PAIA Manual of JARMS (PTY) LTD

Registration Number: 2026/038621/07

Prepared and compiled in accordance with Section 51 of the Promotion of Access to Information Act 02 of 2000 (as amended)

Date of revision: 17/06/2026

Index

List of acronyms and abbreviations

Purpose of the PAIA Manual

To promote effective governance of private bodies, it is necessary to ensure that everyone is empowered and educated to understand their rights in terms of PAIA, in order for them to exercise their rights in relation to public and private bodies.

Wherever reference is made to “Private Body” in this manual, it will refer to JARMS.

This PAIA Manual is useful for the public to –

check the categories of records held by a body which are available without a person having to submit a formal PAIA request;

have a sufficient understanding of how to make a request for access to a record of the body, by providing a description of the subjects on which the body holds records and the categories of records held on each subject;

know the description of the records of the body which are available in accordance with any other legislation;

access all the relevant contact details of the Information Officer and Deputy Information Officer who will assist the public with the records they intend to access;

know the description of the guide on how to use PAIA, as updated by the Information Regulator and how to obtain access to it;

know if the body will process personal information, the purpose of processing of personal information and the description of the categories of data subjects and of the information or categories of information relating thereto;

know the description of the categories of data subjects and of the information or categories of information relating thereto;

know the recipients or categories of recipients to whom the personal information may be supplied;

know if the body has planned to transfer or process personal information outside the Republic of South Africa and the recipients or categories of recipients to whom the personal information may be supplied; and

know whether the body has appropriate security measures to ensure the confidentiality, integrity and availability of the personal information which is to be processed.

Key contact details for access to information of the Private Body

Information Officer

Name: Michelle Toms

Telephone Number: 072 954 0250

E-mail address: michelle@jarms.co.za

Deputy Information Officer

Name: Michelle Toms

Telephone 072 954 0250

E-mail address: michelle@jarms.co.za

Access to information general contact

E-mail address: michelle@jarms.co.za

Head Office

Physical Address: Unit 2, 17 Bofor Circle, Epping Goodwood, Western

Cape, 7640

Postal Address: Unit 2, 17 Bofor Circle, Epping Goodwood, Western

Cape, 7640

Telephone Number:082 887 0668

E-mail Address: michelle@jarms.co.za

Website: WWW.

Guide on how to use PAIA and how to obtain access to the Guide

The Information Regulator has, in terms of section 10(1) of PAIA, as amended, updated, and made available the revised Guide on how to use PAIA (“Guide”), in an easily comprehensible form and manner, as may reasonably be required by a person who wishes to exercise any right contemplated in PAIA and POPIA.

The Guide is available in each of the official languages and in braille.

The aforesaid Guide contains the description of-

the objects of PAIA and POPIA;

the postal and street address, phone and fax number and, if available, electronic mail address of –

the Information Officer of every public body, and

every Deputy Information Officer of every public and private body designated in terms of section 17(1) of PAIA¹ and section 56 of POPIA²;

the manner and form of a request for-

access to a record of a public body contemplated in section 11³; and

access to a record of a private body contemplated in section 50⁴;

the assistance available from the Information Officer of a public body in terms of PAIA and POPIA;

the assistance available from the Information Regulator in terms of PAIA and POPIA;

all remedies in law available regarding an act or failure to act in respect of a right or duty conferred or imposed by PAIA and POPIA, including the manner of lodging-

an internal appeal;

a complaint to the Information Regulator; and

an application with a court against a decision by the information officer of a public body, a decision on internal appeal or a decision by the Information Regulator or a decision of the head of a private body;

the provisions of sections 14⁵ and 51⁶ requiring a public body and private body, respectively, to compile a manual, and how to obtain access to a manual;

the provisions of sections 15⁷ and 52⁸ providing for the voluntary disclosure of categories of records by a public body and private body, respectively;

the notices issued in terms of sections 22⁹ and 54¹⁰ regarding fees to be paid in relation to requests for access; and

the regulations made in terms of section 92¹¹.

Members of the public can inspect or make copies of the Guide from the offices of the public and private bodies, including the office of the Information Regulator, during normal working hours.

The Guide can also be obtained -

upon request to the Information Officer;

from the website of the Information Regulator (https://inforegulator.org.za/).

A copy of the Guide is also available in the following two official languages, for public inspection during normal office hours - in English and Afrikaans.

Categories of records of the Private Body which are available without a person having to request access

This table details records that are generally made public by the private bodies and can be accessed, for instance, on their websites or by simple request, without needing to follow the formal PAIA request procedure.

Description of the records of the Private Body which are available in accordance with any other legislation

This table lists the types of records the private bodies are required to keep by various South African laws, along with the relevant legislation that mandates their retention. These include, but are not limited to the below:

While we have made every reasonable effort to compile a comprehensive list of applicable legislation, it remains possible that the list may be incomplete. Should it come to our attention that existing or newly enacted legislation provides for access to records on a basis other than that prescribed by PAIA, we will update the list accordingly.

If a requester believes that a right of access to a record exists under any legislation, whether listed or not, they are required to clearly indicate the specific legislative provision upon which the request is based.

