Skip to Content

02X (Pty) Ltd t/a GRC Shop, PAIA Manual

Promotion of Access to Information Act 2 of 2000. Version 1.1 · Effective 24 July 2026 · Company registration number 2025/768856/07 · Approved by Philip de Witt, Information Officer.

This manual is available at the company's registered office and on this website.

PAIA Manual

Manual of 02X (Pty) Ltd t/a GRC Shop, published in terms of section 51 of the Promotion of Access to Information Act 2 of 2000. It sets out the records we hold, how to request access to them, the grounds on which access may be refused, and the prescribed fees.

Part A: Introduction

1.1 Introduction to PAIA

The Promotion of Access to Information Act 2 of 2000 ("PAIA" or "the Act") gives effect to Section 32 of the Constitution of the Republic of South Africa, 1996, which provides that everyone has the right of access to any information held by the state, and any information held by another person that is required for the exercise or protection of any right.

The Act requires private bodies to compile a PAIA Manual describing the categories of records held, the process by which a person may request access, and the associated fees. This manual fulfils that obligation for 02X (Pty) Ltd t/a GRC Shop.

1.2 Scope

This manual applies to 02X (Pty) Ltd t/a GRC Shop (trading as "GRC Shop"), including all divisions, offices and operations; all records held by GRC Shop in whatever medium, including electronic records; and all persons wishing to request access to records held by GRC Shop.

1.3 Availability and the Section 10 Guide

This manual is available on the GRC Shop website, at the registered office, from the Information Officer by email to [email protected], and from the Information Regulator of South Africa. The Information Regulator has compiled a guide under Section 10 of PAIA to assist persons wishing to exercise rights under PAIA, available at www.justice.gov.za/inforeg/.

Part B: Contact information of the Information Officer

2.1 Information Officer

In terms of PAIA, the head of a private body is the Information Officer (IO). For 02X (Pty) Ltd t/a GRC Shop, the IO is:

  • Company: 02X (Pty) Ltd t/a GRC Shop (Reg. 2025/768856/07)
  • Information Officer: Philip de Witt (Founder / Chief Executive Officer)
  • Email: [email protected]
  • Telephone: +27 82 835 4731
  • Physical and postal address: 11 Knights Court, Rivonia, Sandton, 2128
  • Website: www.grcshop.co.za

No Deputy Information Officer has been appointed at present; the Information Officer handles all PAIA-related matters directly.

2.3 Information Regulator of South Africa

  • Physical address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
  • Postal address: P.O. Box 31533, Braamfontein, Johannesburg, 2017
  • General email: [email protected]
  • PAIA complaints: [email protected]
  • POPIA complaints: [email protected]
  • Telephone: +27 (0)10 023 5207 · Website: www.justice.gov.za/inforeg/

Part C: Structure of GRC Shop

02X (Pty) Ltd t/a GRC Shop is a South African technology company providing AI-powered governance, risk and compliance (GRC) management software to South African businesses, operating since 2025. Its primary offering is a cloud-based compliance management platform (including an AI-powered OHS App), compliance consulting via a curated network of SHEQ practitioners, client onboarding and monitoring support, and compliance templates and policies. GRC Shop is operated as an SME under a sole-founder structure; Philip de Witt serves as both Founder and Information Officer.

Part D: Records held by GRC Shop

4.1 Records automatically available (no request required)

The POPIA / Privacy Policy (at www.grcshop.co.za/privacy), this PAIA Manual, the General Terms and Conditions, and the Service Agreement template (to clients and prospective clients on request) are available without a formal PAIA request.

4.2 Records available subject to a PAIA request

Subject to the grounds for refusal below, GRC Shop holds: financial records (invoices, receipts, annual financial statements, bank statements, SARS correspondence); human-resources records (employment contracts, leave, personnel files, contractor agreements, payroll); client records (service agreements, onboarding documentation, compliance programme documentation, platform usage records); correspondence (business email, meeting minutes, regulator correspondence); technical documentation; and legal records. Client records are held in strict confidence and access by third parties will generally be refused on grounds of third-party privacy (s63) and POPIA obligations unless the client consents.

4.3 Records that may be refused

Access may be refused under PAIA Chapter 4, including: third-party personal information (s63), commercial information / trade secrets (s36), legally privileged records (s44), safety of individuals (s37), and manifestly frivolous or vexatious requests (s45), subject to the public interest override in s46.

Part E: How to request access to records

5.1 Prescribed form

Any person wishing to request access must use the prescribed Form C published by the Information Regulator (available at www.justice.gov.za/inforeg/ or from the Information Officer). Requests not submitted on Form C may be rejected.

5.2 Where to submit Form C

  • By email: [email protected]
  • By post: 11 Knights Court, Rivonia, Sandton, 2128. 02X (Pty) Ltd t/a GRC Shop, Attention: Information Officer
  • By hand: 11 Knights Court, Rivonia, Sandton, 2128

5.3 Processing time

Standard decision period: 30 days from receipt of the completed Form C and the request fee. The IO may extend by a further 30 days by written notice before expiry (large volumes, extensive searching, or third-party consultation). Failure to respond within the prescribed period is a deemed refusal, entitling the requester to complain to the Information Regulator or approach the High Court.

5.4 Fees

Request fee: R140.00, payable upfront before processing. Access fees are determined by the form of access and reproduction costs per the Information Regulator's fee schedule (currently R2.00 per A4 photocopy or printed page or part thereof; R40.00 for a copy in computer readable form on a flash drive or compact disc supplied by the requester, or R60.00 where we supply the disc; R24.00 per record for a transcription of visual images or an audio record; delivery at cost). Search and preparation is charged at R145.00 per hour, or part of an hour reasonably required, excluding the first hour, and may not exceed R435.00 in total. A deposit of one third of the access fee may be required where the search and preparation is likely to exceed six hours. Fees may be waived for indigent requesters or where the request is in the public interest, on written motivation.

5.6 Remedies

PAIA does not provide an internal appeal for private bodies. A requester may complain to the Information Regulator under s77A (at [email protected]) or apply to the High Court for mandatory relief, within 30 days of a refusal or such longer period as the Court allows.

Part F: POPIA reference

02X (Pty) Ltd t/a GRC Shop is a "responsible party" under the Protection of Personal Information Act 4 of 2013 (POPIA) and is committed to the eight conditions for lawful processing. Data subjects have the rights to be notified, to access, to correction/deletion, to object, and to complain to the Information Regulator. The full POPIA / Privacy Policy is available at www.grcshop.co.za/privacy. POPIA queries may be directed to the Information Officer at [email protected] (subject line: POPIA Query / Data Subject Request).

Annexures

Annexure A: Form C: the current Form C is obtained from the Information Regulator (www.justice.gov.za/inforeg/) or from the Information Officer; it must be accompanied by proof of identity and the request fee. Annexure B: Applicable legislation: PAIA, POPIA, Companies Act 71 of 2008, Income Tax Act 58 of 1962, VAT Act 89 of 1991, OHS Act 85 of 1993, COIDA 130 of 1993, LRA 66 of 1995, BCEA 75 of 1997, EEA 55 of 1998, ECTA 25 of 2002, B-BBEE Act 53 of 2003, CPA 68 of 2008, NCA 34 of 2005 and the Cybercrimes Act 19 of 2020. Annexure C: Fees: as set out in section 5.4 above and the Information Regulator's published schedule.

End of PAIA Manual. 02X (Pty) Ltd t/a GRC Shop · v1.1 · Effective 24 July 2026 · Approved by Philip de Witt, Information Officer.