PAIA manual

1. Company and Information Officer

The Fancy Gadgeteer (Pty) Ltd, registration 2024/381827/07, is registered in South Africa and operates the Fancy Dice shop. Sole director, head of the private body and Information Officer: Craig Baker. Website: fancydice.co.za. Access requests: privacy@fancydice.co.za. Shop support: shop@fancydice.co.za. Telephone: +27 68 682 7297.

Use Show business address below for the physical business and legal-service address. If verification is inaccessible or unavailable, contact the Information Officer for the address, postal arrangements or assistance. A website verification step does not restrict your statutory right to request records.

2. Public information and records held

Published product information, character stories, reviews, shop policies, business disclosures and this manual are available on the website without a formal request. Your private account and order information require the normal identity checks; another person’s records are not made public.

Company records include incorporation and governance information, director records, accounting and tax records, supplier or service-provider agreements and business correspondence. Shop records cover orders, deliveries, payment references, vouchers, subscriptions, accounts and sign-in methods, QR ownership, rewards, transfers, reviews, customer-care cases and security audits. Employment or contractor records are included where held.

Relevant record-keeping laws include the Companies Act 71 of 2008, Income Tax Act 58 of 1962 and Tax Administration Act 28 of 2011, where applicable; shop and personal-information records also relate to the Consumer Protection Act, Electronic Communications and Transactions Act, PAIA and POPIA. Listing a record does not make it automatically disclosable.

3. How to request access

Send the official PAIA Form 2 to privacy@fancydice.co.za, addressed to Craig Baker. Identify the record, relevant dates or references, your contact details and preferred form of access. For a private-body request, explain the right you seek to exercise or protect and why the record is needed. Include the identity and representative-authority proof required by the form; ask us about a secure way to provide sensitive attachments.

The Information Regulator’s Guide explains PAIA, POPIA and available assistance. The links below provide the Guide, forms and current fees. Contact the Information Officer if you need help locating a record or using a form. Personal-information access, correction, deletion and objection requests may also be made under POPIA, subject to its requirements; POPIA forms are distinct from PAIA Form 2.

4. Decisions, fees and remedies

We decide and notify you as soon as reasonably possible, normally within 30 calendar days after receipt of the request or required particulars, subject to PAIA’s third-party procedures. A lawful extension may be made once for up to 30 further days, with written reasons and information about remedies. If a record cannot be found or does not exist, the response explains the search as PAIA requires.

Access is assessed under PAIA, including protection of other people’s privacy, confidential commercial information and legal privilege, and applicable disclosure exceptions. Any refusal gives the legal grounds and remedies; reasonably separable portions are considered for release. Form 3 records the outcome and fees. Prescribed request, search, reproduction or delivery fees and any lawful deposit are notified where applicable, with exemptions considered. Use the official fee schedule below; do not send money or bank details with an initial enquiry.

There is no mandatory PAIA internal appeal to this private company. You may complain to the Information Regulator using Form 5, generally within 180 days of the relevant decision or deemed refusal, subject to the Regulator’s procedures. Court remedies are also available under PAIA. The official complaints and Guide links explain procedures and time limits; asking us to reconsider does not suspend them.

5. Personal information, purposes and recipients

We process information about shoppers, gift recipients, account holders, collectors, reviewers, case participants, staff and service-provider contacts. Depending on the relationship, this includes identity/contact and delivery details, purchases, payment references, account credentials, ownership/reward history, correspondence and relevant case evidence. Purposes are shopping, delivery, payments/refunds, account security, collection benefits, customer care, fraud prevention and required business records.

Relevant recipients include authorised staff, Cloudflare for hosting/email/security, Google for chosen sign-in or address search, Payfast or Paystack for available payments, and Bobgo and couriers for deliveries. Advisers or authorities may receive information when lawfully required. We do not sell personal information. Optional marketing and WhatsApp recovery are unavailable at launch.

Cloud hosting and the chosen sign-in or payment providers may process relevant account, technical or transaction information outside South Africa. Destinations and transfer safeguards depend on the service. Ask the Information Officer for current provider locations and applicable safeguards; this manual does not certify a particular contract or guarantee a single storage country.

6. Security and retention

Controls include protected sign-in, role-based staff permissions, private case storage, encrypted case-specific refund banking details and audit records. Passkeys store public-key credentials, not device biometrics. Financial and ownership history is retained for its purposes and applicable legal obligations; deletion requests are assessed against those obligations. No security measure is an absolute guarantee.

Staff-recovery identity photos and case-specific refund banking payloads are deleted 30 days after the relevant case closes. Banking details are not a reusable account profile. Case decisions and audit history can remain after those sensitive payloads are removed. The Privacy notice explains these records and other choices in more detail.

7. Availability and updates

Prepared 3 November 2026. This English manual is available on this page for reading and printing, from the Information Officer on request, and for inspection during normal business hours; contact us for practical arrangements. The Information Regulator may request a copy. Prescribed reproduction charges may apply to requested copies. Craig Baker updates the manual when contact details, records or processing arrangements materially change.