PAIA Manual

    1. LIST OF ACRONYMS AND ABBREVIATIONS

    1.1. “CEO” Chief Executive Officer;

    1.2. “DIO” Deputy Information Officer;

    1.3. “IO“ Information Officer;

    1.4. “Minister” Minister of Justice and Correctional Services;

    1.5. “PAIA” Promotion of Access to Information Act No. 2 of 2000 (as Amended);

    1.6. “POPIA” Protection of Personal Information Act No.4 of 2013;

    1.7. “Regulator” Information Regulator; and

    1.8. “Republic” Republic of South Africa.

     

    2. PURPOSE OF PAIA MANUAL

    This PAIA Manual is useful for the public to-

    2.1. check the categories of records held by a body which are available without a person having to submit a formal PAIA request;

    2.2. have a sufficient understanding of how to make a request for access to a record of the body, by providing a description of the subjects on which the body holds records and the categories of records held on each subject;

    2.3. know the description of the records of the body which are available in accordance with any other legislation;

    2.4. access all the relevant contact details of the Information Officer and Deputy Information Officer who will assist the public with the records they intend to access;

    2.5. know the description of the guide on how to use PAIA, as updated by the Regulator and how to obtain access to it;

    2.6. know if the body will process personal information, the purpose of processing of personal information and the description of the categories of data subjects and of the information or categories of information relating thereto;

    2.7. know the description of the categories of data subjects and of the information or categories of information relating thereto;

    2.8. know the recipients or categories of recipients to whom the personal information may be supplied;

    2.9. know if the body has planned to transfer or process personal information outside the Republic of South Africa and the recipients or categories of recipients to whom the personal information may be supplied; and

    2.10. know whether the body has appropriate security measures to ensure the confidentiality, integrity and availability of the personal information which is to be processed.

     

    3. KEY CONTACT DETAILS FOR ACCESS TO INFORMATION OF THE YOUR CAPITAL (PTY) LTD

    3.1. Chief Information Officer

    3.2. Deputy Informtion Officer

    • Name: N/A
    • Email: N/A

    3.3. Access to information general contacts

    3.4. National Head Office

    • Postal Address: Midlands Office Park West, Mount Quray Road, Midstream, 1683             
    • Physical Address: Midlands Office Park West, Mount Quray Road, Midstream, 1683
    • Email: [email protected]
    • Website: www.yourcapital.co.za

     

    4. GUIDE ON HOW TO USE PAIA AND HOW TO OBTAIN ACCESS TO THE GUIDE

    4.1. The Regulator has, in terms of section 10(1) of PAIA, as amended, updated and made available the revised Guide on how to use PAIA (“Guide”), in an easily comprehensible form and manner, as may reasonably be required by a person who wishes to exercise any right contemplated in PAIA and POPIA.

    4.2.The Guide is available in each of the official languages and in braille.

    4.3. The aforesaid Guide contains the description of-

     4.3.1. the objects of PAIA and POPIA;

    4.3.2. the postal and street address, phone and fax number and, if available, electronic mail address of-

    4.3.2.1. the Information Officer of every public body, and

    4.3.2.2. every Deputy Information Officer of every public and private body designated in terms of section 17(1) of PAIA[1] and section 56 of POPIA[2];

    4.3.3. the manner and form of a request for-

    4.3.3.1. access to a record of a public body contemplated in section 11[3]; and

    4.3.3.2. access to a record of a private body contemplated in section 50[4];

    4.3.4. the assistance available from the IO of a public body in terms of PAIA and POPIA;

    4.3.5. the assistance available from the Regulator in terms of PAIA and POPIA;

    4.3.6. all remedies in law available regarding an act or failure to act in respect of a right or duty conferred or imposed by PAIA and POPIA, including the manner of lodging-

     4.3.6.1. an internal appeal;

     4.3.6.2. a complaint to the Regulator; and

    4.3.6.3. an application with a court against a decision by the information officer of a public body, a decision on internal appeal or a decision by the Regulator or a decision of the head of a private body;

     4.3.7. the provisions of sections 14[1] and 51[2] requiring a public body and private body, respectively, to compile a manual, and how to obtain access to a manual;

     4.3.8. the provisions of sections 15[3] and 52[4] providing for the voluntary disclosure of categories of records by a public body and private body, respectively;

     4.3.9. the notices issued in terms of sections 22[5] and 54[6] regarding fees to be paid in relation to requests for access; and

     4.3.10. the regulations made in terms of section 92[7].

