PAIA & POPIA Manual

1. Private body

Business name: Impembelelo Solutions (Pty) Ltd trading as MilaPay
Registration number: 2021/972518/07
Physical address: 222 Smit Street, Braamfontein, Johannesburg, 2000
Email: support@milapay.co.za

2. Information Officer

Information Officer: Melisa Ndlovu
Email: melisan@milapay.co.za

3. Purpose of this manual

This manual explains how people may request access to records held by MilaPay and how MilaPay processes personal information under South African privacy and access-to-information requirements.

4. Records held

• Company and governance records
• Contracts, supplier and customer records
• Business user account records
• Customer records uploaded by business users
• Transaction, payment status and reminder records
• Support, security, audit and operational records
• Financial, tax and accounting records

5. Personal information processed

MilaPay may process names, contact details, business information, customer contact details, transaction details, reminders, notes, support messages, device/browser data and security/audit records.

6. Purposes of processing

We process information to provide the app, secure accounts, support payment tracking, generate reminders, provide support, manage subscriptions, comply with law, prevent fraud and improve the product.

7. Recipients or categories of recipients

Information may be shared with hosting, payment, messaging, email, analytics, support, backup, legal, accounting and regulatory service providers where required to provide and protect the service.

8. Cross-border transfers

Some service providers may process data outside South Africa. MilaPay aims to use appropriate contractual and security safeguards where cross-border processing occurs.

9. Security measures

MilaPay uses reasonable safeguards including access controls, secure passwords, admin restrictions, HTTPS, backups, environment variables, audit records and security monitoring.

10. How to request access to records

Send your request to melisan@milapay.co.za and include enough information for us to identify the record requested, your identity and your right to access the record. We may request proof of identity and may charge permitted fees where applicable.