Promotion of Access to Information Act (PAIA) Manual

Prepared in terms of Section 51 of the Promotion of Access to Information Act 2 of 2000 (as amended) for ArxTech (Pty) Ltd

List of Acronyms and Abbreviations

CEO: Chief Executive Officer

IO: Information Officer

PAIA: Promotion of Access to Information Act No. 2 of 2000

POPIA: Protection of Personal Information Act No. 4 of 2013

Regulator: The South African Information Regulator

Republic: Republic of South Africa

Purpose of this PAIA Manual

This Manual is useful for the public to:

  • Check the categories of records held by us which are available without a formal PAIA request.

  • Understand how to submit a formal request for access to a record.

  • Know the contact details of the Information Officer who will assist the public.

  • Understand how we process, transfer (cross-border), and secure Personal Information under POPIA.

Key Contact Details for Access to Information

All formal requests or queries must be directed to our designated Information Officer:

Kennedy Sekeso

73 Sovereign Drive, Route 21 Business Park, Centurion, 0157

Guide on How to Use PAIA

The Information Regulator has compiled a comprehensive, easy-to-read Guide in all official languages to assist the public in exercising their rights under PAIA and POPIA.

You can inspect or download this official Guide directly from the South African Information Regulator’s portal here: https://inforegulator.org.za/paia-guidelines/

Categories of Records Available Without a Formal Request

The following records are automatically available to the public without needing to fill out a formal PAIA request form:

  • Public marketing brochures and brand material.

  • All public-facing content hosted across our web domain.

  • Our published POPIA Privacy Policy, accessible here: https://arxtech.co.za/privacy-policy/.

Records Available in Accordance with Other South African Legislation

We maintain records in terms of the following statutory local legislation, among others:

  • Broad-Based Black Economic Empowerment Act 53 of 2003

  • Companies Act 71 of 2008

  • Consumer Protection Act 68 of 2008

  • Income Tax Act 58 of 1962

  • Value Added Tax Act 89 of 1991

  • Protection of Personal Information Act 4 of 2013

  • Electronic Communications and Transactions Act 25 of 2002

Description of Subjects and Categories of Internal Records Held

The list below describes the subjects on which our company holds operational records and the categories of records held under each:

Memorandum of Incorporation, CIPC filings, share registers, and ISMS internal policies

Annual financial statements, tax returns, accounting ledgers, invoices, and banking details

Employment contracts, payroll records, internal personnel profiles, training logs, and leave records

Customer databases, active service contracts, delivery schedules, and technical security project files

Processing of Personal Information (POPIA requirements)

We process Personal Information lawfully, minimally, and transparently based on your explicit consent, contractual requirements, or legitimate business interest:

We process Personal Information to execute client contracts, manage supplier pipelines, communicate service updates, perform accounting operations, and respond to voluntary digital queries.

Customers / Clients: Names, physical/postal addresses, registration/ID numbers, email addresses, and billing history

Service Providers / Suppliers: Trade names, VAT numbers, physical banking details, and commercial agreements

Employees: ID numbers, addresses, banking details, tax profiles, and qualifications

To maintain website functionality, execute marketing communications, and ensure data backup integrity, we may store or route information through cloud-based platform Operators located outside of South Africa, specifically:

  • Mailchimp servers in the United States (for marketing distribution and subscriber list storage).

  • Google Analytics, Search Console, and Google/Adobe Fonts infrastructure (hosted across United States and European Union data centers).

  • CleanTalk cloud validation servers (for real-time automated spam detection).

  • Backuply cloud storage facilities (for secure offsite database disaster recovery).

We ensure these foreign Operators adhere to strict contractual confidentiality frameworks and data protection standards that align with POPIA requirements.

We deploy appropriate technical safeguards to maintain the confidentiality and integrity of personal data, including:

  • SSL data encryption across our website domain.

  • Firewall implementations and anti-malware tracking solutions.

  • Restricted, password-managed access protocols to internal databases.

Formal Request Procedure for Records

To request a private record from us that is not automatically public, you must follow the formal PAIA workflow:

  1. Download and complete the official PAIA Form 2 (Request for Access to Record) here.

  2. Submit the completed Form 2 to our Information Officer at info@arxtech.co.za.

  3. State the clear constitutional or legal right you are seeking to protect or exercise within the form context.

  4. Pay the statutory, regulated access fee if applicable before your request can be processed.

Availability and Updating of this Manual

This manual is available for public inspection at our physical head office during normal business hours, is published live on our web domain, and is updated on a regular basis by our Information Officer.

Please note: If a request is made on behalf of another individual, the requester must submit proof of the capacity in which they are making the request, to the reasonable satisfaction of our Information Officer.