    4.4. Members of the public can inspect or make copies of the Guide from the offices of the public and private bodies, including the office of the Regulator, during normal working hours.

    4.5. The Guide can also be obtained-

    4.5.1. upon request to the Information Officer;

    4.5.2. from the website of the Regulator (https://www.justice.gov.za/inforeg/).

    4.6. A copy of the Guide is also available in the following official language, for public inspection during normal office hours-

    4.6.1. English

    [1] Section 17(1) of PAIA- For the purposes of PAIA, each public body must, subject to legislation governing the employment of personnel of the public body concerned, designate such number of persons as deputy information officers as are necessary to render the public body as accessible as reasonably possible for requesters of its records.

    [2] Section 56(a) of POPIA- Each public and private body must make provision, in the manner prescribed in section 17 of the Promotion of Access to Information Act, with the necessary changes, for the designation of such a number of persons, if any, as deputy information officers as is necessary to perform the duties and responsibilities as set out in section 55(1) of POPIA.

    [3] Section 11(1) of PAIA- A requester must be given access to a record of a public body if that requester complies with all the procedural requirements in PAIA relating to a request for access to that record; and access to that record is not refused in terms of any ground for refusal contemplated in Chapter 4 of this Part.

    [4] Section 50(1) of PAIA- A requester must be given access to any record of a private body if-

    1. that record is required for the exercise or protection of any rights;
    2. that person complies with the procedural requirements in PAIA relating to a request for access to that record; and
    3. access to that record is not refused in terms of any ground for refusal contemplated in Chapter 4 of this Part.

    [5] Section 14(1) of PAIA- The information officer of a public body must, in at least three official languages, make available a manual containing information listed in paragraph 4 above.

    [6] Section 51(1) of PAIA- The head of a private body must make available a manual containing the description of the information listed in paragraph 4 above.

    [7] Section 15(1) of PAIA- The information officer of a public body, must make available in the prescribed manner a description of the categories of records of the public body that are automatically available without a person having to request access

    [8] Section 52(1) of PAIA- The head of a private body may, on a voluntary basis, make available in the prescribed manner a description of the categories of records of the private body that are automatically available without a person having to request access

    [9] Section 22(1) of PAIA- The information officer of a public body to whom a request for access is made, must by notice require the requester to pay the prescribed request fee (if any), before further processing the request.

    [10] Section 54(1) of PAIA- The head of a private body to whom a request for access is made must by notice require the requester to pay the prescribed request fee (if any), before further processing the request.

    [11] Section 92(1) of PAIA provides that –“The Minister may, by notice in the Gazette, make regulations regarding-

    (a) any matter which is required or permitted by this Act to be prescribed;

    (b) any matter relating to the fees contemplated in sections 22 and 54;

    (c) any notice required by this Act;

    (d) uniform criteria to be applied by the information officer of a public body when deciding which categories of records are to be made available in terms of section 15; and

    (e) any administrative or procedural matter necessary to give effect to the provisions of this Act.”

