PAIA Manual

TOUCHDOMAIN (Pty) Ltd

Effective date: 7 September 2026

Prepared in accordance with Section 51 of the Promotion of Access to Information Act 2 of 2000 (as amended by the Protection of Personal Information Act 4 of 2013).

1. Company Overview & Contact Details

TOUCHDOMAIN (Pty) Ltd, trading as Touch Domain (Registration No. 2026/686289/07), is a South African digital studio offering web design, branding, digital content, app development, and reseller web hosting services.

Physical Address: 96 Makgathe Street, Ipelegeng, Schweizer-Reneke, 2780

Information Officer: Mr. Thabo Mtsweni (Reg. No. 2026-066164)

Contact Email: tmtsweni@touchdomain.co.za

Website: touchdomain.co.za

2. The Information Regulator's Section 10 Guide

The Information Regulator has published a Guide in terms of Section 10 of PAIA to assist members of the public in exercising their rights under the Act. Members of the public can inspect or obtain a copy of this Guide from the Information Regulator's website (inforegulator.org.za) or by contacting them at:

Email: enquiries@inforegulator.org.za / PAIAComplaints@inforegulator.org.za

Physical Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

3. Records Automatically Available Without Formal Request

The following information is automatically available on our website without submitting a formal PAIA request:

General service descriptions and package pricing estimates
Public blog posts, case studies, and portfolio showcases
Privacy Policy, Website Terms & Conditions, and this PAIA Manual

4. Categories of Records Held by Touch Domain

Touch Domain maintains records across the following operational categories:

Client & Commercial Records: Project briefs, contracts, quotes, invoices, payment history, scope confirmations, and general correspondence.
Website & Form Submissions: Enquiries, contact form submissions, quote requests, and consultation bookings (retained for 12 months).
Financial Records: Accounting entries, bank statements, tax records, and asset registers.
Supplier & Partner Records: Service provider agreements, reseller web hosting arrangements, software licenses, and third-party vendor contact details.
Marketing & Communications: Testimonials, client reviews, case study assets (where explicit consent was granted), and operational consent records.

5. How to Submit a Request for Access to Records

Prescribed Form

Requests for access to records held by Touch Domain must be made using Form 2 (Request for Access to Record), available on the Information Regulator's website or upon request from our Information Officer.

Submission

Send the completed Form 2 to our Information Officer via email at tmtsweni@touchdomain.co.za.

Sufficient Detail

The request must provide sufficient detail to enable the Information Officer to identify:

The specific record(s) requested.
The identity and contact details of the requester.
The right the requester seeks to exercise or protect.

Outcome & Prescribed Fees

Requesters seeking their own personal information are exempt from paying a request fee.
For third-party requests, a prescribed request fee is payable before processing begins. Search, reproduction, and delivery fees apply as prescribed under PAIA Regulations.
The Information Officer will notify the requester of the decision and applicable fees using prescribed Form 3 within 30 calendar days of receipt.

6. Grounds for Refusal of Access

Touch Domain may lawfully refuse a request for access to records under mandatory provisions of PAIA, including where disclosure would:

Unreasonably reveal personal information about a third party (data subject).
Violate commercial confidentiality or trade secrets of a third party or Touch Domain.
Breach professional privilege or contractual obligations of confidentiality.
Threaten the safety of individuals, property, or digital infrastructure.

7. Personal Information Processing (POPIA Integration)

In terms of the Protection of Personal Information Act 4 of 2013 (POPIA), Touch Domain processes personal information as follows:

Purpose of Processing: To render digital services, generate quotes, fulfill reseller hosting orders, maintain accounting records, send billing communications, and comply with legal tax obligations.
Categories of Data Subjects: Clients, prospective clients, website visitors, vendors, and service providers.
Categories of Personal Information: Names, business names, contact details (email, phone, address), IP addresses, payment transaction histories, and project specifications.
Recipients of Personal Information: Information is disclosed only to authorized employees, technical subcontractors (e.g., hosting providers), and professional advisors operating under strict confidentiality obligations.
Cross-Border Data Transfers: Web hosting and cloud database servers operated by our third-party infrastructure partners may store or route data internationally. We ensure these providers uphold data security standards compatible with POPIA.
Data Security Measures: Touch Domain employs appropriate technical and organizational measures to safeguard personal information, including encrypted SSL web connections, strict credential management, multi-factor authentication, regular system updates, and restricted operational access.

8. Availability of This Manual

This manual is publicly available in PDF format on touchdomain.co.za and for inspection at our principal place of business during normal working hours upon reasonable notice.