PAIA Manual

1. About this manual

This manual explains how to ask SalonLog for access to records it holds, what records it holds, and how it processes personal information.

2. The private body and contact details

Business and service address: Kwa-Phezulu Centre, Shop 9, Nongoma, KwaZulu-Natal, 3950, South Africa.

3. The Information Regulator's PAIA guide

The Information Regulator publishes a guide on how to use PAIA, in each official language, on its website at inforegulator.org.za. You may also ask the Information Regulator for a copy.

4. Records available without a request

These records are published on salonlog.com and can be read without a PAIA request:

• the Terms of Service;
• the Privacy Policy;
• the Pricing page;
• this manual.

5. Records kept under other laws

Where they apply to SalonLog, records are kept as required by laws including:

• the Electronic Communications and Transactions Act 25 of 2002;
• the Protection of Personal Information Act 4 of 2013;
• the Consumer Protection Act 68 of 2008;
• the Income Tax Act 58 of 1962;
• the Tax Administration Act 28 of 2011.

6. Records held by SalonLog

• Customer account records: account details, agreement records, correspondence.
• Salon records held for customers: salons, branches, team access, employees, services, visits, cash records.
• Security records: sign-in records, audit trails, technical logs.
• Business records of the operator: supplier and service-provider agreements, financial and tax records.
• Encrypted backups of the above.

7. Processing of personal information

• Purposes: providing the SalonLog service, account security, communicating with users, meeting legal duties and fixing faults.
• Categories of data subjects and information:
  • salon owners and team members: identity and contact details, sign-in records;
  • salon employees: names, job roles, an optional contact mobile number and pay arrangements;
  • people using the contact form: name, email address and message.
• Recipients: the service providers listed in section 4 of the Privacy Policy, and authorities where the law requires it.
• Cross-border transfers: some service providers process information outside South Africa, as described in the Privacy Policy.
• Security measures: encryption in transit, separation between salons, managed sign-in, encrypted backups and limited access to systems.

8. How to request access

1. Complete the Information Regulator's Form 2 (Request for Access to Record), available on its website.
2. Send it to the Information Officer through the Contact SalonLog form, choosing "Privacy request", or by email to salonlog26@gmail.com. We will tell you how to send any attachment.
3. Any fees are those prescribed under PAIA. We will tell you if a fee applies before we process the request.
4. We will decide on the request within 30 days, or within any extended period PAIA allows, and give reasons if we refuse.
5. If you disagree with a decision, you may complain to the Information Regulator or apply to a court.

9. Availability and updates

This manual is published on salonlog.com and is available on request through the contact form. It is reviewed when SalonLog's information practices change.