REVVED / LEGAL & SAFETY

PAIA Manual

PAIA Manual

Effective date:

28 August 2026

·

Version

1.0

Questions about this document? support@joinrevved.co.za

On this page

1. Purpose of This Manual 2. Company and Contact Details 3. The Information Regulator’s Guide on How to Use PAIA 4. Records Available Without a Formal Request 5. Records Held in Accordance With Other Legislation 6. Subjects on Which the Company Holds Records 7. Processing of Personal Information (POPIA) 8. How to Request Access to a Record 9. Prescribed Fees 10. Grounds on Which Access May or Must Be Refused 11. Remedies If a Request Is Refused 12. Availability of This Manual 13. Review

Revved (Pty) Ltd — PAIA Manual

Prepared in terms of section 51 of the Promotion of Access to Information Act 2 of 2000 (as amended)

Date of compilation: 28 August 2026
Date of last revision: 28 August 2026
Version 1.0

1. Purpose of This Manual

This manual is published by Revved (Pty) Ltd (“Revved”, “the Company”, “we”, “us”) in terms of section 51 of the Promotion of Access to Information Act 2 of 2000 (“PAIA”), as amended by the Protection of Personal Information Act 4 of 2013 (“POPIA”).

PAIA gives effect to the constitutional right of access to information held by another person that is required for the exercise or protection of any rights. This manual describes:

  • the records the Company holds;

  • the records that are available without a formal request;

  • how to request access to the Company’s other records;

  • the fees that apply; and

  • how the Company processes personal information.

Under section 50 of PAIA, a person must be given access to a record of a private body if the record is required for the exercise or protection of any rights, the procedural requirements of PAIA are met, and no ground of refusal in Chapter 4 of Part 3 applies.

This manual does not replace our Privacy Policy, which is the notice to data subjects required under section 18 of POPIA. Where the two differ on how we handle personal information, the Privacy Policy governs.

2. Company and Contact Details

Legal name

Revved (Pty) Ltd

Registration number

2026/590617/07

Date of incorporation

27 July 2026

Legal status

Private company incorporated in the Republic of South Africa

Head of the private body and Information Officer

HW Swanepoel

Address

797 Hoewe Road, Rietvalleirand, Pretoria, Gauteng, 0181

Telephone

+27 65 082 2910

Access-to-information email

support@joinrevved.co.za

Website

https://joinrevved.co.za

The Company operates Revved, a mobile application and website for car and motorcycle enthusiasts in South Africa. We do not accept walk-in visitors. Requests for access to records should be submitted by email as set out in section 8 below.

3. The Information Regulator’s Guide on How to Use PAIA

The Information Regulator has, in terms of section 10(1) of PAIA, published a Guide on how to use PAIA and POPIA, in an easily comprehensible form, for any person who wishes to exercise a right under either Act. The Guide describes the objects of both Acts, the manner and form of requests, the assistance available from information officers and from the Regulator, and the remedies available in law.

The Guide is available in all official languages and may be obtained:

  • from the website of the Information Regulator at https://inforegulator.org.za;

  • on request from our Information Officer; and

  • for inspection at the offices of the Regulator during normal working hours.

The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
P.O. Box 31533, Braamfontein, Johannesburg, 2017
Telephone: 010 023 5200
General enquiries: enquiries@inforegulator.org.za
PAIA complaints: PAIAComplaints@inforegulator.org.za
POPIA complaints: POPIAComplaints@inforegulator.org.za

4. Records Available Without a Formal Request

The following categories of records are voluntarily made available in terms of section 52(1) of PAIA, without a person having to submit a request under PAIA:

Category

Types of record

How to access

Legal and policy documents

Terms and Conditions, Privacy Policy, Community Guidelines, Child Safety Standards, this PAIA Manual

On the website and within the App

Product information

Feature descriptions, REVS and Trophy rules, membership tiers and pricing

On the website and within the App

Member’s own account data

A member’s own profile, Garage, content, REVS ledger, and Trophy history

In the App under Settings, or on request to the Information Officer

Company identification

Registered name, registration number, directors, contact details

On the website and in this manual

A member does not need to use PAIA to obtain a copy of their own personal information. Please use the in-App export function or write to support@joinrevved.co.za.