    5. CATEGORIES OF RECORDS OF THE YOUR CAPITAL (PTY) LTD WHICH ARE AVAILABLE WITHOUT A PERSON HAVING TO REQUEST ACCESS

    5.1. The records reflected in the table below are available without a person having to formally request access.

    Category of records Types of the Record Available on Website Available upon request
    Company information

    Complaints policy and procedure

    Conflicts of interest policy and register

    PAIA Manual

    Privacy notice/statement

    Terms and conditions

    X X
    Company information Other policies X
    Publications

    Advertising

    Information documents

    Marketing material

    Newsletters

    Presentations

    Press releases

    Social media

    Videos

    Websites and content

    X X

    6. DESCRIPTION OF THE RECORDS OF YOUR CAPITAL (PTY) LTD WHICH ARE AVAILABLE IN ACCORDANCE WITH ANY OTHER LEGISLATION

    6.1. The records reflected in the table below are available, in accordance with legislation.

    Category of Records Applicable Legislation
    Company information Companies Act 71 of 2008
    Collective investment schemes information Collective Investment Schemes Control Act 45 of 2002

    Communications information

    Information security and privacy policy

    Privacy notice/statement

    Electronic Communications Act 36 of 2005

    Electronic Communications and Transactions Act 25 of 2002

    Regulation of Interception of Communications and Provision of Communication-related Information Act 70 of 2002

    Competition information Competition Act 89 of 1998
    Copyright information Copyright Act 98 of 1978
    Credit information

    Credit Rating Services Act 24 of 2012

    National Credit Act 34 of 2005

    Employment information

    Basic Conditions of Employment Act 75 of 1997

    Broad-Based Black Economic Empowerment Act 53 of 2003

    Compensation for Occupational Injuries and Diseases Act 130 of 1993

    Employment Equity Act 55 of 1998

    Labour Relations Act 66 of 1995

    Skills Development Act 97 of 1998

    Unemployment Insurance Act 63 of 2001

    Exchange control information Currency and Exchanges Act 9 of 1933
    Financial crime information

    Financial Intelligence Centre Act 38 of 2001

    Prevention and Combating of Corrupt Activities Act 12 of 2004

    Prevention of Organised Crime Act 121 of 1998

    Protection of Constitutional Democracy against Terrorist and Related Activities Act 33 of 2004

    PAIA Manual

    Information security information

    Promotion of Access to Information Act 2 of 2000

    Protected Disclosures Act 26 of 2000

    Protection of Personal Information Act 4 of 2013

    Complaints management policy and procedure

    Financial services provider information

    Financial Advisory and Intermediary Services Act 37 of 2002
    Financial institutions information

    Financial Institutions (Protection of Funds) Act 28 of 2001

    Financial Sector Regulation Act 9 of 2017

    Financial markets information Financial Markets Act 19 of 2012
    Health information

    Council for Medical Schemes Levies Act 58 of 2000

    Medical Schemes Act 131 of 1998

    Occupational Health and Safety Act 85 of 1993

    Tobacco Products Control Act 83 of 1993

    Insurance information

    Insurance Act 18 of 2017

    Long-Term Insurance Act 52 of 1998

    Short-Term Insurance Act 53 of 1998

    Legal information

    Interpretation Act 33 of 1957

    Justices of the Peace and Commissioner of Oaths Act 16 of 1963

    Legal Practice Act 28 of 2014

    Promotion of Administrative Justice Act 3 of 2000

    Small Claims Courts Act 61 of 1984

    People information

    Births and Deaths Registration Act 51 of 1992

    Childrens Act 38 of 2005

    Civil Union Act 17 of 2006

    Consumer Protection Act 68 of 2008

    Constitution of the Republic of South Africa (as amended)

    Maintenance Act 99 of 1998

    Marriage Act 99 of 1998

    Promotion of Equality and Prevention of Unfair Discrimination Act 4 of 2000

    Retirement fund information

    Friendly Societies Act 25 of 1956

    Government Employees Pension Law (1996)

    Pension Funds Act 24 of 1956

    Tax information

    Employment Tax Incentive Act 26 of 2013

    Income Tax Act 58 of 1962

    Organisation for Economic Co-operation and Development (OECD) Common Reporting Standard for automatic exchange of financial account information (CRS)

    Securities Transfer Tax Act 25 of 2007

    Securities Transfer Tax Administration Act 26 of 2007

    Skills Development Levies Act 9 of 1999

    Tax Administration Act 28 of 2011

    Tax on Retirement Funds Act 38 of 1996

    Unemployment Insurance Contributions Act 4 of 2002

    United States Foreign Account Tax Compliance Act (FATCA)

    Value Added Tax Act 89 of 1991

    Trust property information Trust Property Control Act 57 of 1988

     

    7. DESCRIPTION OF THE SUBJECTS ON WHICH THE BODY HOLDS RECORDS AND CATEGORIES OF RECORDS HELD ON EACH SUBJECT BY YOUR CAPITAL (PTY)LTD.

