PAIA Manual

All requests under PAIA, and all requests about your own personal information under POPIA, should be addressed to the Information Officer.

The Information Regulator has published a guide, in terms of section 10 of the Act, explaining how to use PAIA. It is available from:

The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
PO Box 31533, Braamfontein, Johannesburg, 2017
Email: inforeg@justice.gov.za
Website: https://inforegulator.org.za

3.1 Records about people who use ZiziPay

Your name, contact details and the identifying information you gave us when you opened an account; your account numbers and payment references; the record of money you have sent, requested and received; the beneficiaries you have saved; and the record of your sign-ins and the devices you used.

3.2 Records about businesses on ZiziPay

The business's registered details, the people who are members of it and what each of them is permitted to do, the ownership record, and the record of payments made from its accounts and who approved them.

3.3 Company records

Records held in terms of the Companies Act, tax and accounting records, employment records, insurance and supplier contracts, and our own internal policies.

3.4 Records held under other legislation

Records kept in terms of the Financial Intelligence Centre Act, the Companies Act, the Income Tax Act and the Value-Added Tax Act, POPIA, and the Basic Conditions of Employment Act.

4.1 Your own personal information

Write to the Information Officer at the address above. Tell us which information you want and how you would like to receive it, and include enough proof of identity for us to be satisfied we are giving your information to you and to nobody else. There is no fee.

4.2 Any other record

Use Form 2 prescribed under the PAIA Regulations, sent to the Information Officer. Set out the record you want, the form of access you prefer, and, if you are asking for it in order to exercise or protect a right, which right that is and how the record would help.

4.3 Requesting on someone else's behalf

Say so in the request, and include proof that you are entitled to act for that person.

We will tell you what is payable before doing the work, and you may appeal internally or apply to court against a fee you believe is excessive.

PAIA obliges us to refuse a request in some circumstances and permits us to refuse it in others. The grounds most likely to apply here are:

• Someone else's privacy: the unreasonable disclosure of another person's personal information (section 63). This arises often, because a payment involves at least two people and one person's record is also the other's.
• Commercially sensitive information of a third party: trade secrets, or financial or commercial information whose disclosure would harm someone's commercial interests (section 64).
• Confidential information supplied by a third party: where disclosure would breach a duty of confidence (section 65).
• Safety of people and security of property: where disclosure could endanger someone, or prejudice the security of property, money or a system (section 66).
• Legally privileged records (section 67).

Where a record can be separated, we will give you the part that is not protected rather than refusing the whole request (section 28). If we refuse, we will tell you in writing, give reasons, and set out your right to appeal or apply to court.

We will decide on a request within 30 days of receiving it, and tell you the outcome in writing. That period may be extended by a further 30 days where the request is for a large number of records or requires a search through records held elsewhere; if we extend it, we will tell you why and tell you that you may appeal the extension.

You may lodge a complaint with the Information Regulator, or apply to a court, within 180 days of being told our decision. The Regulator's details are in section 2 above.

Separately from PAIA, you may ask us to confirm what personal information we hold about you, to correct or delete information that is inaccurate, irrelevant, excessive, out of date or obtained unlawfully, and to object to processing in the circumstances the Act allows. Some records we are required by law to keep for a set period and cannot delete on request. Our Privacy Policy explains this in full.

This manual is available on this page at no charge, and on request from the Information Officer. A copy has been submitted to the Information Regulator as the Act requires.