Calfame and Co
Registration Number: 2022 / 566184 / 07
This manual was prepared in accordance with section 51 of the Promotion of Access to Information Act,
2000 (“PAIA”) and to address requirements of the Protection of Personal Information Act, 2013 (“POPIA”)
- INTRODUCTION
- NATURE OF THE BUSINESS
- COMPANY CONTACT INFOMATION
- SECTION 10 GUIDE ON HOW TO USE PAIA.
- APPLICABLE LEGISLATION
- CATEGORIES OF RECORDS
- ACCESS TO RECORDS
- PRESCRIBED FEES
- PROCESSING OF PERSONAL INFORMATION
- CATEGORIES OF RECIPIENTS WHO RECEIVE DATA FOR PROCESSING.
- TRANSBORDER FLOWS OF PERSONAL INFORMATION
- GENERAL DESCRIPTION OF INFORMATION SECURITY MEASURES
- REMEDIES AVAILABLE IF REQUEST FOR INFORMATION IS REFUSED
- AVAILABILITY OF THIS MANUAL (SECTION 51(3) OF THE ACT)
- POPIA FORMS
- INTRODUCTION
1.1 PAIA gives third parties (“Requesters”) the right to approach private bodies and the government to request information held by them, which is required in the exercise and/or protection of any rights. On request, the private body is obliged to release such information unless PAIA expressly states that the records containing such information may or must not be released.
1.2 This manual informs Requesters of the procedural and other requirements which a request must meet as prescribed by the PAIA.
1.3 Should Requesters require assistance, they are requested to contact Calfame And Co’s Information Officer (details below) in respect of the use of this manual or requesting documents or information from Calfame and Co
1.4 The manual may be amended from time to time and the latest version will be made available online.
Date | Version | Description | Author |
January 2023 | 1. | Compliance | Information officer |
2.NATURE OF THE BUSINESS
Calfame And Co is a private company carrying on business as an online retailer.
3.COMPANY CONTACT INFOMATION
Managing | Katleho Makopo (CEO) |
Information Officer | Bangiswani Makopo |
Physical Address | 1 Wedgewood Link Rd, Bryanston, Johannesburg, 2191 |
Postal Address | TBC |
Tel | 072 845 6023 |
Email address of | |
Website | www.calfame.co |
- SECTION 10 GUIDE ON HOW TO USE PAIA
4.1 The Act grants a Requester access to records of a private body, if the record is required for the exercise or protection of any rights. If a public body lodges a request, the public body must be acting in the public interest
4.2 Requests in terms of the Act shall be made in accordance with the prescribed procedures, at the rates provided. The forms and tariff are dealt with in paragraphs 6 and 7 of the Act.
4.3 Requesters are referred to the Guide in terms of Section 10 which has been compiled by the South African Human Rights Commission, which will contain information for the purposes of exercising Constitutional Rights. The Guide is available from the SAHRC
4.4 Any enquiries regarding this guide and its contents should be directed to:
The South African Human Rights Commission: | The Information Regulator (South Africa) |
PAIA Unit (the Research and | SALU Building, 316 Thabo Sehume Street, Pretoria |
5.APPLICABLE LEGISLATION
Calfame And Co keeps records/information in accordance with inter alia the following pieces of legislation:
LIST OF LEGISLATION | ACT NO. |
Basic Conditions of Employment Act | 75/1997 |
Broad Based Black Economic Empowerment Act | 53/2003 |
Companies Act | 71/2008 |
Competition Act | 89/1998 |
Compensation for Occupational Injuries and Diseases Act | 130/1993 |
Consumer Protection Act | 68/2008 |
Copy Right Act | 98/1978 |
Customs and Excise Act | 91/1964 |
Electronic Communications Transactions Act | 25/2002 |
Employment Equity Act | 55/1998 |
Import and Export Control Act | 45/1963 |
Income Tax Act | 95/1967 |
Insolvency Act | 24/1936 |
Intellectual Property Laws Amendment Act | 38/1997 |
Labour Relations Act | 66/1995 |
Liquor Act | 59/2003 |
Merchandise Marks Act | 17/1941 |
Occupational Health and Safety Act | 85/1993 |
Price Control Amendment Act | 80/1967 |
Promotion of Access to Information Act | 2/2000 |
Skills Development Act | 97/1998 |
Skills Development Levies Act | 9/1999 |
Trade Marks Act | 194/1993 |
Unemployment Insurance Act | 63/2001 |
