PAIA & POPI Compliance

Manual In Compliance With Section 51 Of The Promotion Of Access To Information Act, 2 Of 2000,

And

Policies And Procedures Pertaining To The Protection Of Personal Information Act, 4 0f 2013.

Table of Contents

1. Definitions and Interpretation
2. Availability of this Manual
3. How to contact the Business
4. Guide to the use of PAIA
5. Categories of documents available without formal request
6. Categories of records kept in accordance with legislation
7. Protection of Personal Information – privacy policy and procedures
8. Procedure in terms of PAIA for a request for access to records

1.  Definitions and Interpretation

In this document,

• “Business” means the life coach business conducted as a sole proprietorship by the Business Head under the name and style of Judy Klipin Stellar Life Design, and the private body (for purposes of PAIA) to which this manual relates;
• ” Business Head” means Judith Freda Klipin (ID no: 7005270220082), the sole proprietor of the Business;
• “Client” means any person of whom records are being kept in the Business;
• “Contact Details” means all or any of the following:
  • Postal Address:
    3 Beechwold Road,
    Saxonwold,
    Johannesburg,
    2196;

• • Street Address:
    3 Beechwold Road,
    Saxonwold,
    Johannesburg,
    2196

• • Phone number: 083 292 2535;
  • e- mail address: judy@judyklipin.com;

• “HRC” means the Human Rights Commission;
• “Information Officer” means, for purposes of POPI, the Business Head who is duly registered as such in terms of Section 55(2) of POPI;
• “Information Regulator” means the information regulator brought in existence by Section 39 of POPI;
• “PAIA” means the Promotion of Access to Information Act, 2 of 2000;
• “Personal Information” carries the same meaning as ascribed to this phrase in Section 1 of POPI;
• “POPI” means the Protection of Personal Information Act, 4 of 2013;
• “Business Website” means the website of the Business to be found at https://www.judyklipin.com and hosted by the Website Host;
• “Website Host” means Hostgator, whose web address is https://www.hostgator.com.
• In this manual:
  • capitalised words and phrases (apart from the normal spelling rules and unless the context within which such words and phrases clearly indicate the contrary) carry the meaning ascribed to them in the definitions section of this clause 1;
  • the clause headings are for convenience and shall be disregarded in construing this manual;
  • unless the context indicates a contrary intention, the singular shall include plural and vice versa;
  • any reference to a statute, regulation or other legislation shall be a reference to that statute, regulation, or other legislation as at the signature date of this manual; and
  • where any number of days is to be calculated from a day, such number shall be calculated as excluding such day and commencing on the next business day. If the last day of such number so calculated falls on a day which is not a business day, the last day shall be deemed to be the next succeeding day which is a business day.

2. Availability of this Manual

• This manual is available for inspection by appointment at the street address of the Business as per the Contact Details;
• This manual is also available from the Business Website.

3. How to contact the Business

The Business should be contacted through its Information Officer at any of the Contact Details;

4. Guide to the use of PAIA

The HRC is obligated, in terms of S10 of PAIA, to compile and publish a guide on how to make use of such Act.  Such a guide has been compiled and it contains information required by a person wishing to exercise any right contemplated by PAIA. It is available in all the official languages.  Any person who wishes to know more about how to exercise any rights contemplated in PAIA must direct queries to:

The South African Human Rights Commission,
PAIA Unit
Research and Documentation Department

Postal address:      Private bag 2700, Houghton, 2041, South Africa

Telephone:             +27 11 8773600

Fax:                          +27 11 4030625

E-mail:                     PAIA@sahrc.ord.za

Website:                  www.sahrc.org.za

5. Categories of documents available without formal request

This Business does not have any records, as contemplated in section 52 of PAIA, that are automatically available without a person having to request access in terms of PAIA.

6. Categories of records kept in accordance with legislation

• The Business maintains applicable records in accordance with the following legislation (which are not automatically available without a request in terms of this Act):
  • Income Tax Act, 95 of 1967;
  • PAIA; and
  • POPI
• The Business has the following records (which are not automatically available without a request in terms of this Act):
  • Clients
    • Confidential Client records and related information kept in accordance with the provisions of the POPI;
  • Communication
    • Media Releases
    • Promotion of Access to Information Act Manual
    • Internal and external correspondence
  • Financial Information
    • Financial Statements
    • Financial and Tax Records
    • Asset Register & Insurance information
    • Banking details
  • Operational Information
    • Client Information (other than confidential client records)
    • General Contract Documentation
    • Guidelines, Policies and Procedures
    • General Operational Information
  • Website
    • Organisation, products, services, and personal profile
    • News and Publications