    7.1. The records reflected in the table below may be formally requested, in terms of the PAIA, but parts, or the whole, of the record may be subject to the grounds for refusal of access to records. Refer to the Guide on how to use the PAIA.

    7.2. The Company reserves the right to refuse access to records if the processing of the record will substantially, and unreasonably, result in a diversion of its resources.

    7.3. The Company reserves the right to refuse access to records that relate to the mandatory protection of:

    7.3.1. privacy of a third party, who is a natural person, which would involve the unreasonable disclosure of personal information of that natural person

    7.3.2. commercial information of a third party, if the record contains trade secrets of the third party; financial, commercial, or technical, information, which disclosure may cause harm to the 7.3.1.financial, or commercial, interests of the third party; and information disclosed in confidence by a third party to the Company, if the disclosure may place the third party at a disadvantage

    7.3.3. confidential information of a third party, if it is protected in terms of an agreement, or legislation

    7.3.4. safety of natural persons, and the protection of property

    7.3.5. records that are regarded as privileged, in legal proceedings

    7.3.6. records that are personal information, in terms of the POPIA

    7.3.7. commercial activities of the Company, including, but not limited to, trade secrets, financial, commercial, or technical, information, and software platforms, or programmes, exclusively developed for the Company.

    7.4. The Company will refuse access if the requests are frivolous and/or vexatious.

    7.5. The IO, or DIO, may grant access to a record if disclosing the record would reveal evidence of a material contravention of, or failure to comply with, any law, and the public interest in disclosing the record outweighs the harm contemplated in the relevant grounds for refusal of access to records.

     

    Subjects on which the body holds records

     

    Categories of records

    Company records

    Incorporation documents

    Memorandum of incorporation

    Minutes

    Resolutions

    Registers of directors and officers

    Share registers and other statutory registers

    Statutory returns to relevant authorities

    Other statutory obligations

    Policies and procedures

    Records relating to appointment of directors, auditors, company secretary, public officer, and other officers

    Accounting and finance records

    Accounting (including books of account)

    Administration

    Annual financial statements

    Asset registers

    Audit reports

    Banking

    Budgets

    Intellectual property

    Invoices and credit notes

    Lease agreements

    Rental agreements

    Sale agreements

    Supporting schedules, and documents, to books of account

    Tax records

    Dividends withholding tax

    Income tax

    Pay As You Earn (PAYE)

    Skills Development Levies (SDL)

    Unemployment Insurance Fund (UIF) levies

    Workmen’s compensation

    Value Added Tax (VAT)

    Legal records

    Documents relating to litigation and/or arbitration

    General agreements and contracts

    Licenses, permits, and authorisations

    Regulator correspondence

    Insurance records

    Claims

    Details of insurance cover, limits, and insurers

    Insurance policies

    Employee records

    Arbitration awards

    Attendance registers

    Casual employees

    CCMA proceedings

    Code of conduct

    Income tax (PAYE/SDL/UIF) submissions for employees

    Confidentiality agreements

    Disciplinary proceedings and internal evaluations

    Employee personal details

    Employment conditions and policies

    Employment contracts

    Employment equity plan

    Internal correspondence

    Internal policies, and procedures

    Leave

    Operating manuals

    Other agreements/contracts

    Other interventions

    Medical aid

    Documents provided by employees

    Strikes, lockouts, or protest, action

    Remuneration and benefits

    Restraint of trade agreements

    Retirement funds

    Service

    Share option schemes registers

    Share option schemes rules

    Share purchase scheme register

    Share purchase scheme rules

    Training schedules and material

    Verification reports (credit, criminal, employment, FAIS, identity, qualification)

