CURRENC PTY LTD

THE PROMOTION OF ACCESS TO PERSONAL INFORMATION MANUAL ("PAIA MANUAL")

Prepared in terms of section 51 of the Promotion of Access to Information Act 2 of 2000 (as amended)

Date of compilation: 20 April 2022 Date of revision: 11 November 2025

1. Preamble

The Promotion of Access to Information Act, 2000 ("PAIA") came into operation on 9 March 2001. Section 51 of PAIA obliges private bodies to compile a manual to enable a person to obtain access to information held by such a private body and stipulates the minimum requirements that the manual has to comply with.

This Manual constitutes CurrenC Pty Ltd's PAIA Manual.

2. List of acronyms and abbreviations

• PAIA: Promotion of Access to Information Act No. 2 of 2000 (as amended)
• POPIA: Protection of Personal Information Act No. 4 of 2013

3. Purpose of the Manual

This PAIA Manual is useful for the public to:

1. Check the categories of records held by a body which are available without a person having to submit a formal PAIA request.
2. Have a sufficient understanding of how to make a request for access to a record of the body, by providing a description of the subjects on which the body holds records and the categories of records held on each subject.
3. Know the description of the records of the body which are available in accordance with any other legislation.
4. Access all the relevant contact details of the Information Officer and Deputy Information Officer who will assist the public with the records they intend to access.
5. Know the description of the guide on how to use PAIA, as updated by the Regulator and how to obtain access to it.
6. Know if the body will process personal information, the purpose of processing of personal information and the description of the categories of data subjects and of the information or categories of information relating thereto.
7. Know the description of the categories of data subjects and of the information or categories of information relating thereto.
8. Know the recipients or categories of recipients to whom the personal information may be supplied.
9. Know if the body has planned to transfer or process personal information outside the Republic of South Africa and the recipients or categories of recipients to whom the personal information may be supplied.
10. Know whether the body has appropriate security measures to ensure the confidentiality, integrity and availability of the personal information which is to be processed.

4. Key Contact Details

• Name of Company: CurrenC Pty Ltd
• Designated Information Officer: Pierre van Helden
• Email address of Information Officer: info@CurrenC.co.za
• Telephone: 082 535 7505
• Physical address: 42 Montrose Ave, Oranjezicht, Town, 8000
• Website address: https://www.CurrenC.co.za/

5. Guide on how to use PAIA and how to obtain access to the Manual

1. The Regulator has, in terms of section 10(1) of PAIA, as amended, updated and made available the revised Guide on how to use PAIA ("Guide"), in an easily comprehensible form and manner, as may reasonably be required by a person who wishes to exercise any right contemplated in PAIA and POPIA.
2. The Guide is available in each of the official languages and in braille.
3. The aforesaid Guide contains the description of:
   1. The objects of PAIA and POPIA.
   2. The postal and street address, phone and fax number and, if available, electronic mail address of:
      1. The Information Officer of every public body; and
      2. Every Deputy Information Officer of every public and private body designated in terms of section 17(1) of PAIA¹ and section 56 of POPIA².
   3. The manner and form of a request for:
      1. Request for Access to Record by making use of Form 2 as contemplated in Regulation 7(1) of the Regulation Relating to Promotion of Access to Information 2021.³
      2. Outcome of request and of fees payable by making use of Form 3 as contemplated in Regulation 8(1) of the Regulation Relating to Promotion of Access to Information 2021.⁴
      3. The assistance available from the IO of a public body in terms of PAIA and POPIA in terms of Regulation 7(2) of the Regulation Relating to Promotion of Access to Information 2021.⁵
      4. The assistance available from the Regulator in terms of PAIA and POPIA.
      5. All remedies in law available regarding an act or failure to act in respect of a right or duty conferred or imposed by PAIA and POPIA, including the manner of lodging:
         1. an internal appeal;
         2. a complaint to the Regulator; and
         3. an application with a court against a decision by the information officer of a public body, a decision on internal appeal or a decision by the Regulator or a decision of the head of a private body.
      6. The provisions of sections 14⁶ and 51⁷ requiring a public body and private body, respectively, to compile a manual, and how to obtain access to a manual.
      7. The provisions of sections 15⁸ and 52⁹ providing for the voluntary disclosure of categories of records by a public body and private body, respectively.
      8. The notices issued in terms of sections 22¹⁰ and 54¹¹ regarding fees to be paid in relation to requests for access.
      9. The regulations made in terms of section 92¹².
4. Members of the public can inspect or make copies of the Guide from the offices of the public and private bodies, including the office of the Regulator, during normal working hours.
5. The Guide can also be obtained:
   1. upon request to the Information Officer; and
   2. from the website of the Regulator (https://www.justice.gov.za/inforeg/).
6. A copy of the Guide is also available in the following two official languages, for public inspection during normal office hours:
   1. English & Afrikaans.

6. Categories of records of CurrenC which are available without a person having to request access

7. Description of the records of CurrenC which are available in accordance with other legislation

8. Description of the subjects on which the body holds records and categories of records held on each subject by CurrenC

9. Processing of Personal Information

9.1 Purpose of Processing Personal Information

1. rendering of services to our clients;
2. employee administration;
3. recruitment;
4. general administration;
5. maintaining records;
6. financial requirements;
7. compliance with legal and regulatory requirements.