7. Protection of Personal Information – privacy policy and procedures

• The very nature of the business conducted by the Business requires the gathering of Personal Information from Clients and other relevant person/s (the latter being case dependent);
• It is a policy of the Business to obtain the consent of all relevant parties before gathering and/or processing Personal Information;
• In addition to the aforesaid, all Personal Information of Clients is subject to an obligation of confidentiality by virtue of the provisions of, inter alia, POPI. As such, all Personal Information provided will be treated as strictly confidential, with the following exceptions:
  • with a Client’s (or that Client’s guardian in applicable cases) express consent;
  • where Personal Information is required to process payments for services provided by the Business or for the Business’s administration;
  • where the Business is obliged by law to divulge information;
  • where a Client’s referral source requires feedback. In such a case, information will only be supplied once discussed with the Client or guardian (where applicable);
  • In the case of a deceased Client, with the written consent of the next of kin or the executor of the deceased’s estate; or
  • If a member of the Business tests positive for COVID-19, it is possible that the Business might be required to provide a list of people who might have met the member concerned. Such a list might have to include the details of affected Clients;
• All Personal Information of Clients is collected by the Business Head from each Client during consultations or, in exceptional circumstances, from other relevant persons indicated by the Client (and/or his/her guardian, where applicable). In some instances, Personal Information can also be provided via the Business’s website for which all reasonable protective measures have been taken.  The personal information to be collected, is provided on a voluntary basis.  However, withholding information will likely have a negative impact on the services provided;
• The Personal Information collected will be used exclusively to direct the Business’ services to reach a desired outcome;
• The Business Head is responsible for maintaining the security of Personal Information collected;
• All Personal Information is stored in a safe environment and, where applicable, in encrypted electronic format;
• All Personal Information collected will be stored for a period of 1(one) year as from the date on which the Client ceases receiving services from the Business. Hereafter, the Personal Information will be destroyed, in a safe and secure manner;
• Should the Business experience a Personal Information breach, affected Clients as well as the Information Regulator will be advised thereof as soon as practically possible;
• Clients will be given access to their Personal Information only upon receipt of an express written request and/or consent (given by the Client, or a guardian of the Client, where applicable) to disclose the Personal Information concerned to a person nominated in the written document;
• Clients who are not satisfied with the way the Business deals with their personal information is entitled to lodge a complaint with the Information Regulator at https://www.justice.gov.za/inforeg/contact.html;
• The Website Host has provided the Business with an SSL certificate to the effect that all Personal Information that might be collected from the website is kept secure and confidential; and
• Drafting of reports, letters, etc, for third parties will only be done on receipt of the express written request and consent of the Client (or a guardian, where applicable).

8. Procedure in terms of PAIA for a request for access to records

• Any person who contemplates requesting information from the Business, should first consider the implications of Chapter 4 (grounds for refusal of access to records) of PAIA.
• The requester must complete Form C as published in accordance with Section 53 of PAIA and submit this form, together with the specified request fee, to the Information Officer at any of the relevant Contact Details;
• The requester must ensure that Form C:
  • provides sufficient particulars to enable the Business Head to properly identify –
    • the requester; and
    • the record/s requested;
  • indicate which form of access is required,
  • specify a postal address or fax number of the requester in the Republic;
  • identify the right that the requester is seeking to exercise or protect, and
  • provide an explanation of why the requested record is required for the exercise or protection of that right;
• If in addition to a written reply, the requester wishes to be informed of the decision on the request in any other manner, Form C must clearly state that manner and provide the necessary particulars to be informed in such other manner;
• If the request is made on behalf of another person, the requester must (in addition to Form C) submit documentary proof, to the reasonable satisfaction of the Head of the Business, of the capacity in which he/she is making the request; and
  • if such request is made on behalf of a Client, the Client’s original written consent to provide the requested records to the requester. The authenticity of such written consent shall be proved to the reasonable satisfaction of the Business Head.
• The requester will be notified by the Business Head of the amount of the prescribed fee to be paid and a request will only be further processed upon receipt of such prescribed fee.

The prescribed forms and fees for requests to private bodies are available on the website of the South African Human Rights Commission at sahrc.org.za, of the Department of Justice and Constitutional Development at www.doj.gov.za.

Downloadable (signed) copy of this document

You can download this document here.

Explore my website