Andy Good PAIA Manual

1. Private body

Name: Andrew James Good trading as Andy Good
Legal status: Sole proprietor
Head of private body: Andrew James Good
Information Officer: Andrew James Good

Physical and postal address:
2 Hills Avenue
Ballito
South Africa
4339

Telephone: +27 63 598 1360
Email: letschat@andygood.me
Website: andygood.me

2. Purpose

This manual explains the categories of records held by Andy Good, records that may be publicly available, how a person can request access to records and how personal information is processed and protected.

3. PAIA Guide

The Information Regulator publishes a guide explaining how PAIA works and how people can exercise their rights.

The guide and prescribed PAIA forms are available from the Information Regulator.

4. Records available without a PAIA request

Where published on andygood.me, records such as website content, service information, articles and insights, the Privacy Policy, Website Terms and this PAIA Manual may be accessed without submitting a formal PAIA request.

5. Relevant legislation

Records may be created or retained under legislation including PAIA, POPIA, the Income Tax Act, Tax Administration Act, Value-Added Tax Act where applicable, Consumer Protection Act and Electronic Communications and Transactions Act.

6. Categories of records

Records held may include prospective-client enquiries and correspondence; meeting records; proposals and quotations; client agreements, scopes and project materials; content, research, strategic work and reports; invoices and financial records; tax and administrative records; supplier and service-provider records; website, AI Lab and technical records; server and security information; privacy and compliance records; and intellectual-property records.

7. Personal information

Personal information may be processed to respond to enquiries, provide requested AI Lab outputs, evaluate potential work, arrange meetings, prepare proposals, perform client services, communicate with clients, administer the business, operate and secure the website and comply with legal obligations.

Further information appears in the Privacy Policy.

8. Categories of data subjects

Data subjects may include prospective clients, clients, client personnel, website visitors, AI Lab users, suppliers, service providers and professional contacts.

Information processed depends on the relationship and may include identity and contact information, professional information, correspondence, project information, billing records and limited technical website data.

9. Recipients

Personal information may where reasonably necessary be supplied to categories of recipients including hosting and infrastructure providers, email providers, cloud and collaboration services, AI providers, accounting or professional advisers, and authorities where disclosure is legally required.

10. Cross-border processing

Because the business operates internationally and uses cloud services, information may be processed outside South Africa.

International transfers will be handled in accordance with section 72 of POPIA and other applicable requirements.

11. Security

Reasonable technical and organisational measures are used according to the nature of the information and foreseeable risks.

These may include access controls, strong authentication, secure infrastructure, restricted access, updates, backups, provider reviews, data minimisation and incident-response procedures.

12. Requesting access

A request for access to a record must be made using the prescribed PAIA Form 2: Request for Access to Record.

Requests should be sent to:

Andrew James Good
letschat@andygood.me

The request must provide enough information to identify the requested record and requester and contain the information required by PAIA.

Applicable prescribed fees may apply.

13. Availability

This PAIA Manual is available free of charge:

• on andygood.me
• by request to letschat@andygood.me
• for inspection at the principal place of business during normal business hours by prior arrangement
• to the Information Regulator where required

14. Updates

This manual will be reviewed when the records, processing activities or legal obligations of the business materially change.

Issued by:

Andrew James Good
Head of private body and Information Officer