PAIA manual

Last updated 12 November 2026

Prepared in terms of section 51 of the Promotion of Access to Information Act 2 of 2000 (as amended).

Private body: Hadeda Web Designs (Pty) Ltd, registration number 2026/910708/07, trading as Hadeda Web Design. In this manual “we” and “us” mean this company.
Date of compilation: 12 November 2026
Date of revision: not yet revised

1. Acronyms and abbreviations

Guide: the Guide on how to use PAIA, published by the Regulator
PAIA: Promotion of Access to Information Act 2 of 2000, as amended
POPIA: Protection of Personal Information Act 4 of 2013
Regulator: Information Regulator
Republic: Republic of South Africa

2. Purpose of this manual

This manual is useful for the public to:

check the categories of records we hold that are available without a person having to submit a formal PAIA request;
understand how to make a request for access to one of our records, through a description of the subjects on which we hold records and the categories of records held on each subject;
know which of our records are available in accordance with any other legislation;
find the contact details of the Information Officer and the Deputy Information Officer, who will assist the public with the records they intend to access;
know about the Guide on how to use PAIA, as updated by the Regulator, and how to obtain access to it;
know whether we process personal information, the purpose of that processing, and the categories of data subjects and of the information relating to them;
know the recipients or categories of recipients to whom the personal information may be supplied;
know whether we plan to transfer or process personal information outside the Republic, and the recipients or categories of recipients to whom it may be supplied; and
know whether we have appropriate security measures to ensure the confidentiality, integrity and availability of the personal information we process.

3. Key contact details for access to information

3.1 Information Officer

Name: Henard Gertzen, Director
Telephone: 060 509 6020
Email: henard@hadeda.dev
Fax: none

3.2 Deputy Information Officer

Name: John Redman, Director
Telephone: 076 935 4005
Email: john@hadeda.dev
Fax: none

3.3 Access to information: general contact

Email: info@hadeda.dev

3.4 Head office

Physical address: 18 Lemonwood Street, Highveld, Centurion, Gauteng, 0144
Postal address: the same as the physical address
Telephone: 076 935 4005
Email: info@hadeda.dev
Website: hadeda.dev

We do not have an office that is open to the public. Please contact us by email first.

4. The Guide on how to use PAIA, and how to get it

4.1 The Regulator has, in terms of section 10(1) of PAIA, updated and made available the revised Guide on how to use PAIA, in an easily comprehensible form and manner, as may reasonably be required by a person who wishes to exercise any right contemplated in PAIA and POPIA.

4.2 The Regulator makes the Guide available in each of the official languages and in braille.

4.3 The Guide contains the description of:

the objects of PAIA and POPIA;
the postal and street address, phone and fax number and, if available, electronic mail address of the Information Officer of every public body, and of every Deputy Information Officer of every public and private body designated in terms of section 17(1) of PAIA and section 56 of POPIA;
the manner and form of a request for access to a record of a public body contemplated in section 11 of PAIA, and for access to a record of a private body contemplated in section 50 of PAIA;
the assistance available from the Information Officer of a public body in terms of PAIA and POPIA;
the assistance available from the Regulator in terms of PAIA and POPIA;
all remedies in law available regarding an act or failure to act in respect of a right or duty conferred or imposed by PAIA and POPIA, including the manner of lodging an internal appeal, a complaint to the Regulator, and an application with a court against a decision by the Information Officer of a public body, a decision on internal appeal, a decision by the Regulator or a decision of the head of a private body;
the provisions of sections 14 and 51 of PAIA requiring a public body and a private body, respectively, to compile a manual, and how to obtain access to a manual;
the provisions of sections 15 and 52 of PAIA providing for the voluntary disclosure of categories of records by a public body and a private body, respectively;
the notices issued in terms of sections 22 and 54 of PAIA regarding fees to be paid in relation to requests for access; and
the regulations made in terms of section 92 of PAIA.

4.4 Members of the public can inspect or make copies of the Guide at the office of the Regulator during normal working hours, and at our head office by appointment (see 4.6).

4.5 The Guide can also be obtained:

from the Regulator’s PAIA page, at inforegulator.org.za/paia; or
on request to our Information Officer, by email to info@hadeda.dev. The Regulator’s Form 1 (“Request for a copy of the Guide from an Information Officer”) may be used.

4.6 We keep a copy of the Guide in English and in Afrikaans for inspection. Because we have no office that is open to the public, please email us at info@hadeda.dev to arrange a time during normal office hours. On a written request we will send you the Guide in the official languages you ask for. We do not charge for copies or for inspection.

5. Records that are available without a request

We have not made a voluntary description of categories of records under section 52(1) of PAIA. The records below are available on our website, hadeda.dev, to anyone, without a PAIA request and at no charge:

our privacy policy;
this PAIA manual;
descriptions of our services and of how we work; and
our contact details.

Other records may be requested as section 7 explains.

6. Records that are available in accordance with other legislation

Company records that the Companies Act 71 of 2008 requires us to keep, such as our memorandum of incorporation and our registers of directors and of securities: available to the persons, and in the manner, that the Companies Act provides.
This manual: Promotion of Access to Information Act 2 of 2000.

7. Subjects on which we hold records, and the categories of records held on each

We hold, or will hold in the ordinary course of our business, records on the subjects below. We are a new company, so some of them do not exist yet.

