Privacy & POPIA
How we protect your data and comply with South African privacy regulations.
Our commitment to privacy
At EngagePulse, privacy isn't just a compliance requirement—it's fundamental to what we do. Employee surveys only work when people trust that their responses are truly anonymous and their data is protected.
This page explains how we collect, use, and protect data for both our clients (the organisations who commission surveys) and survey respondents (the employees who participate).
POPIA compliance
EngagePulse is fully compliant with the Protection of Personal Information Act (POPIA). As both an operator (processing data on behalf of clients) and responsible party (for our own business data), we take the following measures:
- We process personal information only for legitimate, specified purposes
- We collect only the minimum data necessary for each survey
- We implement appropriate security safeguards to protect data
- We retain data only for as long as necessary
- We enable data subjects to access and correct their information
Survey respondent privacy
For employees completing surveys, we take anonymity seriously:
What we collect
- Survey responses (ratings and open-ended comments)
- Demographic information provided by employers (e.g., department, location, tenure band)
- Basic technical information (browser type, completion time) for quality purposes
What we don't collect
- IP addresses or device identifiers
- Location data
- Cookies or tracking information
How anonymity works
- Minimum thresholds: We don't display results for any group with fewer than 5 respondents (configurable up to 10)
- No individual identification: Responses cannot be traced back to individuals, even by us
- Comment protection: We review open-ended comments to remove identifying information before sharing with clients
- Secure transmission: All data is encrypted in transit and at rest
Client data
For our client organisations, we collect and process:
- Contact information for project coordination
- Employee data necessary for survey administration (email addresses, demographic classifications)
- Survey results and analytics
We act as an operator under POPIA, processing this data on your behalf according to your instructions and our service agreement.
Data security
We implement industry-standard security measures:
- 256-bit SSL/TLS encryption for all data transmission
- Encrypted data storage with access controls
- Regular security audits and penetration testing
- Staff training on data protection and handling
- Secure South African-based data hosting
Data retention
We retain survey data for the duration of our client relationship plus a reasonable period to support year-over-year comparisons (typically 5 years). Clients can request earlier deletion of their data.
Personal contact data (email addresses used for survey invitations) is deleted within 90 days of survey completion unless needed for follow-up surveys.
Your rights
Under POPIA, you have the right to:
- Access your personal information
- Request correction of inaccurate information
- Request deletion of your information
- Object to the processing of your information
Note that for survey respondents, the anonymous nature of our surveys means we cannot identify or retrieve individual responses.
Contact us
For privacy-related queries or to exercise your rights:
Information Officer: info@puresurvey.co.za
Phone: 021 788 6856
We aim to respond to all privacy requests within 30 days.
Last updated: February 2026
Back to Home