PAIA manual

Prepared under section 51 of the Promotion of Access to Information Act 2 of 2000 (PAIA) and section 17 of the Protection of Personal Information Act 4 of 2013 (POPIA). Last updated: 3 November 2026

1. About Wozzo

Wozzo is a one-person web agency. It is a trading name of Garason Dunston Griesel, a sole proprietor. It builds and runs websites and SMS automations for small local businesses.

2. Contact details of the head of the private body

As a sole proprietor, the owner is the head of the private body and also the Information Officer.

Name	Garason Dunston Griesel
Information Officer registration no.	2026-070349
Street and postal address	73 Underwood Road, Pinetown, 3610
Phone and WhatsApp	078 435 3299
Email	hello@wozzo.co.za

3. The Information Regulator's guide

The Information Regulator has published a guide on how to use PAIA and POPIA, in all official languages. You can get it from the Information Regulator's website, or ask us for a copy.

4. Records available without a request

• Our privacy policy
• Our legal information page and prices
• Our service terms and operator agreement
• This manual

5. Records we keep under other laws

Law	Records
Income Tax Act 58 of 1962 and Tax Administration Act 28 of 2011	Invoices, payment records, expense records
Protection of Personal Information Act 4 of 2013	Privacy policy, operator agreements, records of incidents, opt-out lists
Consumer Protection Act 68 of 2008 and Electronic Communications and Transactions Act 25 of 2002	Client terms and records of acceptance

6. Subjects and categories of records we hold

• Clients: sign-up details, accepted terms, payment records, messages, website content and change requests.
• Prospects: public business details from Google listings or Facebook posts, messages, do-not-contact list.
• Clients' customers (held as operator for each client): website enquiries, review-request numbers, SMS records, opt-outs.
• Business records: accounts, expenses, supplier agreements and data processing agreements.

7. How we process personal information

Purposes: to find and contact local businesses once to ask whether they'd like a free preview website; to build previews; to provide and bill our service; to run our clients' websites and SMS automations on their behalf; and to meet tax and legal duties.

Data subjects	Information
Prospects (business owners)	Business name, trade, contact name, phone or WhatsApp number, address, public listing details, messages
Clients	Business and contact details, legal form, payment records, messages
Clients' customers	Name, phone number, email, enquiry message, SMS records, hashed opt-outs

Who receives it: our service providers (Supabase, Netlify, Anthropic, BulkSMS, PayFast, Google, WhatsApp, Zoho Mail), only as needed to provide our service, and authorities where the law requires it. We don't sell personal information.

Information leaving South Africa: some providers store or access information in the United Kingdom and the United States. We only use providers bound by law or by a data processing agreement to protect it to a standard similar to POPIA (section 72).

Security: two-step login on every account, access rules in the database, encrypted connections, secret keys kept on the server only, password-protected and encrypted devices, and a review of these measures at least every 6 months.

8. How to request access to a record

1. Fill in Form 2 (request for access to a record of a private body), available on the Information Regulator's website or from us.
2. Send it to the Information Officer by email or by hand, at the details in section 2.
3. We may ask you to prove who you are, and that you have authority if you ask on someone else's behalf.
4. We reply within 30 days. We may extend this once by up to 30 days if the request is large, and we'll tell you why.
5. A request fee and an access fee may apply, at the amounts set in the PAIA Regulations. We tell you the fee before we do the work. If you ask for your own personal information, you don't pay the request fee.
6. We may refuse access only on the grounds PAIA allows (for example, to protect someone else's privacy or confidential commercial information). If we refuse, we tell you why and how to complain to the Information Regulator or apply to court.

9. Your POPIA rights

You may also ask us, free of charge, what personal information we hold about you, to correct or delete it, or to stop using it (your right to object). See our privacy policy.

10. Availability

This manual is on our website and available free of charge at our address.