PAIA Manual
This manual explains how to request access to records held by ZA TechLabs, trading as Mavecy, under section 51 of the Promotion of Access to Information Act 2 of 2000 (PAIA). Requests about personal information also follow the Privacy Notice.
1. About this business
ZA TechLabs, trading as Mavecy supplies Mavecy, online business software for South African organisations: quotes, invoices, payments, expenses, projects, people and payroll, point of sale and AI drafting tools. It also provides digital services under the ZA TechLabs name.
| Supplier | ZA TechLabs, trading as Mavecy |
|---|---|
| VAT | Not VAT registered. No VAT is charged. |
| Business and legal notices address | Cape Town, Western Cape, South Africa |
| Customer, billing, privacy and security contact | info@mavecy.com |
| Information Officer | The head of ZA TechLabs, as defined in PAIA, through info@mavecy.com |
| Website | https://mavecy.com |
| Support hours | Monday to Friday, 08:00 to 17:00 South African time (SAST), excluding public holidays |
2. Information Officer
The Information Officer is the head of ZA TechLabs, as defined in PAIA. No Deputy Information Officer has been designated. Requests go to info@mavecy.com, or to the address above.
3. Guide from the Information Regulator
The Information Regulator publishes a guide on how to use PAIA and POPIA, in every official language, with the current prescribed forms. Get it at inforegulator.org.za or from the Information Regulator directly. We can email you a copy on request.
4. Records available without a request
These are freely available on https://mavecy.com: product and pricing information, and all legal pages, including this manual.
5. Records held under other laws
Where they apply to us: the Companies Act 71 of 2008, Income Tax Act 58 of 1962, Tax Administration Act 28 of 2011, Value Added Tax Act 89 of 1991 (if registered), Basic Conditions of Employment Act 75 of 1997, Labour Relations Act 66 of 1995, Employment Equity Act 55 of 1998, Unemployment Insurance Act 63 of 2001, Skills Development Levies Act 9 of 1999, Compensation for Occupational Injuries and Diseases Act 130 of 1993, Consumer Protection Act 68 of 2008, Electronic Communications and Transactions Act 25 of 2002, and the Protection of Personal Information Act 4 of 2013.
6. Subjects and categories of records
| Subject | Records |
|---|---|
| Corporate | Founding and registration documents, agreements, policies, resolutions |
| Financial and tax | Accounting records, bank statements, invoices, tax returns and assessments |
| Personnel | Contracts, pay and tax records, leave records, for staff and contractors |
| Customers | Account and contact details, subscriptions, payment records, support correspondence, terms acceptance records |
| Suppliers and providers | Agreements, data processing terms, invoices, contact details |
| Technical | Product documentation, system and security logs, backups |
| Marketing | Website content, demo requests, marketing preferences |
Records inside a customer's workspace belong to that customer. Request them from the organisation concerned.
7. Processing of personal information (POPIA)
| Purposes | Providing and securing Mavecy, managing subscriptions and payments, support, legal and tax compliance, handling disputes, and marketing to people who have not opted out |
|---|---|
| Data subjects and information | Customers' account users (identity, contact, account and usage information), customers' organisations (company, billing and payment references), website visitors and demo requests (contact details), staff and contractors (employment, pay and tax information), suppliers (contact and payment details) |
| Recipients | Authorised staff, the providers on the Subprocessors page, payment providers, professional advisers, and authorities where the law requires |
| Planned cross border flows | Hosting outside South Africa and AI processing in the United States, under section 72 of POPIA, as set out on the Subprocessors page |
| Security measures | As described in Security and Data Handling |
8. How to request access
- Complete Form 2 (Request for access to record) from the Information Regulator's website, or ask us for it.
- Send it to the Information Officer by email or to the address above.
- Describe the records clearly enough to identify them, say how you want access (copy, inspection, electronic), and say which right you want to exercise or protect, as PAIA requires for requests to private bodies.
- If you request on behalf of someone else, include proof of your authority.
- Pay the request fee and any access fee prescribed in the PAIA Regulations. We tell you the amount before work starts. Someone requesting their own personal information pays no request fee.
We decide within 30 days of receiving a complete request. We may extend this once by up to 30 days where PAIA allows, and will tell you why in writing. If access is granted, you receive the records once any access fee is paid.
9. Refusal and remedies
A request may be refused only on the grounds in Chapter 4 of Part 3 of PAIA, for example to protect another person's privacy, commercial information or confidential information, or legally privileged records. We give written reasons. A private body has no internal appeal, so if you are unhappy with a decision you may complain to the Information Regulator within 180 days, or apply to court.
10. Availability and updates
This manual is published on this page and is available free from the Information Officer on request, by email or at the address above. It is in English, and we will help a requester who needs assistance in another official language. It is reviewed at least once a year and whenever our records or processing change. The date at the top shows the latest revision.