Description of the subjects on which the Private Body holds records and categories of records held on each subject by the Private Body

This table outlines the various business functions (subjects) and provides examples of the types of records kept for each function. These include, but are not limited to the below:

Processing of personal information

These tables detail JARMS practices regarding the processing of personal data. These include, but are not limited to the below:

Purpose of processing personal information

Description of the categories of Data Subjects and of the information or categories of information relating thereto

The recipients or categories of recipients to whom the personal information may be supplied

Planned transborder flow of personal information

Generally, we do not transfer your personal information to another country. However, in certain cases this may be necessary, for example, when our suppliers are based outside South Africa or when the service we provide involves a foreign party. Such transfers will only take place if:

• They are essential to the nature of the transaction, and

• They comply with the requirements of POPIA and/or other applicable South African laws.

When we do transfer your information across South African boarders, we will take steps to ensure that the country or organisation receiving it has strong safeguards in place. This includes:

• Ensuring the destination country’s laws offer similar protection to POPIA,

• Confirming that binding corporate rules are in place, or

• Relying on legal agreements that guarantee your information is handled securely and respectfully.

General description of information security measures to be implemented by the responsible party to ensure the confidentiality, integrity, and availability of the information

Technical Measures:

• Network and System Security: Utilisation of firewalls, malware and anti-virus protection, software patching, and data loss prevention technologies.

• Data Protection: Encryption of sensitive data and regular data backups with testing to ensure recoverability.

• Access Control: Use of unique user IDs and strong passwords, with access to information restricted on a "need-to-know" basis.

• Monitoring and Testing: Regular system monitoring, vulnerability scanning, and penetration testing to identify and mitigate threats.

Organisational Measures:

• Policies and Procedures: Implementation of documented information security policies, business continuity plans, and risk assessments.

• Employee Awareness: Regular training for employees on security and privacy practices.

• Third-Party Management: Ensuring third-party operators and service providers apply adequate security safeguards through contractual agreements.

Physical Security:

• Access Control: Restricting physical access to offices and sensitive areas.

• Secure Disposal: Implementing procedures for the appropriate disposal of assets containing personal information

Request procedure to obtain access to records held by the Private Body

To access records held by JARMS, the requester must complete Form 2 (Annexure B) and submit it, along with the required request fee and any applicable deposit (as set out in Annexure A), to the Information Officer using the contact details provided.

The form must include enough detail to identify -

the record;

the requester’s identity;

the preferred method of access, and the reason the information is needed to exercise or protect a specific right

Requests submitted on behalf of another person must be accompanied by proof of authority.

Where the requester is unable to complete the form due to illiteracy or disability, the request may be made orally at the address of JARMS and assistance will be provided to record the request.

Upon receipt of the request, the Information Officer will notify the requester of any fees due and will only proceed once payment has been received.

If access is granted, additional fees may apply for reproduction or preparation. In cases where access is denied, any deposit paid will be refunded. The requester will be informed of the outcome within 30 days using Form 3 (Annexure C).

JARMS may refuse access to records if disclosure would compromise another person’s privacy, reveal confidential third-party or company information, expose trade secrets, commercially sensitive information or could harm the competitive position. Access may also be denied for legally privileged or contractually protected content, research that could be disadvantaged by disclosure, or requests that are frivolous or unduly burdensome.

Availability of the Manual

A copy of the manual is available -

on the website of the Private Body at WWW.;

At the head office of JARMS for public inspection during normal business hours;

To any person upon request upon the payment of a reasonable prescribed fee; and

To the Information Regulator upon request.

A fee for a copy of the Manual, as contemplated in annexure B of the PAIA Regulations, attached to this PAIA Manual as annexure A, shall be payable per each A4-size photocopy made.

Updating of the Manual

The head of JARMS will on a regular basis update this manual.

Issued by: Michelle Toms, Ceo

Annexure A: Applicable fees

The table below sets out the fees applicable to any request for a record of information held by JARMS:

Annexure B: Form 2

REQUEST FOR ACCESS TO RECORD

[Regulation 7]

NOTE:

1. Proof of identity must be attached by the requester.

2. If requests made on behalf of another person, proof of such authorisation, must be attached to this form.

TO: The Information Officer

___________________

___________________

___________________

___________________

(Address)

E-mail address: ___________________

Fax number: ___________________

Mark with an "X"

You will be notified in writing whether your request has been approved or denied and if approved the costs relating to your request, if any. Please indicate your preferred manner of correspondence:

Signed at_________________ this day of 20

____________________________________________________________

Signature of Requester / person on whose behalf request is made

FOR OFFICIAL USE

___________________________

Signature of Information Officer

Annexure C: Form 3

OUTCOME OF REQUEST AND FEES PAYABLE

[Regulation 8]

NOTE:

1. If your request is granted the—

   1. amount of the deposit, (if any), is payable before your request is processed; and

   2. requested record/portion of the record will only be released once proof of full payment is received.

2. Please use the reference number hereunder in all future correspondence.

Reference number: ________________________________________

TO:

_____________________

_____________________

_____________________

_____________________

Your request dated , refers.

1. You requested:

OR

2. You requested:

3. To be submitted:

Kindly note that your request has been:

Approved

Denied, for the following reason:

4. Fees payable with regard to your request:

5. Deposit payable (if search exceeds six hours):

The amount must be paid into the following Bank account:

Name of Bank: __________________________________

Name of account holder: __________________________________

Type of account: __________________________________

Account number: __________________________________

Branch Code: __________________________________

Reference No.: __________________________________

Submit proof of payment to: __________________________________

Signed at this day of 20

__________________

Information Officer