PAIA Manual
- Name: Webcafe (Pty) Ltd, trading as DonorMS
- Registration number: [to be confirmed]
- Physical address: [to be confirmed]
- Postal address: [to be confirmed]
- Telephone: [to be confirmed]
- Email: [email protected]
- Information Officer: [to be confirmed]
- Email: [email protected]
Requests for access to records and all POPIA queries should be sent to the Information Officer.
The Information Regulator has published a guide on how to use PAIA and POPIA. It is available in all official languages at inforegulator.org.za, or from the Information Regulator in Johannesburg.
- This PAIA manual
- The Privacy Notice and Terms of Service
- Product and pricing information on the DonorMS website
Records are kept as required by, among others, the Companies Act 71 of 2008, the Income Tax Act 58 of 1962, the Value-Added Tax Act 89 of 1991, the Basic Conditions of Employment Act 75 of 1997, the Labour Relations Act 66 of 1995, the Electronic Communications and Transactions Act 25 of 2002, and the Protection of Personal Information Act 4 of 2013.
- Company records: incorporation documents, statutory registers, minutes
- Financial records: accounting records, invoices, tax returns, banking records
- Personnel records: employment contracts, payroll and leave records
- Customer records: customer organisation details, account users, subscriptions, invoices and support correspondence
- Customer data processed as Operator: donor and donation records held on behalf of customer organisations. Requests for these records must be made to the organisation concerned, which is the Responsible Party.
- Technical records: system audit logs, security logs and backups
Purpose: providing and billing the DonorMS service, customer support, security monitoring, and meeting legal obligations.
Data subjects and information:
- Customer contacts and users: name, email address, phone number, login and audit records
- Donors of customer organisations (as Operator): identity, contact and donation details
- Employees and suppliers: details needed for employment and procurement
Recipients: SARS and other authorities where the law requires it, hosting and email service providers bound by confidentiality and data-protection terms, and professional advisers and auditors.
Transborder flows: DonorMS data is hosted in South Africa. Where a service provider outside South Africa is used, for example for email delivery, we rely on the safeguards in section 72 of POPIA.
Security measures: encrypted connections (TLS), role-based access control, per-organisation data separation, audit logging, rate limiting of logins, and daily database backups.
- Complete PAIA Form 2 (available from the Information Regulator's website) and send it to the Information Officer.
- Give enough detail to identify the record and the right you want to exercise or protect.
- Prescribed fees under the PAIA regulations may apply. We will tell you of any fee before processing the request.
- We will respond within 30 days. Requests may be refused on the grounds set out in Chapter 4 of Part 3 of PAIA.
- If you are unhappy with our decision you may complain to the Information Regulator or apply to court.
This manual is available at this web address and at our offices. It is updated when our details or processing change.