Promotion of Access to Information Act
PAIA manual.
Access, explained.
A section 51 publication framework explaining how to request records from DoenIT and how personal information is processed. This draft requires organisation-wide confirmation before it can be treated as the completed PAIA manual.
01 — Private body
Details of the body and Information Officer.
| Name used by the website | DoenIT |
|---|---|
| Information Officer | |
| General enquiries | web@doenit.com |
| Website | https://doenit.com/ |
The registered identity and address particulars ordinarily included in a completed private-body PAIA manual have not been included in this limited website draft.
02 — How PAIA works
The Information Regulator’s guide.
The Information Regulator publishes a guide explaining how to use PAIA, what assistance is available, the remedies provided by law and how fees operate. It is available from the Regulator’s website and, on request, from the Information Officer where required.
03 — No formal request
Records automatically available.
The following public records may be accessed without submitting a formal PAIA request, subject to website availability and ordinary intellectual-property restrictions.
| Category | Examples | Access |
|---|---|---|
| Website and service information | Public service descriptions, articles and contact information | doenit.com |
| Privacy and legal publications | Privacy Notice, POPIA rights guide, Cookie Policy, Website Terms and this manual | doenit.com |
04 — Statutory records
Records maintained under other legislation.
Subject to applicability, records may be maintained under legislation such as POPIA, PAIA, the Companies Act, Electronic Communications and Transactions Act, Income Tax Act, Tax Administration Act, Value-Added Tax Act, Basic Conditions of Employment Act, Labour Relations Act, Occupational Health and Safety Act, Unemployment Insurance Act and Compensation for Occupational Injuries and Diseases Act.
05 — Subjects and categories
Records held by the body.
The public website is not used as a repository for employee records or client-company personnel records. Website enquiries are intended to be transmitted to Microsoft-hosted Exchange rather than retained as a separate website database. Because PAIA applies to the private body as a whole, the categories below must still be checked against records held in email, business systems, cloud services and offline storage.
| Subject | Possible organisation-wide record categories — confirm before approval |
|---|---|
| Corporate administration | Formation, governance, policies, registrations, statutory returns and insurance. |
| Finance and tax | Accounts, invoices, banking, tax, budgets, procurement and audit records. |
| Clients and projects | Enquiries, proposals, agreements, requirements, correspondence, project artefacts, support and billing records held outside the public website. |
| Suppliers and operators | Due diligence, contracts, instructions, security commitments and performance records. |
| People | [CONFIRM WHETHER EMPLOYEE, CONTRACTOR OR APPLICANT RECORDS ARE HELD ANYWHERE BY THE BUSINESS] |
| Technology and security | Asset, access, configuration, incident, backup, change and risk records. |
| Website | Public content; name and surname, contact number, email address and message submitted with an enquiry; and limited hosting or security logs. |
Access is not automatic merely because a category is listed. PAIA grounds for refusal, third-party procedures, confidentiality, privilege and other applicable protections may apply.
06 — POPIA disclosures
Processing of personal information.
Website purposes
Website personal information is processed to receive and respond to enquiries, consider possible work, operate and secure the website, meet legal duties and protect legal rights.
Website data subjects and information
| Data subject | Information |
|---|---|
| People making enquiries | Name and surname, contact number, email address and enquiry message. |
| Website users | Limited device, request, diagnostic and security-log information generated when the site is accessed. |
The organisation-wide categories of personal information processed outside the public website remain to be confirmed before this manual is approved.
Recipients
Website enquiries are delivered through Microsoft-hosted Exchange. Limited website information may also be processed by hosting and security providers, professional advisers, regulators or public authorities where lawful and necessary.
Cross-border transfers
Microsoft and other approved operators may process information through infrastructure or subprocessors outside South Africa. Where this occurs, DoenIT takes reasonable steps to apply a safeguard permitted by section 72 of POPIA. [CONFIRM THE RELEVANT MICROSOFT TENANT REGION, OTHER OPERATORS AND CONTRACTUAL SAFEGUARDS]
Security safeguards
Safeguards may include access control, authentication, encryption where appropriate, logging, backups, supplier controls and incident response. [CONFIRM THE SAFEGUARDS ACTUALLY IMPLEMENTED; DO NOT OVERSTATE]
07 — Procedure
How to request a record.
- Complete PAIA Form 2 (Request for Access to Record) or use the process permitted by the applicable regulations.
- Identify the record clearly, state the form of access required and provide the details needed for notices.
- If the request is made for another person, provide proof of authority and capacity.
- If relying on a right that requires access to a private body’s record, identify that right and explain why the record is required for its exercise or protection.
- Submit the request to the Information Officer using the revealed email address.
The Information Officer will process the request under PAIA, including applicable time periods, notices, fees, third-party procedures and grounds for refusal. A requester may use the remedies provided by PAIA, including an eligible complaint to the Information Regulator or court proceedings.
08 — Publication
Availability and updates.
Once the organisation-wide facts are completed and the manual is approved, the current version will be available free of charge on doenit.com. Requests for an accessible copy may be directed to the Information Officer.
Draft version: 0.9
Prepared: 25 August 2026
Status: Completion and approval pending