Privacy Policy
Last updated: June 2026 · London Cognitive Therapy Centre
London Cognitive Therapy Centre ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
London Cognitive Therapy Centre is a private psychological therapy practice based at Canonbury Yard, 89 Shepperton Road, Islington, London N1 3DF. We are registered with the Information Commissioner's Office (ICO) as a data controller.
For data protection enquiries, contact us at: enquiries@londoncognitivetherapycentre.co.uk
2. What personal data we collect
We may collect and process the following categories of personal data:
- Contact information — name, email address, telephone number
- Clinical information — details of your presenting difficulties, mental and physical health history, relevant background information shared in the course of assessment and treatment
- Correspondence — emails, messages and any written communication between you and our therapists
- Professional information — for GP referrals and professional supervision enquiries, we may collect your name, practice address and professional registration details
3. How we collect your data
- Directly from you when you contact us by phone, email or via our website
- From referring clinicians (GPs, psychiatrists, other health professionals) with your knowledge and consent
- In the course of assessment and therapy sessions
4. Legal basis for processing
We process your personal data on the following legal bases:
- Legitimate interests — responding to enquiries and providing information about our services
- Contract — providing psychological therapy services you have engaged us for
- Legal obligation — where we are required to process data to comply with our professional regulatory obligations (HCPC, BABCP)
- Vital interests — in exceptional circumstances where there is a serious risk to your safety or that of others
For special category data (health information), we rely on Article 9(2)(h) UK GDPR — processing necessary for the provision of health or social care treatment.
5. How we use your data
- To respond to your enquiry and arrange appointments
- To provide psychological assessment and therapy
- To maintain clinical records as required by our professional bodies
- To communicate with your GP or other health professionals involved in your care (only with your explicit consent)
- To fulfil our legal and regulatory obligations
6. How long we keep your data
Clinical records are retained for a minimum of 7 years following the end of treatment, in line with guidance from the British Psychological Society (BPS) and the Health and Care Professions Council (HCPC). Records relating to minors are retained until the individual reaches the age of 25.
Enquiry emails and contact data from individuals who do not proceed to therapy are deleted within 12 months.
7. Who we share your data with
We do not sell or share your personal data with third parties for marketing purposes. We may share data in the following limited circumstances:
- With your GP or other treating clinicians, with your explicit consent
- Where we are legally required to do so (e.g. court order, safeguarding duty)
- With our professional supervisors, in anonymised or pseudonymised form, as required by our professional obligations
8. Cookies
Our website uses only strictly necessary cookies required for the site to function. We do not use tracking or advertising cookies. The following cookies may be set:
- WordPress session cookies — used for site functionality; expire at the end of your browser session
- LiteSpeed Cache cookies — used to optimise page delivery; contain no personal information
No consent is required for strictly necessary cookies under the UK Privacy and Electronic Communications Regulations (PECR).
9. Your rights
Under UK GDPR you have the following rights:
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to request correction of inaccurate data
- Right to erasure — to request deletion of your data, subject to our legal and regulatory obligations
- Right to restriction — to request that we limit how we use your data
- Right to portability — to receive your data in a structured, machine-readable format
- Right to object — to object to processing based on legitimate interests
To exercise any of these rights, please contact us at the address below. We will respond within one calendar month.
10. How we protect your data
We take the security of your personal data seriously. Clinical records are stored securely with access restricted to your treating clinician. Electronic communications are conducted via encrypted channels wherever possible. We regularly review our data protection practices.
11. Complaints
If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
We would, however, appreciate the opportunity to address your concerns directly before you contact the ICO.