5. Records Held in Accordance With Other Legislation

The Company holds records in accordance with, among others, the following legislation. Where legislation grants a person a right of access to a record, access is given in accordance with that legislation.

Category of records

Applicable legislation

Memorandum of Incorporation, share register, beneficial ownership register, directors’ records, resolutions

Companies Act 71 of 2008

Income tax, VAT, and PAYE records

Tax Administration Act 28 of 2011; Income Tax Act 58 of 1962; Value-Added Tax Act 89 of 1991

Accounting records and annual financial statements

Companies Act 71 of 2008

Employment and payroll records

Basic Conditions of Employment Act 75 of 1997; Labour Relations Act 66 of 1995; Employment Equity Act 55 of 1998

Occupational injury records

Compensation for Occupational Injuries and Diseases Act 130 of 1993

Personal information processing records, this manual

PAIA; POPIA

Consumer transaction records, RevTag sales

Consumer Protection Act 68 of 2008; Electronic Communications and Transactions Act 25 of 2002

Child safety incident and reporting records

Films and Publications Act 65 of 1996; Children’s Act 38 of 2005; Criminal Law (Sexual Offences and Related Matters) Amendment Act 32 of 2007

6. Subjects on Which the Company Holds Records

Subject

Categories of records

Members and accounts

Registration data, profiles, Garage and vehicle records, REVS ledgers, Level and Trophy history, RevTag registrations and scan records

Member content

Posts, photographs, comments, direct messages, event listings

Trust and safety

Reports submitted by and about members, moderation decisions, enforcement and appeal records, ban records, child safety incident records

Commercial

RevTag and RevCard orders and fulfilment records, membership and subscription records, refunds

Finance and accounting

Invoices, bank records, accounting records, annual financial statements, tax returns

Company and statutory

Incorporation documents, MOI, registers, resolutions, regulatory correspondence

Suppliers and service providers

Contracts, operator agreements, correspondence, invoices

Personnel

Directors’ records, employment and contractor agreements, remuneration records

Information technology

System configuration, access logs, security and audit logs, incident records, source code

Marketing and communications

Consent records, mailing lists, campaign records, website analytics

7. Processing of Personal Information (POPIA)

This section is provided in terms of section 51(1)(c) of PAIA read with POPIA. Full particulars are set out in our Privacy Policy at https://joinrevved.co.za/privacy, which forms part of this manual by reference.

Purpose of processing. To create and operate member accounts; to provide the Garage, REVS, Level, Trophy, RevTag, Events, Community, and messaging features; to fulfil RevTag and membership orders; to maintain the safety and integrity of the platform; to communicate with members; to improve the Service; and to comply with legal obligations.

Categories of data subjects

Personal information that may be processed

Members

Name, username, email address, mobile number, date of birth or age confirmation, profile and vehicle photographs, city and province, vehicle details, posts and comments, direct messages, REVS and Trophy records, RevTag scan records, approximate location, device and analytics data, IP address

Event organisers and attendees

Contact details, event details, attendance records

Purchasers

Order, delivery, and subscription records, transaction identifiers

Persons reported to us

Information contained in a report and in our investigation records

Website visitors

IP address, browser and device information, pages visited, cookie preferences

Suppliers and service providers

Names, registration and VAT numbers, contact details, banking details

Directors, employees, and contractors

Identity numbers, contact details, addresses, remuneration and engagement records

Recipients. Personal information may be supplied, where necessary and lawful, to: our operators listed in the Privacy Policy (including Amazon Web Services, Amazon Simple Email Service, Google Firebase, our media storage and delivery provider, and our payment provider); Apple and Google in respect of app distribution and in-app purchases; our accountants, auditors, and bankers; SARS, CIPC, and the Information Regulator; the South African Police Service and other competent authorities on lawful request; and the National Center for Missing & Exploited Children in respect of confirmed child sexual abuse material.

Transborder flows. Our core application data and account emails are processed in South Africa, in the AWS Africa (Cape Town) region. Certain operators process personal information outside South Africa, including in the United States and the European Union. These transfers take place under section 72 of POPIA, relying on binding contractual protections providing an adequate level of protection, on the data subject’s consent, or on necessity for the performance of a contract, as described in the Privacy Policy.

