PAIA Manual

This manual is prepared for Strategic IT Advisory SA under section 51 of the Promotion of Access to Information Act 2 of 2000, read with the Protection of Personal Information Act 4 of 2013.

It explains what records may be held and how to request access. It is available free of charge on this website. A copy may also be requested by email.

• Name: Strategic IT Advisory SA
• Head: Gavin Perch
• Service area: Randburg, Gauteng, South Africa
• Email: hello@strategicitadvisory.co.za
• Website: www.strategicitadvisory.co.za

The Information Regulator publishes a guide explaining how to use PAIA and provides the prescribed request and outcome forms.

• PAIA guides
• PAIA forms

Subject to the nature and maturity of the business, records may include:

• Corporate governance, statutory, tax, accounting, banking, insurance, and financial records
• Client proposals, contracts, correspondence, project records, and deliverables
• CRM company and contact records, discovery notes, transcripts, and engagement history
• Assessments, responses, scores, findings, recommendations, reports, and roadmaps
• Evidence documents and metadata supplied or created during advisory engagements
• Microsoft 365 and Google Workspace consent, connection, aggregate posture, synchronisation, and detected-signal records
• Account, login, session, security-event, activity, automation, and email-delivery logs
• Supplier, operator, and professional adviser records
• Personnel and contractor records where applicable
• Policies, risk records, security records, and business continuity material
• Website, communications, marketing, and intellectual property records
• Personal information described in our Privacy Policy and POPIA Notice

Listing a category does not mean every record exists or must be disclosed.

Where applicable, records may be retained under legislation including PAIA, POPIA, the Companies Act, Income Tax Act, Tax Administration Act, Value-Added Tax Act, Basic Conditions of Employment Act, Labour Relations Act, Occupational Health and Safety Act, Electronic Communications and Transactions Act, and Consumer Protection Act.

This list is not exhaustive and depends on which laws apply to the business at the relevant time.

Public website content, service information, published legal notices, and other material voluntarily made public may be accessed without a formal request. Other records require the prescribed process.

Complete the prescribed request form and send it to the Head using the email above. Identify the record clearly, explain the right you seek to exercise or protect, state why the record is required for that purpose, and specify your preferred form of access.

Proof of identity or authority may be required. Prescribed fees may apply. A request may be refused on grounds permitted or required by PAIA, including protection of privacy, confidential commercial information, safety, security, legally privileged material, or records that cannot reasonably be found.

We will decide a valid request within the period prescribed by PAIA, subject to any lawful extension, and communicate the outcome and applicable fee. A requester dissatisfied with a decision may approach a court or submit a complaint to the Information Regulator where the legislation permits.

Information Regulator complaints portal

Our POPIA Notice and Privacy Policy describe the purposes of processing, categories of data subjects and information, recipients, cross-border processing, safeguards, and data subject rights.