DynaPulse Privacy Policy
Version 1.0 · Effective 16 October 2026
- Provider: Dynatek (Pty) Ltd, registration number 2024/062947/07, 749 Richmond Street, Erasmuskloof, Pretoria, 0181, South Africa
- Contact for privacy matters: info@dynatek.co.za · +27 12 019 8540
- Information Officer: the Information Officer of Dynatek (Pty) Ltd, info@dynatek.co.za.
1. What this policy covers
This policy explains how personal information is handled in DynaPulse, our customer relationship and sales pipeline platform, which includes the DynaPulse Android and Windows apps (“the app”), the DynaPulse client portal (“the portal”) and the servers behind them. It is written to meet the Protection of Personal Information Act, 2013 (“POPIA”). How this website handles personal information is covered in our website Privacy Policy.
2. Who is responsible for your information
DynaPulse is provided to organisations (“the company”), such as a development agency or consultancy. Two roles matter under POPIA:
- The company that gave you access to DynaPulse, or that records information about you in it, is the responsible party. It decides why and how your information is used.
- Dynatek (Pty) Ltd is the operator. We store and process the company’s information on the company’s instructions, under a written agreement, and not for our own purposes.
For information that the company holds about you, the company is the party you should ask first. We will help the company answer you and, where you contact us directly, we will pass your request to the company without delay (see section 10).
DynaPulse is delivered in partnership with Datacomb Consulting (Pty) Ltd, our delivery and distribution partner. The roles above do not change.
3. Whose information is in DynaPulse
- People who use DynaPulse for a company (consultants, managers, administrators and approvers).
- The company’s clients and their representatives (“contacts”), whose details the company records.
- People who use the client portal after the company invites them.
- People who submit an enquiry through a company’s web form, if the company uses that feature.
4. What information is held
| Group | Information |
|---|---|
| Staff users | Name, work email address, role and permissions, sign-in history (date and time of last sign-in, failed attempts), a protected password (never the password itself), notification settings. |
| A company’s contacts and clients | Name, business contact details, addresses, the notes, activities and tasks the company records about the relationship, correspondence received from them, consent and do-not-contact choices. |
| Quotes and signatures | The quote, the signer’s name, and the drawn signature with the date and time and an identifier of the device used, so the signature can be tied to that exact document. |
| Site visits | The visit’s date, times, notes and photographs, and the device’s location at the moment of check-in where the device provided one. |
| Documents and photographs | Files that the company or its clients upload, such as business documents or funding application documents. These can include identity or financial documents if a client chooses to provide them. |
| Funding applications | The business’s application details, checklist, funder decisions and payment records. |
| Client portal users | Name, email address, protected password, the documents uploaded, and the messages exchanged with the company’s consultant. |
| Messages sent through the platform | A record that an email or message was composed or sent, to whom, and the outcome, including messages that were deliberately withheld because of a recorded objection. |
| Technical information | Security and audit records of who did what and when, and server logs that include technical identifiers such as an IP address. |
DynaPulse does not require special personal information (for example health, religion or biometric data), and it is not designed for children. A company that records such information in a free-text field does so on its own instruction and responsibility.
5. What the app asks your phone for, and why
The app asks for each permission only when you use the feature that needs it, never at start-up.
| Permission | Why | When |
|---|---|---|
| Location | To record where you were when you check in at a client’s site, as evidence that the visit took place. If you decline, or the device has no location, the visit is recorded without a position. We do not track you in the background and we do not infer a position. | When you start a visit check-in or capture |
| Camera | To photograph a document or evidence for a visit or a funding application. | When you choose “Take a photo” |
| Calendar (write only) | To add a follow-up or visit to your calendar. The app only writes events. It never reads your calendar. | When you choose to add an event |
| Notifications | To show reminders on your device about your work. | Only after you switch on a device notification |
| Internet / network state | To talk to your company’s DynaPulse server and to know when you are offline. | Always |
6. Why information is used
Only to provide DynaPulse to the company: to run its client relationships, visits, quotes, funding applications and portal; to authenticate users; to keep an audit trail; to send the notices and messages the company’s users ask the platform to send; to keep the service secure; and to answer personal-information requests. We do not sell personal information, we do not use it for advertising, and the app contains no advertising or analytics tracking tools.
7. Who information is shared with
- The company whose DynaPulse you use. It controls its own information.
- Our service providers (sub-operators), strictly to run the service: our hosting provider (South Africa) and, where the company has set one up, the company’s own outbound mail service.
- WhatsApp or email apps on your phone, only when you choose to send a message that way. DynaPulse composes the message and hands it to the app. It does not read or store the conversation that follows.
