Access to records

PAIA manual

Everything Ekurhuleni — an independent community guide.

Prepared for section 51 of the Promotion of Access to Information Act 2 of 2000 (PAIA). Updated 27 October 2026.

Operator and contact details

The owner confirmed receipt of the Information Officer registration certificate on 12 October 2026. The certificate is retained privately and is not reproduced here.

What this manual covers

This manual describes records held for this guide, ways to ask for access, and the guide’s personal-information processing. POPIA means the Protection of Personal Information Act 4 of 2013. The Information Regulator oversees PAIA and POPIA.

Records available on the website

Published directory entries, community pages, events, guides, source links, photo/font credits, privacy and terms pages are available without a formal request. Public availability does not grant rights to reuse third-party photographs outside their stated licences.

Other record categories

A category describes possible records; it does not promise that a particular record exists or will be disclosed. No special notice of automatically available private records has been confirmed. Records relevant to duties under PAIA and POPIA are retained where applicable; additional statutory duties will be recorded if the guide’s operations change.

Requesting a private record

Use the Regulator’s prescribed Form 2 and PAIA guidance. Identify the requested record, the right you seek to exercise or protect, why that record is needed, and your preferred accessible format. Give proportionate information establishing your identity or authority; do not send an ID copy unless it is needed and a secure channel has been agreed.

Address the request to the Information Officer at the contact address above, or email the Information Officer at the address shown above. We will apply PAIA’s procedural rules, lawful refusal grounds and current prescribed fees, explain the decision and available remedies, and help clarify an incomplete request. A listing correction can also be requested through the contact page.

PAIA guide and complaints

The Regulator publishes a guide, request forms and complaint procedures. Assistance is available from the Information Regulator, telephone 010 023 5200 or enquiries@inforegulator.org.za. A requester may use the applicable Regulator complaint and court procedures.

Personal information

Public contact information helps people find places, businesses and groups. Submission contacts, permissions and the optional Gmail-reply choice support moderation and corrections. Visitor network information supports delivery and security. The privacy notice explains purposes, optional choices, rights, retention and device storage.

Netlify holds the submission/review queue under its incorporated Data Processing Agreement. The assessed contractual safeguards apply to hosting, forms and onward processing, including outside South Africa. Records are not automatically forwarded to Gmail, and submission archives are not copied into Gmail.

Google consumer Gmail is a separate, visitor-chosen correspondence route under Google’s own terms and Privacy Policy. Google explains that consumer-service role in its Privacy Help Center. The contact composer requires an explicit Gmail/overseas-processing choice before preparing a draft; the visitor still chooses whether to send it. Submission replies through Gmail require the submitter’s separate opt-in. Review and publication can proceed without that contact choice. The assessed transfer basis for this minimal own-contact/correspondence route is consent under POPIA section 72(1)(b); it does not replace operator contracts where applicable or authorise bulk exports and third-party private data. These role and transfer assessments must be revisited if the workflow changes.

Security and retention

The design limits public data to reviewed listing fields, keeps the passport on each visitor’s device and requires authorised access to the submission queue. Visitors should not submit information if their browser reports an insecure connection. The adopted routine removes rejected/withdrawn private records within 90 days after the decision or completed withdrawal handling; accepted private records are reviewed after 12 months and unnecessary details removed. Deletion is reviewed monthly, with documented lawful exceptions. See the privacy notice for further retention details. No advertising tracker, cloud passport account or paid AI service is enabled.

Availability and updates

This manual is available on this website. To inspect the manual at the contact premises, arrange a suitable time using the telephone, email or postal details above. Copies may be requested subject to any applicable fee. Access to private records follows the request process above; arranging inspection of the manual does not grant access to private records. The operator will review the manual when contact details, record categories or processing arrangements change. Source documents: Regulator’s private-body template and PAIA.