Manual in terms of the Promotion of Access to Information Act 2 of 2000
Sigmund (Pty) Ltd Registration number 2025/064420/07 Compiled in terms of section 51 of the Promotion of Access to Information Act 2 of 2000 ("PAIA") Last updated: 16 September 2026
1. Purpose of this manual
PAIA gives everyone a right of access to information held by a private body where that information is required for the exercise or protection of any right. This manual explains what records Sigmund holds and how to request access to them.
It also sets out the information about our processing of personal information that the Regulations to PAIA and the Protection of Personal Information Act 4 of 2013 ("POPIA") require us to publish.
2. Contact details
| Legal name | Sigmund (Pty) Ltd |
| Registration number | 2025/064420/07 |
| Information Officer | Tapfuma Masunzambwa |
| info@getsigmund.co | |
| Telephone | +27 73 361 8000 |
| Deputy Information Officer | None appointed |
| Physical and postal address | 4106 Spaces, 21 Dreyer Street, Sunclare Building, Cape Town, 7708, South Africa |
| Website | getsigmund.co |
3. The section 10 guide
The Information Regulator has compiled a guide, in terms of section 10 of PAIA, containing practical information about how to exercise rights under the Act. It is available in each official language from:
Information Regulator (South Africa) Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191 Telephone: 010 023 5200 Email: enquiries@inforegulator.org.za Website: https://inforegulator.org.za
4. Records available without a formal request
The following are available on request or on our website, without a PAIA request:
- Company registration information
- This manual
- Our Privacy Policy, Data Protection Policy and Applicant Privacy Notice
- Our Terms of Service and Data Processing Addendum
- Marketing and product material
5. Records held in terms of other legislation
We hold records in accordance with, among others:
- Companies Act 71 of 2008
- Income Tax Act 58 of 1962 and Tax Administration Act 28 of 2011
- Value-Added Tax Act 89 of 1991
- Basic Conditions of Employment Act 75 of 1997 and Labour Relations Act 66 of 1995
- Unemployment Insurance Act 63 of 2001
- Compensation for Occupational Injuries and Diseases Act 130 of 1993
- Protection of Personal Information Act 4 of 2013
- Electronic Communications and Transactions Act 25 of 2002
6. Categories of records held
| Subject | Categories of record |
|---|---|
| Company secretarial | Memorandum of incorporation, registers, minutes, resolutions, share records |
| Financial | Management accounts, annual financial statements, tax returns, bank records, invoices |
| Customers | Contracts, correspondence, account and billing records, support tickets |
| Applicant data | Documents and application records processed on behalf of customers. Held in our capacity as operator. See clause 8. |
| Employees and contractors | Contracts, personnel files, payroll, leave records |
| Suppliers | Contracts, correspondence, invoices |
| Technology | Source code, architecture documentation, security policies, access and system logs |
| Marketing | Website content, mailing list records, campaign records |
| Insurance and legal | Policies, claims, legal advice and correspondence |
7. Processing of personal information
Purposes. To provide and support our software platform; to administer customer accounts and billing; to manage employment and supplier relationships; to market our services to business contacts; and to meet statutory obligations.
Categories of data subject and information.
| Data subject | Information |
|---|---|
| Website visitors and enquirers | Contact details, technical and usage information |
| Mailing list subscribers | Name, email address, engagement records |
| Customer contacts and platform users | Name, work contact details, job title, account activity |
| Applicants | Identity, contact, income, banking, employment and tax documents (processed as operator) |
| Employees and job applicants | Identity, contact, employment, qualification and payroll information |
| Suppliers | Contact and banking details |
Recipients. Cloud hosting and infrastructure providers, email and communication platforms, analytics providers, accounting and payroll providers, professional advisers, and regulators or courts where legally required.
Cross-border transfers. Personal information is processed in Amazon Web Services facilities in Cape Town (South Africa) and Ireland (European Union), in reliance on section 72(1)(a) of POPIA.
Security. Information is secured through encryption in transit and at rest, role-based access control, multi-factor authentication, logging and monitoring, encrypted backups, and written confidentiality obligations. Further detail is in our Data Protection Policy.
8. Applicant data held as operator
A significant portion of the personal information in our systems belongs to applicants who have dealt with our customers, not with us. In respect of that information our customer is the responsible party and Sigmund is the operator.
We are not permitted to grant access to, correct or delete that information on our own authority. A person seeking access to it should direct the request to the business they applied to. If a request reaches us, we will identify the relevant business, notify them, and tell the requester where to direct the request.
9. How to request access
- Complete Form 2 of the Regulations to PAIA (Access to Information Request Form), available from https://inforegulator.org.za or from us on request.
- Send it to the Information Officer at info@getsigmund.co or 4106 Spaces, 21 Dreyer Street, Sunclare Building, Cape Town, 7708, South Africa.
- Provide enough detail to identify the record and the requester, and state which right you seek to exercise or protect and how the record is required for it.
- If you request the record in a particular form, say so.
- If the request is on behalf of someone else, attach proof of your authority.
Response time. We will decide within 30 days of receipt and notify you in writing. This may be extended by a further 30 days in the circumstances set out in section 57, in which case we will tell you why.
Fees. A request fee and an access fee may be payable in accordance with the Regulations. We will tell you what is payable before processing the request, and may require a deposit where preparation will exceed six hours.
Grounds for refusal. Access may be refused on the grounds set out in Chapter 4 of Part 3 of PAIA, including the protection of another person's privacy, commercial information of a third party, confidential information, legal privilege, and research information.
If we refuse. Our notice will give reasons and explain your right to apply to a court, or to lodge a complaint with the Information Regulator at PAIAComplaints@inforegulator.org.za.
10. Availability of this manual
This manual is available at getsigmund.co/paia, at our registered address during business hours, and on request from the Information Officer. It is available in English.
11. Updates
This manual is reviewed at least annually and updated whenever our records, contact details or processing materially change.