POPIA and PAIA Manual, Information Officer

Last updated: 12 October 2026

Our information officer

Stryx Collective (Pty) Ltd, registration number 2024/112638/07, is the responsible party for the personal information described in our privacy policy. Our information officer is Ryan Cumming, director.

Address: 52 Brettenwood Lakes, Brettenwood Coastal Estate, Salt Rock, Ballito, 4390, South Africa
Email: ryan@stryxcollective.co.za
WhatsApp and phone: +27 67 469 3193

What we collect, why we collect it, who processes it for us, where it is stored and how long we keep it are set out in our privacy policy. Cookies are covered in our cookie policy.

How to make a POPIA request

You can ask us:

whether we hold personal information about you, and for a copy of it
to correct information that is wrong, out of date or incomplete
to destroy or delete information we no longer have a right to keep
to stop using your information, by objecting (see below)

Requests are free, and you do not need to use a prescribed form. You can make a request by email, WhatsApp, a phone call or a letter to the address above. Tell us who you are and what you are asking for. If you call, we will make a written note of your request. We may need to confirm your identity before we act. If you would like to use the official forms, Form 1 (objection) and Form 2 (correction or deletion) are on the Information Regulator's website, or we can send them to you.

A request for a copy of your own information is handled under the access procedure in our PAIA manual below. We accept it through any of the channels above and do not charge for it.

If your request is about a website we run for a client, the client is the responsible party and we act as its operator. Please contact that business, and we will help it respond.

Your right to object

You can object at any time, on reasonable grounds relating to your situation, to our use of your personal information where we rely on our legitimate interests. You can also object at any time to its use for direct marketing. Once you object, we stop using the information for that purpose unless the law allows us to continue.

We do not send direct marketing at present. Our privacy policy explains how we would do so and how you would opt out. You can withdraw consent to analytics cookies at any time through the Cookie settings link at the foot of every page.

Complaints to the Information Regulator

Please contact us first so that we can try to put things right. You can also complain to the Information Regulator at any time.

To lodge a complaint, register a profile on the Regulator's eServices portal and submit the complaint there. The Regulator's contact details are:

Website: inforegulator.org.za
General enquiries: enquiries@inforegulator.org.za
Telephone: 010 023 5200
Toll free: 0800 017 160
Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191

These details were checked against the Regulator's website on 12 October 2026.

PAIA manual

This is the manual of Stryx Collective (Pty) Ltd under section 51 of the Promotion of Access to Information Act 2 of 2000 (PAIA). It is published on this website and is available on request from our information officer at no charge.

1. About Stryx Collective

Stryx Collective (Pty) Ltd is a private company registered in South Africa, registration number 2024/112638/07. It is a web design and SEO consultancy run by its director.

2. Head of the body and information officer

Ryan Cumming, director, is the head of the body and its information officer.

Physical and postal address: 52 Brettenwood Lakes, Brettenwood Coastal Estate, Salt Rock, Ballito, 4390, South Africa
Email: ryan@stryxcollective.co.za
WhatsApp and phone: +27 67 469 3193

3. The Information Regulator's guide to PAIA

Under section 10 of PAIA, the Information Regulator publishes a guide on how to use the Act. It explains the right of access to records, how to make a request, the fees and the remedies available. You can get it in any official language from the Regulator's website or by contacting the Regulator, whose details are given above.

4. Records available without a request

We have not published a notice under section 52 of PAIA. The following are available without a formal request:

the content of this website, including our privacy policy, cookie policy, terms of use and this manual
our company registration details, which are also on public record at the Companies and Intellectual Property Commission (CIPC)

5. Records kept under other laws

We keep records in line with, among others:

the Companies Act 71 of 2008
the Tax Administration Act 28 of 2011
the Income Tax Act 58 of 1962
the Protection of Personal Information Act 4 of 2013
the Promotion of Access to Information Act 2 of 2000
the Electronic Communications and Transactions Act 25 of 2002
the Consumer Protection Act 68 of 2008

6. Records we hold

The records below are available on request under PAIA, subject to the grounds for refusal in the Act:

Company records: memorandum of incorporation, CIPC registration documents, register of directors, securities register, resolutions
Financial and tax records: accounting records, invoices, bank statements, tax returns and correspondence with SARS
Client records: quotes, service agreements, project files and correspondence, and website and hosting records
Supplier and contractor records: agreements, invoices and correspondence
Website records: website content and aggregated analytics reports
Information technology records: system logs, backups and access records
Personal information records: enquiries, contact details and a log of POPIA and PAIA requests

7. How to request access to a record

Use Form 2 (Request for access to record) from the PAIA Regulations, 2021. It is on the Regulator's website, or we can send it to you. Send the completed form to our information officer by email, or post it to the address in section 2.
Give enough detail to identify the record and say how you would like to receive it. Unless the record is about you, say which right you want to exercise or protect, and why you need the record for it.
If you ask for records about yourself, no request fee is payable. Other requesters pay the request fee set by the PAIA Regulations, and access fees, such as for copies, may apply. We will tell you the amount before we process the request.
We will decide within 30 days, and may extend that by up to 30 days in the cases PAIA allows. We may refuse access only on the grounds in PAIA, such as protecting another person's privacy or confidential commercial information.
If you disagree with our decision, you can complain to the Information Regulator or apply to court within 180 days.

8. How we process personal information

Purposes: replying to enquiries, preparing quotes, concluding and carrying out client agreements, invoicing and keeping accounting and tax records, keeping our website and systems secure, understanding how the website is used (with consent), and meeting our legal obligations.

Categories of data subjects and their information:

website visitors: technical information such as IP address and browser, and analytics data if they accept analytics cookies
people who contact us: name, contact details, business name and the content of their messages
clients and their staff: contact details, billing details, agreements, project correspondence, and files and logins shared for the work
suppliers and contractors: contact details, banking details, invoices and agreements
people whose information is collected by client websites we host or maintain: whatever the client's website collects, which we handle only as the client's operator

Recipients: the service providers listed in our privacy policy, our professional advisers where needed, and the South African Revenue Service, CIPC and other authorities where the law requires it.

Planned transfers across borders: our service providers process information in South Africa, the United Kingdom, the European Union and the United States. We transfer personal information only as section 72 of POPIA allows, relying on the providers' data protection terms, including standard contractual clauses where they offer them.

Security measures: access to personal information is limited to the people who need it, the accounts that hold it are secured, traffic to our website is encrypted, backups are kept, and our providers protect the information under their data protection terms. We will notify the Information Regulator and the people affected if personal information is compromised.

9. Availability of this manual

This manual is published on this page and is available on request from our information officer at no charge.

Changes to this page

We will update this page when our details, records or the law change, and change the "Last updated" date at the top. This version takes effect on 12 October 2026.

Contact

For any question about this page, email ryan@stryxcollective.co.za, message us on WhatsApp at +27 67 469 3193 or use our contact page. Our website terms of use cover how you may use this site.