Last updated: August 5, 2024
Author: Pedro da Cunha (Data Protection Officer, DPO)
This Privacy Policy outlines how Pulsely Limited collects, uses, and discloses your information. It applies to all users of our Services, including employees, Admins, and website visitors. "Services" refers to the Diversity and Inclusion data analytics and tools provided by Pulsely, including the Pulsely Platform and Enterprise Solutions.
In this privacy policy, the following definitions are used:
Pulsely Limited, Pulsely, we, us or our means Pulsely Limited registered in the UK with the number 13745452 36, Edith Grove, London, SW10 0NJ United Kingdom.
Customer, Client, Company, or Employer means the person or entity that has contracted with Pulsely to allow you to use Pulsely’s Services. As a user this will generally be your employer, or an identified subgroup (i.e., division, department, etc.) within your employer;
Respondent, User, Employee, or Data Subject means any person who accesses our Services to answer surveys (either wholly or partially), conducted by Customer using the Services;
Admin or Manager means any person who has login credentials to a Customer account to manage that account, create surveys, review and share survey results, or manage the account to enable individual users to provide feedback;
Partner Consultant means an external company/consulting firm/individual partner that serves as an implementation agent of Pulsely’s pipeline of actions.
Visitor means any person who visits our Websites;
Websites means, collectively, www.pulsely.io as well as the other websites that Pulsely operates and that link to this Privacy Policy; and
You or your means either a Client, Admin, Respondent, or Visitor, as applicable.
We process your personal data on one or more of the following types of legal basis:
In this Privacy Policy, unless the context requires a different interpretation:
We collect information relating to you and your use of our Services from a variety of sources. Some of this information is collected directly from you and some of this information is collected from your interaction with our Services, your Company, other individuals at your Company, or from third parties.
How and what information we collect about you will depend on the way that you use our Services, for example, 1) whether you visit the Website, 2) whether your Company chooses to collect data using the Pulsely Platform or 3) through an Enterprise Solution, and 4) whether you are a Respondent or 5) Admin.
Pulsely automatically collects certain information when the platform is used for systems administration purposes, and to ensure the right access is given to users based on the access rights that the account administrator has set. If you use a credit card for billing, our credit card processor may collect information such as the cardholder’s name, billing address, email address, credit card number, expiry date and credit card security code.
Our services are not intended for children under 16, and we do not knowingly process their data.
We do not engage in automated decision-making or profiling that significantly affects you. Any such activities will be disclosed, and explicit consent will be obtained where necessary.
Data protection law in certain jurisdictions differentiates between the “controller” and “processor” of information. For Respondents and Admins, your company, which is Pulsely’s Customer, will be the controller of your personal information and Pulsely will be the processor. For Website visitors, Pulsely will generally be the controller of your personal information.
Information that respondents input to Pulsely is aggregated with information from other respondents, and compared to data from past or future employee responses and/or industry benchmarks. This aggregated information provides managers with views on the levels of inclusion of their employees and sentiment related to their working lives.
Identifiable information isn’t made available to anyone other than the individual who entered their data; no one in the employer organization will have access to personal profile information.
Pulsely may also contact users to gain feedback on how to improve the product, as well as informing our users of new features, versions of the product, or service offerings. We also use this data to handle queries, concerns and complaints.
We may share your data with the following groups of people for the following reasons:
In each case, in accordance with this privacy policy.
We retain data for as long as necessary to fulfill the purposes outlined in this policy. Different categories of data may have different retention periods based on contractual obligations and legal requirements. The standard data retention period for Pulsely data is 5 years. In the event that an organization stops using Pulsely, data will be anonymized no later than 6 months after the expiration of the service period. We will not store personal data for longer than is reasonably necessary to use it in accordance with our contractual agreement with the customer or with our legal rights and obligations.
Pulsely commits to respect the following data subjects’ rights of data subjects. The Respondent has the following rights in relation to their Data:
To exercise any of the rights above, or to withdraw the consent for the processing given, the Respondent should contact us via email here: askpulsely@pulsely.io.
We may transfer your personal data to countries outside the EEA, including the United States, under safeguards such as Standard Contractual Clauses approved by the European Commission.
For Services provided via our Pulsely Platform or Website, our standard third-party subprocessors include:
For Services provided via our Pulsely Platform or Website, our standard third-party subprocessors include:
Appropriate technical and organizational measures are in place to mitigate against accidental, unauthorized or unlawful loss, destruction, alteration, disclosure or access to Personal Data. We have aligned our data security efforts with the ISO 27001 requirements. This family of standards help us manage the Data and keep it secure.
Measures implemented by Pulsely include:
In the event of a data breach, Pulsely will notify affected data subjects and relevant authorities within 72 hours, as required by law. We will provide information on the nature of the breach, affected data, and steps taken to mitigate the impact.
If the Users suspect any misuse, loss or authorized access to the Data, the User should immediately contact us via this email address: askpulsely@pulsely.io
The links on Pulsely’s website or in the App may lead to other websites managed by third parties. Pulsely is not responsible, does not approve or in any way supports or subscribes to the content of these websites. Pulsely is not responsible for damages resulting from viruses that may infect the User’s device or network, or other assets, due to access to third party websites. This privacy statement is only applicable to information collected on Pulsely’s website or in the App.
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our website and, where feasible, via email. This policy is reviewed annually.
These additions and clarifications can help ensure that Pulsely's privacy policy is robust, clear, and compliant with relevant data protection regulations.
Pulsely Limited
36 Edith Grove, London, SW10 0NJ, United Kingdom
If you have any questions about this article, please contact Pulsely Support at askpulsely@pulsely.io.