9.2 Description of the categories of data subjects and of the information relating thereto

1. Description of the categories of Data Subjects and of the information or categories of information relating thereto
   1. The categories of Data Subjects and of the information or categories of information relating thereto includes but is not limited to those set out in CurrenC's privacy policy.
2. The recipients or categories of recipients to whom the personal information may be supplied
   1. The recipients or categories of recipients to whom the personal information may be supplied includes but is not limited to those set out in CurrenC's privacy policy as well as CurrenC's Risk Management Compliance Policy.

9.3 Planned transborder flows of personal information

1. Personal Information will be safely and securely stored in the Republic of South Africa. Personal information may be provided to reputable non-local third parties in order to provide the clients with the requested services.

9.4 General description of Information Security Measures to be implemented by the responsible party to ensure the confidentiality, integrity and availability of the information

1. CurrenC has implemented a Company Data Protection Policy which details the company's measures and steps taken to ensure the protection of client's personal information and data. CurrenC's infrastructure is hosted on Google Cloud Platform which provides built-in security monitoring tools as well full monitoring and logging set up for the cloud network activities on virtual private clouds and metrics and alerts for suspicious activity. Additionally, CurrenC's on premises network has an institutional grade firewall, with modern networking equipment and VPN access. CurrenC's own proprietary dashboards, the frontends of the admin/management dashboards are protected by CloudFlare as well as a username, password and 2FA.

10. Availability of the Manual

1. A copy of the Manual is available:
   1. on file, if any;
   2. head office of CurrenC for public inspection during normal business hours;
   3. to any person upon request and upon the payment of a reasonable prescribed fee; and
   4. to the Information Regulator upon request.
2. A fee for a copy of the Manual, as contemplated in annexure B of the Regulations, shall be payable per each A4-size photocopy made.

11. Updating of the Manual

1. This Manual may be updated from time to time. Any changes will be posted on this page with an updated revision date.

Issued by Omer Iqbal Information Officer Version 4 11/11/2025

---

Footnotes

1. Section 17(1) of PAIA: For the purposes of PAIA, each public body must, subject to legislation governing the employment of personnel of the public body concerned, designate such number of persons as deputy information officers as are necessary to render the public body as accessible as reasonably possible for requesters of its records. ↩

2. Section 56(a) of POPIA: Each public and private body must make provision, in the manner prescribed in section 17 of the Promotion of Access to Information Act, with the necessary changes, for the designation of such a number of persons, if any, as deputy information officers as is necessary to perform the duties and responsibilities as set out in section 55(1) of POPIA. ↩

3. Regulation 7(1) of Regulation Relating to Promotion of Access to Information 2021: A request for access to a record contemplated in section 18(1) or 53(1) of the Act, must be made on a form that corresponds substantially with Form 2 of Annexure A to the Regulations, to the Information Officer. ↩

4. Regulation 8(1) of Regulation Relating to Promotion of Access to Information 2021: The information officer must, if a request for access to a record referred to in regulation 7 of the Regulations is granted or refused, inform the requester of: (i) his or her decision; and (ii) the fees payable as provided for in Annexure B to the Regulations, on a form that corresponds substantially with Form 3 of Annexure A to the Regulations, provided that the request for a copy of the guide may not be refused. ↩

5. Regulation 7(2) of the Regulation Relating to Promotion of Access to Information 2021: The Information Officer must (i) assist the requester with any request with regards to a request for access to information; and (ii) if the request for access to a record is made orally as a result of illiteracy or a disability of a requester, complete Form 2 of Annexure A to the Regulations on behalf of the requester and provide a copy thereof to the requester, as contemplated in section 18(3) of the Act. ↩

6. Section 14(1) of PAIA: The information officer of a public body must, in at least three official languages, make available a manual containing information listed in paragraph 4 above. ↩

7. Section 51(1) of PAIA: The head of a private body must make available a manual containing the description of the information listed in paragraph 4 above. ↩

8. Section 15(1) of PAIA: The information officer of a public body must make available in the prescribed manner a description of the categories of records of the public body that are automatically available without a person having to request access. ↩

9. Section 52(1) of PAIA: The head of a private body may, on a voluntary basis, make available in the prescribed manner a description of the categories of records of the private body that are automatically available without a person having to request access. ↩

10. Section 22(1) of PAIA: The information officer of a public body to whom a request for access is made, must by notice require the requester to pay the prescribed request fee (if any), before further processing the request. ↩

11. Section 54(1) of PAIA: The head of a private body to whom a request for access is made must by notice require the requester to pay the prescribed request fee (if any), before further processing the request. ↩

12. Section 92(1) of PAIA provides that the Minister may, by notice in the Gazette, make regulations regarding any matter required or permitted by PAIA, matters relating to fees contemplated in sections 22 and 54, notices required by the Act, uniform criteria for section 15 records, and any administrative or procedural matter necessary to give effect to the provisions of PAIA. ↩