Surveyz is committed to complying with the Protection of Personal Information Act, No. 4 of 2013 (POPIA) and its Regulations. This notice explains how we fulfil our obligations under POPIA and how we protect the personal information of our customers, survey respondents, and visitors.
This notice applies to all personal information processed by Surveyz in the course of providing its survey platform services within the Republic of South Africa, and to the processing of personal information of South African data subjects wherever such processing occurs.
Surveyz (Pty) Ltd
Information Officer: Taurique Toffie
Email: privacy@surveyz.co.za
Physical address: South Africa
Registration: Republic of South Africa
Our Information Officer is responsible for ensuring compliance with POPIA across all personal information processing activities.
Surveyz acts as the responsible party when processing personal information about our customers (account holders), including registration details, billing information, and usage data. We determine the purpose and means of this processing.
Surveyz acts as an operator when processing survey response data on behalf of our customers. In this capacity, our customers are the responsible party for the personal information collected through surveys they create. Customers are responsible for ensuring their surveys comply with POPIA, including obtaining appropriate consent from their respondents.
We process respondent data only under documented instructions from our customers and do not use this data for our own purposes.
We process personal information only when we have a lawful ground under POPIA Section 11, including:
We collect personal information only for specific, explicitly defined, and lawful purposes. We will not process personal information in a manner incompatible with the purpose for which it was collected. Our primary processing purposes are:
Under POPIA, you have the following rights regarding your personal information:
To exercise any of these rights, email our Information Officer at privacy@surveyz.co.za. We will respond within 30 days as required by POPIA.
We implement appropriate technical and organisational measures to protect personal information against loss, damage, unauthorised access, disclosure, or destruction. Our measures include:
In the event of a security compromise involving personal information, we will notify the Information Regulator and affected data subjects as required under POPIA Section 22.
Our platform is hosted on Microsoft Azure infrastructure in the South Africa North region (Johannesburg). Some service providers (e.g., authentication services, email delivery) may process data outside South Africa.
Where personal information is transferred outside South Africa, we ensure such transfers comply with POPIA Section 72, including that the receiving country provides an adequate level of protection, or that appropriate safeguards are in place via contractual arrangements.
We retain personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Our retention periods:
You may request deletion of your personal information at any time, subject to any overriding legal retention obligations.
Our Service is not directed at children under the age of 18. We do not knowingly collect personal information from children without verifiable parental or guardian consent. Surveys that target minors must comply with POPIA's special provisions on processing children's personal information (Section 34–35). Account holders creating surveys for minors are responsible for obtaining appropriate consent.
If you have concerns about how we handle your personal information, please contact our Information Officer first:
If you are not satisfied with our response, you may lodge a complaint with the Information Regulator of South Africa:
Information Regulator (South Africa)
Website: www.inforegulator.org.za
Email: inforeg@justice.gov.za
Physical address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001