- Authorities, only where the law requires it.
We do not transfer personal information outside South Africa without the company’s written consent, except as POPIA section 72 allows.
8. How information is protected
- Separation: every company’s information is kept apart from every other company’s.
- Encryption in transit: connections between the app, the portal and our servers use HTTPS.
- Encryption on your device: information the app keeps on a phone for offline use is stored encrypted, and the app does not allow device backups of this data.
- Passwords are never stored in readable form.
- Access control: each person can do only what their company’s roles allow, and sessions are ended when access changes.
- Audit trail: changes are recorded, and records are not silently edited.
- Consent and objections: a do-not-contact choice is checked every time a message would be sent.
- Compromise: if we have reasonable grounds to believe information has been accessed by an unauthorised person, we notify the responsible party without undue delay and in any event within 72 hours, so that it can meet its own duties under POPIA section 22.
No system is perfectly secure. If you suspect misuse of your login, tell your administrator and us immediately.
9. How long information is kept
Information is kept for as long as the company needs it for its relationship with you and for any period the law requires, and is then destroyed or de-identified under the company’s retention rules. Consent history and do-not-contact records are kept for as long as needed to show that your choices were respected. When a company stops using DynaPulse, we return its information on request or delete it from live systems within 30 days of the company’s instruction, and from backups as they expire in the ordinary course.
10. Your rights
Under POPIA you may ask:
- whether a company holds information about you and to see it;
- for information to be corrected or deleted where it is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained;
- to object to the processing of your information, including direct marketing;
- to withdraw consent you gave.
How to ask: use the request form (see data and privacy requests below), or email info@dynatek.co.za. Please tell us the company whose DynaPulse you are asking about, if you know it. Because the company is the responsible party, we pass your request to the company and give it the help it needs to reply, including a record of what the platform holds about you. We will confirm that we received your request within 5 working days.
Staff users: you can change your own display name and password in the app under Profile. Your administrator manages your access.
Your data and privacy requests
If a company uses DynaPulse and may hold information about you, or you use DynaPulse yourself, you can ask us to help you to:
- See what information is held about you
- Correct information that is wrong
- Delete information about you
- Stop marketing or other messages
- Withdraw a consent you gave
How it works. DynaPulse is run by the company that uses it. That company decides what is kept about you, and we process it for them. So when you send us a request, we confirm it, pass it to the company, and help the company reply to you. Some information cannot be deleted straight away if the law requires the company to keep it; the company will tell you.
What is deleted, what is kept, and for how long
This applies to DynaPulse, an app by Dynatek (Pty) Ltd.
Deleted when the company approves your request:
- Your contact record: name, email address, telephone and mobile numbers, and addresses.
- Documents and photographs filed against you.
- Notes, tasks and messages the company recorded about you, where the law and the company’s retention rules allow.
- Your DynaPulse login, if you use DynaPulse as staff or through the client portal.
Kept, and why:
- Your choices. A record that you objected, withdrew consent or asked not to be contacted, and the do-not-contact entry that enforces it. If we deleted these, you could be contacted again.
- Signed quotes, funding records and the audit trail that the company is legally required to keep as business records. These stay for the period the law requires the company to keep them, and are then destroyed. The company will tell you which apply to you.
How long it takes: once the company has approved the deletion, it is removed from our live systems within 30 days. Copies in backups are removed as the backups expire in the ordinary course. You can ask for written confirmation.
Make a request
Make a data or privacy request
The button opens our contact form with “DynaPulse Data & Privacy Request” already selected. Or email info@dynatek.co.za with the subject “DynaPulse privacy request”. Either way, tell us:
- your full name and the email address where we should reply;
- the company you dealt with, if you know it (for example the agency or consultant who gave you a DynaPulse link);
- what you want: see, correct or delete your information, stop messages, or withdraw consent;
- any details that help us find it. Please do not send identity numbers or passwords.
You can also call +27 12 019 8540. We may ask you to confirm who you are before we act, so that nobody can obtain your information by pretending to be you. We confirm receipt within 5 working days.
If you use DynaPulse as staff. You can change your display name and password in the app under Profile. To remove your login or your information, ask your company’s administrator, or use the request form and tell us the company.
11. Complaints
If you are not satisfied, please contact us first. You also have the right to complain to the Information Regulator (South Africa); current contact details are at inforegulator.org.za.
12. Changes to this policy
We will update this policy when the product or the law changes, show the new effective date, and keep earlier versions available on request. Material changes will be notified to companies.
13. Contact
Dynatek (Pty) Ltd · 749 Richmond Street, Erasmuskloof, Pretoria, 0181, South Africa · info@dynatek.co.za · +27 12 019 8540