Security measures. The Company implements appropriate, reasonable technical and organisational measures in terms of section 19 of POPIA. Depending on the system concerned, these may include encryption of data in transit and at rest, restricted and role-based administrative access, agreements with service providers governing their handling of personal information, monitoring of administrative activity, regular backups, and periodic review of safeguards.

8. How to Request Access to a Record

To request access to a record of the Company under PAIA:

  1. Complete Form 2 (Request for Access to Record of a Private Body), available from the Information Regulator’s website at https://inforegulator.org.za.

  2. Submit the completed form to the Information Officer at support@joinrevved.co.za.

  3. Identify the record sufficiently to enable us to locate it.

  4. State the right you seek to exercise or protect, and explain why the record is required for that purpose, as required by section 50(1)(a) of PAIA.

  5. State the form of access required and how you wish to be informed of the decision.

  6. Provide proof of identity and, where you act on behalf of another person, proof of your authority.

  7. Pay the prescribed request fee when notified to do so.

Timeframes. We will decide on a request within 30 days of receipt. This period may be extended once by a further 30 days where PAIA permits. Where a request concerns the information of a third party, the notification procedures in sections 71 and 72 of PAIA apply and may affect the timeline. If access is refused, we will provide written reasons with reference to the applicable grounds of refusal, and inform you of your remedies.

9. Prescribed Fees

Fees for a request to a private body are prescribed in Annexure B to the PAIA Regulations, 2021 (GN R.757, Government Gazette 45057 of 27 August 2021). The current structure is summarised below and may be amended from time to time by the Minister. The current schedule is published by the Information Regulator.

Item

Fee

Request fee

R140.00

Photocopy or printed copy, per A4 page or part thereof

R2.00

Search for and preparation of the record, per hour or part of an hour (excluding the first hour)

R145.00, not exceeding R435.00 in total

Deposit, where search and preparation is expected to exceed six hours

Not more than one third of the access fee that would be payable

Postage, email, or other electronic transfer

Actual expense, if any

A personal requester — a person requesting a record that contains their own personal information — is not required to pay a request fee.

Fees for other forms of reproduction, such as copies in computer-readable form or transcriptions, are charged as prescribed in Annexure B.

10. Grounds on Which Access May or Must Be Refused

Chapter 4 of Part 3 of PAIA (sections 62 to 70) sets out the grounds on which a private body must or may refuse access to a record. Those most likely to apply to the Company are:

Section

Ground

63

Mandatory protection of the privacy of a third party who is a natural person

64

Mandatory protection of the commercial information of a third party

65

Mandatory protection of certain confidential information of a third party

66

Mandatory protection of the safety of individuals and protection of property

67

Mandatory protection of records privileged from production in legal proceedings

68

Commercial information of the Company, including trade secrets, and financial, commercial, scientific, or technical information the disclosure of which would harm the Company’s commercial or financial interests

69

Mandatory protection of research information

70

Mandatory disclosure in the public interest, which may override certain of the above grounds

Given that Revved is a community platform, requests frequently concern the personal information or content of other members. Section 63 requires us to refuse access to a record that would involve the unreasonable disclosure of another member’s personal information, unless an exception in that section applies.

Where a ground of refusal applies to only part of a record, the remainder is severed and disclosed in accordance with section 28 read with section 57 of PAIA.

11. Remedies If a Request Is Refused

There is no internal appeal against a decision of the head of a private body. If your request is refused, or we fail to respond within the prescribed period, you may:

  • Lodge a complaint with the Information Regulator within 180 days of the decision, using the complaint form available from https://inforegulator.org.za, addressed to PAIAComplaints@inforegulator.org.za; or

  • Apply to a court with jurisdiction in terms of section 78 of PAIA.

12. Availability of This Manual

A copy of this manual is available:

  • on our website at https://joinrevved.co.za/paia;

  • from the Information Officer on request, free of charge, by email;

  • for inspection at our registered address during normal business hours, by prior arrangement; and

  • to the Information Regulator on request.

The manual is available in English. We will consider requests for translation into another official language.

13. Review

The Information Officer will review and update this manual whenever material changes occur in the Company’s operations, records, or processing activities, and in any event at least once every two years.

Issued by: Rone Swanepoel
Head of the private body and Information Officer
Revved (Pty) Ltd