Promotion of Access to Information Act Manual

5.1 Categories of Records

As a small technology company that operates primarily as an information website, Cryptex currently holds the following categories of records:

5.2 Records Not Held

Cryptex currently does not hold the following categories of records:

• Physical/paper records
• Customer databases
• Contact form submission records — the website contact form has been removed
• Employee records — no employees other than the two co-founders
• Financial transaction records relating to clients — no transactions processed through the website
• Sensitive personal information as defined under POPIA

6.1 Who May Request Access

Any person, including a juristic person, may request access to records held by Cryptex in terms of PAIA.

6.2 How to Submit a Request

All requests for access to records must be submitted in writing using the prescribed Form C as set out in the Regulations to PAIA. Form C is available from the SAHRC website at sahrc.org.za.

Completed requests must be submitted to our Information Officer by:

6.3 Information Required in Your Request

Your request must include:

• Your full name and contact details
• A description of the record or records you are requesting access to
• The form in which you require access (e.g. copy, inspection)
• If you are requesting on behalf of another person, proof of your authority to do so
• Your reason for requesting the record, if the record relates to a third party

6.4 Fees

Cryptex does not charge any fee for processing PAIA requests or for providing access to records.

6.5 Response Timeframes

In terms of PAIA, Cryptex will respond to your request within:

• 30 days of receiving your request — standard response period
• We may extend this period by a further 30 days in exceptional circumstances, in which case we will notify you in writing

6.6 Grounds for Refusal

Cryptex may refuse access to records on the grounds set out in PAIA, including but not limited to:

• The record contains personal information about a third party who has not consented to disclosure
• Disclosure would constitute an unreasonable invasion of a third party's privacy
• The record is protected by legal privilege
• Disclosure would prejudice the commercial or financial interests of Cryptex
• The record does not exist or cannot be found

If we refuse your request, we will notify you in writing and provide reasons for the refusal. You may then lodge an internal appeal or apply to court to enforce your right of access.