PAIA manual
Prepared under section 51 of the Promotion of Access to Information Act 2 of 2000 (PAIA), as amended by the Protection of Personal Information Act 4 of 2013 (POPIA). Last updated: 16 October 2026. Reviewed at least once a year.
1. About this manual
PAIA gives everyone the right to ask for records held by a private body when the record is needed to exercise or protect a right. This manual explains what records Ticked holds and how to ask for them. It is available on this website, at our address below during business hours, and free of charge by email on request.
2. Contact details
| Private body | Troye Iyer, a sole proprietor trading as Ticked |
|---|---|
| Head of the private body and information officer | Troye Iyer |
| Physical address | Future Found Sanctuary, Hout Bay, 7806 |
| Telephone | +27 81 704 6223 |
| troyeiyer@gmail.com | |
| Website | bestticked.com |
3. The Information Regulator's guide
The Information Regulator publishes a guide on how to use PAIA and POPIA, in all official languages. You can get it from the Regulator's website, inforegulator.org.za, or ask the Regulator for a copy: enquiries@inforegulator.org.za, 010 023 5200.
4. Records available without a request
Everything published on our website, including our plans and prices, the Deadlines and Tips pages, our privacy policy, terms of service and this manual.
5. Records we keep because another law requires them
- Tax Administration Act 28 of 2011 and Income Tax Act 58 of 1962: invoices, payment records and financial records.
- Value-Added Tax Act 89 of 1991: tax invoices and VAT records, if we are registered for VAT.
- Electronic Communications and Transactions Act 25 of 2002 and Consumer Protection Act 68 of 2008: the terms our customers agreed to and records of transactions.
- Protection of Personal Information Act 4 of 2013: records of consent to direct marketing, and of objections and opt-outs.
- Basic Conditions of Employment Act 75 of 1997, Unemployment Insurance Act 63 of 2001 and Compensation for Occupational Injuries and Diseases Act 130 of 1993: employment records, if we employ staff.
6. Subjects and categories of records we hold
| Subject | Records |
|---|---|
| Customers | WhatsApp number, language, business profile (staff, business type, company registration month, sales range), plan, invoices, payments, cancellations, reminders sent and marked done, messages. |
| Waitlist sign-ups and sales contacts | Email address, WhatsApp number, business type, consent records, notes of contact. |
| Website visitors who use the chat assistant | Questions it could not answer (with phone numbers and email addresses taken out), messages people chose to leave, counts of use. |
| Partners (bookkeepers and accountants) | Contact details, referred customers, tax questions passed on with the customer's consent, commission records. |
| Suppliers and service providers | Agreements, invoices and contact details. |
| The business itself | Financial and tax records, bank statements, policies, the rule list and its sources. |
7. How we process personal information (POPIA)
- Purposes: sending the reminders, checklists and documents customers signed up for; answering questions; billing and record-keeping; contacting people who asked to hear from us; passing tax questions to a referring bookkeeper when the customer agreed; security.
- Categories of people and information: as in section 6. We do not process special personal information or information about children.
- Recipients: Meta (WhatsApp), Anthropic (AI), xneelo (hosting, in South Africa), Amboras (website), Resend (email), our bank, Paystack (online payments), and a customer's bookkeeper only with the customer's consent. See our privacy policy.
- Information sent outside South Africa: Meta, Anthropic, Resend and Amboras may process information outside South Africa, only where section 72 of POPIA allows it.
- Security: access codes, encrypted connections, limited access, nightly backups, verification that WhatsApp messages come from Meta, and card payments only on the secure page of Paystack.
8. How to ask for a record
- Fill in Form 2 (Request for access to a record), available from the Information Regulator's website.
- Email it to our information officer at troyeiyer@gmail.com, or deliver it to our address. Say which record you want, how you would like to receive it, and which right you need it for.
- We may ask you to pay the request and access fees set in the PAIA regulations. We tell you the amount before we do any work.
- We decide within 30 days, and tell you if we need up to 30 days more, as PAIA allows. If we refuse, we give the reason under PAIA.
- If you disagree with our decision, you may complain to the Information Regulator or apply to court, within the time PAIA allows.
To ask for your own personal information, you do not need this form: email us, or for WhatsApp details reply on WhatsApp, and we will send it to you (see our privacy policy).