PAIA manual
1. About Lefty23 (Pty) Ltd
Lefty23 (Pty) Ltd is a private company registered in South Africa. It designs, builds and operates software for the web: online information services and tools of its own, and websites and web applications built and maintained for other businesses. It is a private body for the purposes of PAIA.
2. Information Officer
- Information Officer
- The director of Lefty23 (Pty) Ltd, who is the head of the private body in terms of section 1 of PAIA
- privacy@lefty23.co.za
- Postal and street address
- 19 Meadow Circle, Wheatfields Estate, Durbanville, Cape Town, 7560. Requests under PAIA are accepted by email.
- Information Regulator registration
- 2026-066332
- Website
- lefty23.co.za
No deputy Information Officer has been appointed.
3. The Regulator's guide
The Information Regulator has published a guide in terms of section 10 of PAIA on how to use the Act. It is available in all official languages from the Regulator: website inforegulator.org.za, email enquiries@inforegulator.org.za, telephone 010 023 5200, physical address Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191, postal address P.O. Box 31533, Braamfontein, Johannesburg, 2017.
4. Records automatically available
No notice has been published in terms of section 52(2) of PAIA. The content of the company's public websites is available to anyone without a request under PAIA.
5. Records available in terms of other legislation
Records are kept, and may be requested where the relevant Act allows, in terms of the Companies Act 71 of 2008, the Income Tax Act 58 of 1962, the Value-Added Tax Act 89 of 1991, the Electronic Communications and Transactions Act 25 of 2002, the Consumer Protection Act 68 of 2008 and the Protection of Personal Information Act 4 of 2013.
6. Records held by the company
| Subject | Records |
|---|---|
| Company and statutory | Memorandum of incorporation, registration certificate, CIPC filings, tax registrations and returns |
| Financial | Bank records, invoices, receipts, supplier agreements, accounting records |
| Customers and business partners | Agreements, correspondence, billing records for businesses that list on or license data from the company's websites |
| Website users | Server and security logs, analytics data, submissions made through forms on the company's websites, correspondence |
| Published datasets | Compiled public information about schools, suburbs, businesses and similar subjects, with source records |
| Technical | Source code, infrastructure configuration, operational logs |
7. Processing of personal information
Purpose. To operate the company's websites, respond to enquiries, verify and publish business listings submitted by their owners, bill customers, comply with law and protect the websites against abuse.
Categories of data subjects and information. Website visitors (IP address, browser and usage data); people who contact the company or submit a form (name, email address, telephone number, message content); representatives of customers and business partners (name, role, contact details, billing details); suppliers (contact and payment details).
Recipients. Service providers that host, deliver email for, secure or process payments for the company's websites, each acting under contract. Personal information is not sold and is not shared with third parties for their own marketing.
Cross-border transfers. Some service providers (hosting, content delivery, email, analytics) store data outside South Africa, in the European Union and the United States, under their own data protection commitments as permitted by section 72 of POPIA.
Security. Access to systems is limited to those who need it, protected by strong authentication, encrypted in transit, and logged. Personal information is retained only for as long as the purpose requires or the law demands.
8. How to request access to a record
- Complete Form 2 (Request for Access to Record) prescribed by the Regulator, available from inforegulator.org.za, and send it to privacy@lefty23.co.za. Requests by email are accepted; if you need to post a request, ask for the postal address at the same email.
- Give enough detail to identify the record, state the form of access you want, and give your contact details. State which right you are seeking to exercise or protect and why the record is required for that purpose: section 50(1)(a) of PAIA allows access to a private body's records only on that basis. If you request on behalf of someone else, include proof of your authority.
- A request fee of R140 is payable before the request is processed. Access fees are then charged at the rates in the 2021 PAIA regulations: R2 per photocopied or printed A4 page, R145 per hour of search and preparation beyond the first hour, capped at R435, with a deposit of one third of the access fee where the search will take more than six hours. Section 54 of PAIA provides no exemption from the request fee for a person requesting a record about themselves from a private body. Asking us to confirm whether we hold personal information about you is a separate right under section 23(1)(a) of POPIA and is free of charge.
- We respond within 30 days of receiving a complete request, which may be extended once by up to 30 days where the Act allows.
- If your request is refused, you may lodge a complaint with the Information Regulator using Form 5 (PAIAComplaints@inforegulator.org.za), or apply to court.
9. Availability of this manual
This manual is published at lefty23.co.za/paia/, is available on request by email to privacy@lefty23.co.za, and is available to the Information Regulator on request. It is reviewed and updated as the company's operations change.