Privacy Policy & POPIA
How TinyPulse protects your data and complies with South African data protection regulations.
TinyPulse is operated by Pure Survey (Pty) Ltd. We take data protection seriously and are fully committed to compliance with the Protection of Personal Information Act (POPIA).
Our Commitment to Data Protection
As a survey company, trust is the foundation of our business. We understand that employees will only provide honest feedback if they trust their responses are protected. We take this responsibility seriously.
POPIA Compliance
TinyPulse operates in full compliance with the Protection of Personal Information Act (POPIA), South Africa's data protection legislation. This includes:
- Lawful processing: We only process personal information with proper legal basis
- Purpose limitation: Data is only used for the purposes for which it was collected
- Minimisation: We only collect the minimum data necessary
- Accuracy: We take reasonable steps to ensure data accuracy
- Storage limitation: Data is retained only as long as necessary
- Security safeguards: Appropriate technical and organisational measures protect data
- Data subject rights: We respect and facilitate the rights of data subjects
Information We Collect
Website Visitors
- Standard web analytics data (pages visited, time on site)
- Information you provide through contact forms
- Cookies for site functionality
Survey Respondents
- Employee information provided by your employer (name, email, department)
- Survey responses (linked or anonymous depending on survey configuration)
- Demographic data for reporting purposes
Clients
- Business contact information
- Billing and payment information
- Communication history
Survey Anonymity
For employee pulse surveys, we implement the following anonymity protections:
- Response separation: Survey responses are stored separately from identifying information
- Minimum thresholds: Team-level results only displayed when 5+ responses are received
- No individual identification: Results cannot be traced to individual respondents
- Comment protection: Open-text responses are displayed without timestamps or ordering that could identify respondents
- Clear communication: Employees are informed about what their employer can and cannot see
Data Security
We implement robust security measures to protect your data:
- Data encryption in transit (TLS/SSL) and at rest
- Secure South African data hosting
- Access controls and authentication requirements
- Regular security assessments
- Staff training on data protection
- Incident response procedures
Data Retention
We retain data only as long as necessary for the purposes for which it was collected:
- Survey data: Retained for the duration of the client relationship plus any agreed retention period
- Website analytics: Retained for 26 months
- Contact form submissions: Retained until the enquiry is resolved, then archived
Your Rights
Under POPIA, you have the right to:
- Request access to your personal information
- Request correction of inaccurate information
- Request deletion of your information (subject to legal requirements)
- Object to processing in certain circumstances
- Lodge a complaint with the Information Regulator
Third-Party Services
We use limited third-party services to operate our business:
- Hosting providers: Secure data centres in South Africa
- Email services: For survey delivery and business communication
- Analytics: Website usage analytics (anonymised)
- Form processing: Contact form submissions
All third-party providers are vetted for POPIA compliance and bound by data processing agreements.
Contact Us
For any questions about this privacy policy or to exercise your data protection rights, please contact:
Updates to This Policy
We may update this privacy policy from time to time. Significant changes will be communicated to clients and published on this page.
Last updated: February 2026