Scroll down to read my privacy and social media policies
This policy sets out how Jo Pang collects and processes client’s personal data. Jo is a Registered Controller with the Guernsey Office of the Data Protection Agency, number 61969.
Jo Pang provides private counselling, psychotherapy, supervision and training to individuals and organisations. Agreements are usually between Jo and the individual client or supervisee. On occasion, a third party is involved for example, when a health care company or organisation are funding the therapy or supervision.
How data is gathered
There are various ways that clients make enquiries with Jo. You may provide her with information by emailing directly or via the website www.jopangtherapy.com or via counselling and therapy directories (BACP, Psychology Today, The Counselling Directory), or by telephone to request further information about her services. Initial enquiries often contain some personal information such as names, emails and phone numbers. Other data is collected during completion of the Therapy Agreement, in initial meetings and following each therapy or supervision session. Data is processed for the proper and necessary administration of the above service on the basis of consent.
The type of information gathered includes clients’ name, address, date of birth, phone number, email address, GP name and address, emergency contact details (where relevant). Brief electronic session notes are kept following each appointment. Emails and text messages from clients are also processed on a PIN protected work phone or password protected computer. Jo Pang’s website is hosted by WIX, this means that information submitted this way will be shared with ECC&T via the Wix tools. More information about why and how Wix process users-of-users information can be found at https://www.wix.com/about/privacy Any messages sent via the website will be deleted from WIX as soon as Jo has responded from her email account. Should it be necessary to send highly sensitive information via email, this will be done either via Protonmail or be encrypted/protected by another suitable means.
Data storage, retention & disposal
Jo Pang stores all data in encrypted secure cloud-based practice management software called Power Diary; any completed paperwork is scanned then shredded and online forms are saved directly to this software. Online therapy is conducted using the securely encrypted telehealth portal in Power Diary. Other secure platforms such as Zoom (compliant with the EU-US Privacy Shield Agreement) can be considered when broadband requirements are not met for Power Diary. Zoom has an option to record video calls but Jo Pang will never use this function during client meetings. Invoicing and card payments are administered through Power Diary. Payment details are processed via either PayPal, Stripe or Jo Pang’s business bank account. All steps are taken that are reasonably necessary to ensure that client data is treated securely and in accordance with this policy.
Client records are held for 6 years following the termination of therapy or supervision. This is in line with Common Law practices and indemnity insurance purposes after which time data is securely deleted. Should you make an enquiry by email and/or phone consultation to Jo Pang but do not go on to sign an agreement for services, your data will be securely deleted after 3 months.
Third party sharing
Client data is not shared with third parties without explicit prior consent. For example, if Jo Pang is requested to provide information to an insurance provider or GP. Sometimes specific information will be shared with private health care providers i.e when clients access therapy via an employee assistance scheme. The details of such an arrangement will be written in the relevant client agreement and consent requested. Jo discusses her client work in an anonymous fashion with a professional supervisor who is also subject to GDPR.
In the event of Jo Pang’s incapacity or death, clients’ personal contact information will be disclosed to the clinical executor of my clinical will in order for them to notify you and if necessary, to securely destroy your data. Personal information may also be disclosed if Jo Pang is under a legal duty to share data for example, if subpoenaed to court or as a legal requirement such as safeguarding children or vulnerable adults, terrorism or money laundering.
Agreements and rights
All clients and supervisees are required to consent to the bounds of the psychotherapy/supervision agreement and to data collection as per this policy. Clients will be notified of any changes to this policy and have the right to withdraw their consent at any time. Clients also have the right to ask for their data to be deleted or amended. You can ask for a copy of your data in a subject access request and Jo Pang will provide you with this, free of charge, within 30 days.
In the event of the discovery of a data breech, Jo Pang will report the breech to the Guernsey Office of the Data Protection Agency within 72 hours.
Last updated September 2020
Social Media Policy
The following social media policy is in place to protect the client’s privacy and confidentiality as well as the therapeutic relationship.
The therapist does not communicate with her clients over social media, in public forums or review sites. Do not message your therapist via Facebook or LinkedIn. These accounts are not actively monitored nor are they secure. If you wish to contact your therapist between sessions please either telephone, text or email.
Jo Pang has a professional counselling and psychotherapy practice Facebook page. There is no expectation for clients to follow this page which is used to share any helpful information and articles on mental health issues. Clients are welcome to follow this page or even ‘like’ the page but the therapist will not engage in any counselling or help via this page. Clients may comment on this page but do bear in mind that this could compromise your confidentiality that you are seeing Jo as a client or it may impact your therapeutic relationship.
The therapist does not accept friends or contact requests from any client or colleagues on her personal Facebook account. This page is private and for friends and family only. Jo Pang has a professional profile on LinkedIn. You are welcome to view this profiles but please note your therapist will not accept any connect requests from clients or anyone she does not know.
Your therapist will not search for clients via google or any other search engine. They will not follow or comment on current or past client’s blog posting. Either of these activities could jeopardise the therapeutic relationship. If there are things that are online that you wish to share with your therapist then you need to please bring them to a therapy session to talk about.
Google and some advertising sites allow users to add a review of businesses. If you have found your therapist via these sites you are not obliged to rate or endorse them as a client. Your therapist will never ask you to leave a review. You do however have the right to comment on these sites but your therapist will not post responses.
Remember these sites are public forum and any sharing any information could reveal who you are. To protect your privacy it is best to use another email address and pseudonym name. If you do have any issues that are troubling you then it is best you bring it to your sessions as this can be an important part of your therapy. It is not permissable to publicise the content of exchanges with your therapist or share them with a thrid party using social media, personal or public forums.
Your therapist will never share information about clients or their sessions with anyone on any social media platform.
Last updated September 2020