Security and data protection

Protected, private and under your control.

How OnePulse stores and handles your organization’s data, and the personal data of the people who answer.

GDPR compliant

UK GDPR and EU GDPR.

Hosted on AWS

In Ireland.

Encrypted

In transit and at rest.

Never sold

OnePulse does not sell personal data.

Your data

Your data belongs to you.

What happens to the data your organization adds and collects.

Ownership
The response data from your studies and any data you upload belong to you.
Privacy
Your studies and Intelligence Layer are visible only to your organization and the people you authorize.
How we use it
We use your data to provide OnePulse to you. We may also use aggregated, anonymized data to report on and improve OnePulse. It never identifies you or your clients.
Access
Everyone at OnePulse who can access personal data is bound by confidentiality. Access to client data is limited to the staff who need it to support you.
Deletion
When your contract ends, we delete or return your personal data at your written request.
Security

How your data is protected.

Where it is stored, how it is secured and what happens if something goes wrong.

Hosting
OnePulse runs on Amazon Web Services in Ireland.
Encryption
Data is encrypted in transit and at rest.
Payments
Card payments are processed by Braintree. OnePulse never stores full card details.
Incidents
If a personal data breach affects your data, we notify you without undue delay.
Compliance

GDPR compliant.

OnePulse complies with the UK GDPR and the EU GDPR.

Roles
For personal data you add to OnePulse, you are the data controller and OnePulse is your data processor. For the people who answer, OnePulse is the data controller.
International transfers
Personal data leaves the UK or the EEA only with the safeguards data protection law requires, such as standard contractual clauses.
Sub-processors
Every provider that processes personal data for us works under a written agreement with equivalent protections. The list is available on request.
Audits
On request, we provide a report verifying our compliance. Your audit rights are set out in our Terms and conditions.
Company
OnePulse is operated by Startpulsing Limited, registered in England and Wales, company number 07716920.
The people who answer

Respect for the people who answer.

Members of the OnePulse community share their opinions with you. We protect their personal data.

Consent
Sensitive profile data, such as ethnicity or health, is collected only with a member’s explicit consent.
Never sold
OnePulse does not sell personal data.
Their rights
Members can ask for a copy of their data, have it corrected or have it deleted.
Account deletion
When a member deletes their account, their profile information is deleted within 30 days. Their answers are kept in anonymous form.
Documents

Policies and terms

The documents behind everything on this page.

Questions about security, privacy or data quality?

Email us and our team will answer.