Value Added Tax Act | 89/1991 |
6.CATEGORIES OF RECORDS
RECORDS | SUBJECT |
Public Affairs |
|
Financial |
|
Human Resources |
|
Marketing |
|
Admin & General |
|
Customer |
|
7.ACCESS TO RECORDS
7.1 To facilitate the processing of your request, kindly:
7.1.1 Use the prescribed Form C, available on the website of SAHRC at www.sahrc.org.za and https://www.justice.gov.za/forms/paia/J752_paia_Form%20C.pdf
7.1.2 Address your request to the Information Officer;
7.1.3 Provide sufficient details to enable Calfame And Co to identify:
7.1.3.1 The record/s requested;
7.1.3.2 The requester;
7.1.3.3 The form of access required;
7.1.3.4 The postal address or fax number of the requester (in the Republic) or if the requester wishes to be informed of the decision in any manner (in addition to written) the manner and particulars thereof;
7.1.3.5 The right which the requester is seeking to exercise or protect with an explanation of the reason the record is required to exercise or protect the right.
7.1.4 All requests will be forwarded to the information Officer immediately and within no more than 24 hours of receipt.
8.PRESCRIBED FEES
The following applies to requests (other than personal requests):
8.1 A requester is required to pay the prescribed fees before a request will be processed;
8.2 If the preparation of the record requested requires more than the prescribed hours, a deposit shall be paid (of not more than one third of the access fee payable if the request is granted);
8.3 A requester may lodge an application with a court against the tender/payment of the request fee and/or deposit;
8.4 Records may be withheld until the fees have been paid;
8.5 The fee structure is available on the website of the SAHRC at https://www. sahrc.org.za/home/21/files/PAIA%20Notice%20on%20fees.pdf
9.PROCESSING OF PERSONAL INFORMATION
In terms of POPIA, personal information must be processed for a specified purpose. The purpose for which data is processed by Calfame And Co will depend on the nature of the data and the particular data subject. This purpose is ordinarily disclosed, explicitly or implicitly, at the time the data is collected. Please also refer to the Calfame And Co’s Privacy Policy https://www.Calfame.co/sp-privacy-policy/ for further information.
9.1 Purpose of Processing: Calfame And Co uses Personal Information under its care in the following ways:
9.1.1 Registering new customers.
9.1.2 Processing and delivering customer orders.
9.1.3 Managing your relationship with customers
9.1.4 Enabling customers to participate in promotions, competitions and surveys
9.1.5 Improving our website, applications, products and services
9.1.6 Recommending/advertising products or services which may be of interest to customers
9.1.7 Detecting fraud.
9.1.8 Staff administration;
9.1.9 Keeping of accounts and records;
9.1.10 Complying with legislation
9.2 Categories of Data Subjects and their Personal Information: The Company may possess records relating to suppliers, shareholders, contractors, service providers, staff and customers:
ENTITY TYPE | PERSONAL INFORMATION |
Customers |
|
Suppliers -Juristic Persons / Entities or |
|
Contracted Service Providers |
|
Employees / Directors |
|
10.CATEGORIES OF RECIPIENTS WHO RECEIVE DATA FOR PROCESSING.
Calfame And Co may share information with any third parties in the following circumstances:
10.1 Sale of products and services: In order to deliver customer products and services purchased on our marketplace from third parties, we may be required to provide personal data to such third parties.
10.2 Working with third party service providers: We engage third parties to perform certain functions on our behalf. Examples include fulfilling orders for products or services, delivering packages, analyzing data, providing marketing assistance, processing payments, transmitting content, assessing and managing credit risk, and providing customer service.
10.3 Business transfers: As we continue to develop our business, we might sell or buy other businesses or services. In such transactions, customer information may be transferred together with other business assets.
