PAIA Manual

Prepared in terms of section 51 of the Promotion of Access to Information Act 2 of 2000 (as amended) for digidan (Pty) Ltd, registration number 2017/184017/07, registered with the CIPC as DIGIDAN (PTY) LTD. Date of compilation: 11 October 2026. Date of last revision: 11 October 2026.

1. Acronyms and abbreviations

2. Purpose of this manual

This manual is useful for the public to:

• check the categories of records held by digidan which are available without a person having to submit a formal PAIA request;
• understand how to make a request for access to a record, by providing a description of the subjects on which digidan holds records and the categories of records held on each subject;
• know which records of digidan are available in accordance with other legislation;
• find the contact details of the Information Officer, who will assist the public with the records they intend to access;
• know about the Guide on how to use PAIA, as updated by the Regulator, and how to obtain it;
• know whether digidan processes personal information, the purpose of that processing, and the categories of data subjects and of information involved;
• know the recipients or categories of recipients to whom personal information may be supplied;
• know whether digidan plans to transfer or process personal information outside the Republic, and to whom; and
• know whether digidan has appropriate security measures to ensure the confidentiality, integrity and availability of the personal information it processes.

3. Key contact details for access to information

3.1 Information Officer

Name: Danyal Motan, founder and director of digidan (Pty) Ltd, and its Information Officer in terms of section 1 of PAIA and section 56 of POPIA. Registered with the Information Regulator on 11 October 2026, registration number 2026-068913 (verifiable on the Regulator’s eServices portal). Email: desk@digidan.co.za. No deputy Information Officer has been designated.

3.2 General access-to-information contact

Email: desk@digidan.co.za

3.3 Head office

Physical and postal address: 28 George Street, Mayfair, Johannesburg, 2092, South Africa.
Email: desk@digidan.co.za
Website: digidan.co.za

4. The Guide on how to use PAIA, and how to obtain it

The Regulator has, in terms of section 10(1) of PAIA, updated and made available the Guide on how to use PAIA (the “Guide”), in an easily comprehensible form and manner, as may reasonably be required by a person who wishes to exercise any right contemplated in PAIA and POPIA. The Guide is available in each of the official languages and in braille.

The Guide contains a description of:

• the objects of PAIA and POPIA;
• the contact details of the Information Officer of every public body and every deputy Information Officer of every public and private body;
• the manner and form of a request for access to a record of a public body (section 11) and of a private body (section 50);
• the assistance available from the Information Officer of a public body, and from the Regulator, in terms of PAIA and POPIA;
• all remedies in law available regarding an act or failure to act in respect of a right or duty conferred or imposed by PAIA and POPIA, including how to lodge an internal appeal, a complaint to the Regulator, and an application to a court;
• the provisions of sections 14 and 51 requiring public and private bodies to compile a manual, and how to obtain access to a manual;
• the provisions of sections 15 and 52 providing for the voluntary disclosure of categories of records;
• the notices issued in terms of sections 22 and 54 regarding fees; and
• the regulations made in terms of section 92.

Members of the public can inspect or make copies of the Guide at the offices of public and private bodies, including the office of the Regulator, during normal working hours. The Guide can also be obtained on request from our Information Officer, or from the Regulator’s website at inforegulator.org.za/paia. A copy of the Guide is available from us for inspection in two official languages: English and isiZulu.

5. Records available without a request

In terms of section 52 of PAIA, the following records are available without a person having to request access:

6. Records available in accordance with other legislation

Records are kept and, where that legislation provides, are available in accordance with the following South African legislation, among others:

7. Subjects on which we hold records, and the categories of records

8. Processing of personal information

8.1 Purpose of processing

digidan processes personal information in order to:

• respond to enquiries and communicate with clients and prospective clients;
• enter into and perform agreements to design, build, integrate and support software;
• manage relationships with suppliers, contractors and other people who work with us;
• invoice, receive payment, keep accounts and meet tax and other legal obligations;
• operate, secure and improve our website and systems; and
• protect our rights and interests, including in legal proceedings.

8.2 Categories of data subjects and of personal information

8.3 Recipients to whom personal information may be supplied

8.4 Planned transborder flows of personal information

Some of the providers above store and process information outside the Republic, chiefly in the United States and the European Union. This includes our website, contact form and analytics (Vercel) and cloud infrastructure, productivity and development tools. Transfers are made in terms of section 72 of POPIA, with each recipient bound by law or by contract to protect the information to a standard substantially similar to POPIA.

8.5 Security measures

digidan takes reasonable technical and organisational measures to ensure the confidentiality, integrity and availability of personal information, including: encryption of data in transit (HTTPS/TLS) and at rest where supported by our providers; access control with strong authentication and multi-factor authentication on key accounts; the principle of least privilege; validated and rate-limited public forms; keeping software and dependencies up to date; backups of business records; and reviewing providers’ security practices. Where we process personal information on behalf of a client, we do so under written agreement and the client’s instructions.

9. How to request a record

• Complete Form 02, Request for Access to Record, and send it to the Information Officer at desk@digidan.co.za. Give enough detail to identify the record, state the form of access you want, and say which right you seek to exercise or protect and why the record is required for that purpose (section 50 of PAIA).
• A request fee of R140.00 is payable before the request is processed, as prescribed in the PAIA Regulations, 2021. Access fees may also be charged for reproducing the record: R2.00 per A4 page for copies or printouts, R40.00 for a copy on a flash drive you supply, R24.00 per A4 page for an audio transcription, and R145.00 per hour or part of an hour, after the first hour, for searching for and preparing the record, capped at R435.00. Where search and preparation would exceed six hours, a deposit of one third of the estimated fee may be required. The full fee schedule is published by the Regulator at inforegulator.org.za.
• We will decide on the request within 30 days of receiving it, and may extend that period once by up to 30 days where PAIA allows. You will be notified of the outcome, and of any fees payable, on Form 03.
• Access may be refused on the grounds set out in Chapter 4 of Part 3 of PAIA, for example to protect the privacy of a third party, commercial information, or records privileged from production in legal proceedings. If a request is refused, the reasons will be given.
• If you are unhappy with a decision, you may lodge a complaint with the Regulator on Form 05 within 180 days, or apply to a court. Complaints: PAIAComplaints@inforegulator.org.za.

10. Availability of this manual

A copy of this manual is available:

• on our website at digidan.co.za/paia;
• at our head office for public inspection during normal business hours;
• to any person on request, on payment of the prescribed fee for copies; and
• to the Information Regulator on request.

A fee for a copy of the manual, as contemplated in Annexure B of the Regulations, is payable per A4-size photocopy made.

11. Updating of this manual

The head of digidan (Pty) Ltd will update this manual regularly, and whenever the information in it changes.

Issued by Danyal Motan, Information Officer, founder and director of digidan (Pty) Ltd.
Date: 11 October 2026