    Client records

    Client agreements/contracts and forms

    Complaints and/or queries

    Client documents, and information

    Proposals

    Transactions and supporting information

    Verification reports

    Service supplier and third party records

    Code of conduct

    Conflicts of interest

    Requests for information

    Service supplier and/or third party agreements/contracts (including service level agreements)

    Tenders

    Terms and conditions for dealing with suppliers

    Transactions and supporting information

    Information technology

    Asset issuing and custodian information

    Back-ups

    Disaster recovery testing

    Incidents and service requests

    Information and communication technologies (ICT) policies and procedures

    Network maintenance

    Operations reports

    Service level agreements

    System event logs

    System performance logs

    System maintenance checklists

    System development lifecycle documents

    Publications

    Advertising

    Information documents

    Marketing material

    Newsletters

    Presentations

    Press releases

    Social media

    Videos

    Websites and content

     

    8. PROCESSING OF PERSONAL INFORMATION

    8.1. Purpose of Processing Personal Information

    The Company processes the personal information of data subjects in the following ways:

    8.1.1. Executing and/or fulfilling its statutory obligations in terms of the PAIA and/or the POPIA

    8.1.2. Executing and/or fulfilling its statutory obligations in terms of other applicable legislation

    8.1.3. Executing and/or fulfilling its contractual obligations

    8.1.4. Administering employees and potential employees

    8.1.5. Keeping accounts, and records

    8.1.6. Procurement processes

    8.1.7. Visitors to the Company’s business premises

    8.2. Description of the categories of Data Subjects and of the information or categories of information relating thereto

    The Company may process information for itself, shareholders (and those of clients), employees (and those of clients), clients (and those of clients), service suppliers (and those of clients), and product suppliers (and those of clients).

     

    Categories of Data Subjects

     

    Personal Information that may be processed

    Clients (and those of clients)

    Full names; contact details (contact numbers; fax

    Numbers; email addresses); physical addresses; postal addresses; Unique identifier; identity/registration numbers; confidential correspondence; tax-related information; company information; information required in terms of the FAIS Act and the FICA (and other relevant legislation)

    Service suppliers and product suppliers (and those of clients) Full names of contact persons; registered, and trade, names of entities; full names of directors and shareholders, physical addresses; postal addresses; contact details (contact numbers, fax numbers, email addresses); financial information; identity/passport/registration numbers; founding documents; tax-related information; authorised signatories’ information; broad-based black economic empowerment (B-BBEE) status; associated entities; business strategies; information required in terms of the FAIS Act and the FICA (and other relevant information)
    Employees/Key individuals/Representatives (and those of clients) Gender; pregnancy; marital status; race; age; language; education information (qualifications); financial information; employment history; identity/passport/registration numbers; physical addresses; postal addresses; contact details (contact numbers; fax numbers; email addresses); credit record; FAIS related information; criminal record; well-being and family members; medical; nationality; ethnic and/or social origin; physical and/or mental health; disability; biometric information; professional affiliation; references; CVs/resumes; information required in terms of the FAIS Act and the FICA (and other relevant legislation)

    8.3. The recipients or categories of recipients to whom the personal information may be supplied

    8.3.1. The Company may supply the personal information of data subjects to service suppliers, who provide the following services:

    8.3.1.1. Administration (for example, clients, investments, medical aids, retirement funds)

    8.3.1.2. Accounting and/or auditing

    8.3.1.3. Capturing, and organising, personal information

    8.3.1.4. Compliance

    8.3.1.5. Due diligence reviews

    8.3.1.6. Information and communication technologies (ICT)

    8.3.1.7. Storing of personal information

    8.3.1.8. Verification checks (for example, credit (and payment history), criminal, employment history, FAIS related, financial sanctions, identity, qualifications, terrorism)