10.4 Detecting fraud and abuse: We release account and other personal data to other companies and organizations for fraud protection and credit risk reduction, and to comply with the law.
10.5 When we share personal data with third parties we:
10.5.1 require them to agree to use your data in accordance with the terms of this Privacy and Cookie Notice, our Privacy Policy and in accordance with the law; and
10.5.2 only permit them to process personal data for specified purposes and in accordance with our instructions. We do not allow our third-party service providers to use personal data for their own purposes.
11.TRANSBORDER FLOWS OF PERSONAL INFORMATION
11.1 Calfame And Co may transfer data trans-border in order to store data with third party cloud storage providers and
11.2 Calfame And Co may share some or all customer Information with parent companies, subsidiaries, or other companies under common control with Calfame And Co, but who are located internationally.
11.3 When processing of personal information is carried out in other countries, we will take appropriate steps to ensure the provision of the same or a better level of protection of your personal information as that which is required in terms of South African law.
12.GENERAL DESCRIPTION OF INFORMATION SECURITY MEASURES
Calfame And Co employs up to date technology to ensure the confidentiality, integrity and availability of the Personal Information under its care. Measures include:
- Virus protection software and update protocols
- Access control (e.g. access to server rooms only with key or chip card, office rooms secured with alarm, cameras, security guards, firewalls, BYOD controls)
- Data integrity (e.g. user authorisations are restricted to specific tasks)
- Data encryption (e.g. cloud solution with encryption)
- Transmission control (e.g. using SSL certificate for websites)
- Confidentiality enforcement (e.g. password policies, non-disclosure agreements)
- Recoverability support (e.g. backups that are regularly checked for successful recovery)
- Training (e.g. privacy awareness training, information security training)
13.REMEDIES AVAILABLE IF REQUEST FOR INFORMATION IS REFUSED
13.1 Internal Remedies: Calfame And Co does not have an internal appeal procedure. As such, the decision made by the Information Officer pertaining to a request is final, and Requestors will have to exercise external remedies at their disposal if a request is refused, and the Requester is not satisfied with the response provided by the Information Officer.
13.2 External Remedies: A Requester that is dissatisfied with the Information Officer’s refusal to disclose information, may within 30 (thirty) days of notification of the decision, apply to a court for relief. Likewise, a third party dissatisfied with the Information Officer’s decision to grant a request for information, may within 30 (thirty) days of notification of the decision, apply to a court for relief. For purposes of the Act, courts that have jurisdiction over these applications are the Constitutional Court, the High Court or another court of similar status.
14.AVAILABILITY OF THIS MANUAL (SECTION 51(3) OF THE ACT)
14.1 This Manual is available for inspection at the offices of Calfame And Co free of charge.
14.2 This Manual can be downloaded from www.calfame.co
14.3 Copies of this Manual may be obtained upon payment of the prescribed fees at the offices of the Calfame And Co.
15.POPIA FORMS
15.2 Objection to the processing of personal information:
15.1.1 A data subject who wishes to object to the processing of personal information in terms of section 11(3)(a) of the POPIA, must submit the objection to Calfame And Co on Form 1 available here:
https://www.justice.gov.za/inforeg/docs/20181214-gg42110-rg1089 7-gon1383-POPIregister.pdf
15.1.2 Calfame And Co shall render such reasonable assistance as is necessary, free of charge, to enable the data subject to make an objection on Form 1.
15.2 Request for correction or deletion of personal information or destruction or deletion of record of personal information:
15.2.1 A data subject who wishes to request a correction or deletion of personal information or the destruction or deletion of a record of personal information in terms of section 24(1) of the POPIA, must submit a request to the responsible party on Form 2.
https://www.justice.gov.za/inforeg/docs/20181214-gg42110-rg1089 7-gon1383-POPIregister.pdf
15.2.2 The responsible party, or a designated person, must render such reasonable assistance, as is necessary free of charge, to enable a data subject to complete Form 2.
This PAIA Manual is approved and signed by Chief Executive Officer of Calfame And Co