensitive personal
information about your mental health, relationships, family, past experiences, and wellbeing
• Details you provide via intake forms, questionnaires, or outcome measures (e.g. CORE-10, PHQ-9)
Information generated during our work together:
Session notes and clinical records
Records of appointments, attendance, and correspondence
Payment and invoicing records
Notes from clinical supervision (anonymised or pseudonymised where possible)
3. Special Category Data
Much of the information you share with me — particularly about your mental and physical health — is classed as “special category data” under Article 9 of the UK GDPR/GDPR, which requires a higher level of protection.
Legal basis for processing special category data, I rely on one or more of the following:
Explicit consent (Article 9(2)(a)) — given when you agree to enter counselling with me and sign the therapy contract
Provision of health or social care treatment (Article 9(2)(h)) — as a professional bound by BACP ethical framework and duty of confidentiality
Legal basis for processing your personal data generally, I rely on:
Contract (Article 6(1)(b)) — processing necessary to deliver the counselling service you’ve engaged me for
Legitimate interests (Article 6(1)(f)) — for administrative purposes such as invoicing, appointment reminders, and record-keeping
Legal obligation (Article 6(1)(c)) — where I’m required to disclose information by law (see Section 5)
4. How I Use Your Information
I use your information to:
Provide, plan, and review your counselling
Maintain accurate clinical records, as required by my professional body's code of ethics
Communicate with you about appointments
Process payments
Meet legal, regulatory, and insurance obligations
Consult (in anonymised or pseudonymised form wherever possible) with my clinical supervisor, to ensure safe and effective practice
I will never use your information for marketing purposes without your separate, explicit consent.
5. Confidentiality and Its Limits
Everything you share with me is confidential. This confidentiality is not absolute — I may need to break it, without your consent if necessary, in the following circumstances:
If I believe you or someone else is at serious risk of harm
If disclosure is required by law (e.g. under counter-terrorism legislation, or a court order)
If I am legally required to report certain crimes (e.g. safeguarding concerns involving children or vulnerable adults)
If required by my insurance provider in the event of a claim Where possible and safe to do so, I will discuss this with you before making any disclosure. This is also set out in your therapy contract.
6. Who I Share Your Information With
I may share limited information with:
My clinical supervisor — for professional consultation, usually anonymised or pseudonymised
My professional body — BACP, only if required as part of a complaints or fitness-to practise process
My insurer — only in the event of a claim or legal requirement
Relevant authorities — where there’s a safeguarding concern or legal obligation, as outlined above
IT/software providers — e.g. practice management software, email, or booking systems (see Section 8)
I do not sell or share your data for marketing purposes with any third party.
7. How Long I Keep Your Information
I retain client records for 7 years after the end of our work together, in line with BACP’s guidance and my insurance requirements. After this period, records are securely destroyed [confidentially shredded or permanently deleted from digital storage].
8. Where and How Your Information Is Stored
Paper records are kept in a locked safe
Digital records are stored on encrypted, password-protected folders on password protected laptop. I take appropriate technical and organisational measures to protect your data against unauthorised access, loss, or damage.
9. Your Rights
Under UK GDPR/GDPR, you have the right to:
Access — request a copy of the personal data I hold about you
Rectification — ask me to correct inaccurate or incomplete data
Erasure — ask me to delete your data, though this may be limited by my professional/legal obligation to retain clinical records
Restrict processing — ask me to limit how I use your data in certain circumstances
Object — object to processing based on legitimate interests
Data portability — request your data in a portable format, where applicable
Withdraw consent — where processing is based on consent, at any time (this won’t affect the lawfulness of processing before withdrawal)
To exercise any of these rights, contact me at lbjtherapies@gmail.com. I will respond within one month, as required by law.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or by calling 0303 123 1113, if you believe your data has been mishandled.
10. Changes to This Policy
I may update this privacy policy from time to time. The latest version will always be available on my website or on request and I'll let you know of any significant changes.
11. Contact
If you have questions about this policy or how your data is handled, please contact:
Leanne Bogen-Johnston
07957000881