    8.3.1.  The Company may supply the personal information of data subjects to:

    8.3.1.1. Courts, in terms of matters taken on judicial review

    8.3.2.2. Enforcement agencies, for criminal investigation (for example, National Prosecuting Authority, South African Police Service)

    8.3.2.3. People against whom complaints have been lodged

    8.3.2.4. Regulators, ombuds, or tribunals, in terms of matters that fall under their jurisdiction

     

    Category of personal information

     

    Recipients or Categories of Recipients to whom the personal information may be supplied

     

    Identity/passport/registration numbers, dates of birth, dates of incorporation, names Companies and Intellectual Property Commission, Department of Home Affairs, Financial Intelligence Centre, South African Police Services, United Nations, and verification providers
    Qualifications South African Qualifications Authority and verification providers
    Credit, and payment history Credit Bureaus and verification providers
    Tax information South African Revenue Service

     

    8.4. Planned transborder flows of personal information

    8.4.1. The Company has not planned transborder flows of personal information.

    8.4.2. If it becomes necessary to transfer personal information to another country for a lawful purpose, the Company will ensure that the person (both legal and natural) to whom the personal information will be transferred is subject to a law, binding company rules, and/or binding agreements, which provide a suitable level of protection, and the third party agrees to treat the personal information with the same level of protection as the Company is required to provide, in terms of the POPIA.

    8.4.3. The cross border transfer of personal information will be done with the data subject’s consent. However, if it is not reasonably practicable to obtain the data subject’s consent, the Company will transfer the personal information if it will be for the data subject’s benefit, and the data subject would have provided consent, if it had been reasonably practicable to obtain the consent.

    8.5. General description of Information Security Measures to be implemented by the responsible party to ensure the confidentiality, integrity and availability of the information

    8.5.1. The Company has established, and maintains, suitable technical, and operational, measures to prevent loss of, damage to, or unauthorised destruction of, personal information, and unlawful access to, or processing of, personal information.

    8.5.2. The suitable measures that the Company has taken includes, but is not limited to:

    8.5.2.1. Access control

    8.5.2.2. Agreements with operators, to ensure that they implement, and maintain suitable security controls

    8.5.2.3. Anti-virus software

    8.5.2.4. Anti-malware software

    8.5.2.5. Awareness and vigilance of users

    8.5.2.6. Data back-ups

    8.5.2.7. Data encryption

    8.5.2.8. Defensive measures

    8.5.3. The suitable measures are in place to ensure that the Company:

    8.5.3.1. Identifies the risks (both internal and external) to the personal information that is in its possession and/or under its control

    8.5.3.2. Establishes, and maintains, suitable safeguards against the risks identified

    8.5.3.3. Regularly verifies that the safeguards are effectively implemented

    8.5.3.4. Updates the safeguards when new risks are identified, and when existing safeguards are found to be deficient

    9. AVAILABILITY OF THE MANUAL

    9.1. A copy of the Manual is available-

    9.1.1. on yourcapital.co.za, if any;

    9.1.2. head office of the Your Capital (Pty) Ltd for public inspection during normal business hours;

    9.1.3. to any person upon request and upon the payment of a reasonable prescribed fee; and

    9.1.4.  to the Information Regulator upon request.

    9.2. A fee for a copy of the Manual, as contemplated in annexure B of the Regulations, shall be payable per each A4-size photocopy made.

     

    10. UPDATING OF THE MANUAL

    The head of the Your Capital (Pty) Ltd will on a regular basis update this manual.

     

    11. HOW TO REQUEST INFORMATION

     

    11.1. Records will only be made available subject to the provisions of the Act. The Requester must use this prescribed form to make the request for access to a record. Link to Form 2: Request for Access to Record (Regulation 7).

     

    11.2. If your request is granted If your request is granted the amount of the deposit is payable before your request is processed; and requested record/portion of the record will only be released once proof of full payment is received. Link to Form 3: Outcome of request and of fees payable (Regulation 8).