Company and governance: registration documents and memorandum of incorporation; registers of directors and of securities; resolutions and minutes of the directors.
Finance and tax: accounting records; bank records; quotations and invoices; tax registrations, returns and correspondence.
Clients and enquiries: enquiries received through our website or by email, and our replies; quotations; agreements; project files and correspondence.
Suppliers and service providers: agreements, accounts and correspondence.
Website and systems: the website’s source files and content; records of our domain, hosting and email accounts.
Compliance: our privacy policy; this manual; the registration of our Information Officer; requests received in terms of PAIA or POPIA, and our answers to them.

A record being listed here does not mean that access to it will be given. Each request is decided in terms of PAIA. The grounds on which access must or may be refused are in Chapter 4 of Part 3 of PAIA (sections 62 to 70). The main ones protect the privacy of other people, the commercial and confidential information of other businesses, the safety of people and property, records that are privileged in legal proceedings, and our own commercial information.

How to ask for a record

Complete the Regulator’s Form 2 (“Request for access to record”). It is on the Regulator’s PAIA page, at inforegulator.org.za/paia.
Email the form to info@hadeda.dev, for the attention of our Information Officer. Describe the record in enough detail for us to find it. Say which right you want to exercise or protect, and why you need the record to do so. If you ask on behalf of someone else, send proof that you may act for that person. The form asks for the other details PAIA requires, such as who you are, your address and how you want to receive the record.
Fees are set by regulation. At the date of this manual the request fee is R140.00. The Regulator’s request form says the request fee does not apply to a record that contains your own personal information, and we will not ask for it in that case. If your request is granted you may also pay for the time spent searching for and preparing the record, beyond the first hour, and for copies. If we think that searching for and preparing the record will take more than six hours, we may ask for a deposit of up to one third of the access fee. We repay the deposit if we refuse your request. We may keep the record back until the fees are paid. We will tell you in writing what is payable before we do further work. The Regulator publishes the current fees at inforegulator.org.za/paia-fees-structure-2.
We will decide on your request, and tell you our decision, within 30 days of receiving it. PAIA lets us extend this once, by up to 30 days, for example if your request covers a large number of records. If we extend the period we will tell you within the first 30 days, and give our reasons. If we do not decide within the time allowed, PAIA treats that as a refusal.
If we refuse your request we will give you our reasons, including the sections of PAIA we rely on. If we cannot find a record, or it does not exist, we will tell you so in an affidavit or affirmation that explains what we did to look for it.
There is no internal appeal against the decision of a private body. If you are unhappy with our decision to refuse, with a fee we ask for, or with an extension of time, you may lodge a complaint with the Regulator, on its Form 5, within 180 days of our decision. If you are still not satisfied after that, you may apply to a court.

To ask whether we hold personal information about you, to see it or to have it corrected, email us, as our privacy policy explains. We do not charge for that. We will ask you to confirm who you are, and if a form is needed we will help you complete it.

8. Processing of personal information

8.1 Purpose of processing personal information

We process personal information:

to reply to enquiries and to prepare quotations;
to do the work our clients ask for, and to invoice and keep accounts for it;
to deal with our suppliers and service providers;
to keep our website and our mailboxes safe from abuse; and
to meet our duties under company, tax and information law.

8.2 Categories of data subjects, and the personal information that may be processed

People who send us an enquiry: name; email address; phone number and business name, if given; the content of their message. Their IP address is used for the spam check and to limit abuse.
Clients: names and contact details; business and billing details; correspondence; material they give us for their project.
Suppliers and service providers: names and contact details; registration and tax numbers; billing and payment details.
Directors and shareholders: names, addresses and contact details, and the identity details that company law requires.

We do not have employees.

8.3 Recipients, or categories of recipients, to whom personal information may be supplied

The details sent through our contact form go only to our directors and to the two service providers named below. The other recipients apply only to the records of clients and suppliers.

Our directors.
Cloudflare, Inc., which hosts our website, runs the spam check on the contact form and delivers our email, and Google LLC, whose Gmail service stores it.
An accountant or other professional adviser, if we appoint one, for billing and tax records.
Public authorities, where the law requires it, such as the South African Revenue Service, the Companies and Intellectual Property Commission, the Regulator or a court.

8.4 Planned transborder flows of personal information

Cloudflare, Inc. and Google LLC are based in the United States of America. They may store or process the personal information described above, including enquiries, email and technical information, in the United States and in other countries. We cannot always tell which other countries.

8.5 General description of information security measures

Our website is served over an encrypted connection.
Our website does not store enquiries. They are sent by email to our mailboxes.
The contact form is protected by a spam check and by a limit on how many messages one connection can send.
The log messages our website writes do not record what a person types into the contact form.
Only our directors can sign in to the mailboxes that receive enquiries, to our hosting account and to the code repository that builds our website.
Two-step sign-in is switched on for our mailboxes and for our hosting account.

9. Availability of this manual

A copy of this manual is available:

on our website, at hadeda.dev/paia-manual;
by email, on request to info@hadeda.dev, at no charge;
for inspection at our physical address during normal business hours, by appointment made by email, because we have no office that is open to the public; and
to the Regulator, on request.

A printed copy is available on request at the prescribed fee, which at the date of this manual is R2.00 for each A4 page or part of a page.

10. Updating of this manual

We will review this manual regularly, and update it whenever our details or the records we hold change.

Issued by

Henard Gertzen
Director and Information Officer