PAIA Manual
Bamboo Media (trading as Bamboo Tech Law)
Prepared under section 51 of the Promotion of Access to Information Act 2 of 2000 ("PAIA"), as amended by the Protection of Personal Information Act 4 of 2013 ("POPIA").
Version 2026-11-15
1. About us
We provide Bamboo Tech Law, cloud practice-management software for legal practitioners.
2. Contact details
- Name: Bamboo Media
- Physical and postal address: 131 Oxford Road, Rosebank, Johannesburg, 2196, South Africa
- Email: support@bambootechlaw.com
- Website: https://bambootechlaw.com
- Information Officer: the director responsible for privacy (support@bambootechlaw.com)
3. The Information Regulator's guide
The Information Regulator has published a guide on how to use PAIA and POPIA (section 10 of PAIA), in all official languages. It is available from the Information Regulator at inforegulator.org.za, and we will send you a copy on request.
4. Records available without a formal request
- Our Terms of Service, Privacy Policy, Data Processing Agreement, Security page and this manual, at https://bambootechlaw.com.
- Product and price information on our website.
5. Records we hold under other laws
Where they apply to us, we keep records under the following laws, among others:
- the Companies Act 71 of 2008;
- the Income Tax Act 58 of 1962;
- the Tax Administration Act 28 of 2011;
- the Value-Added Tax Act 89 of 1991;
- the Basic Conditions of Employment Act 75 of 1997;
- the Labour Relations Act 66 of 1995;
- the Employment Equity Act 55 of 1998;
- the Unemployment Insurance Act 63 of 2001;
- the Electronic Communications and Transactions Act 25 of 2002;
- the Consumer Protection Act 68 of 2008;
- POPIA;
- the Cybercrimes Act 19 of 2020.
6. Categories of records we hold
| Subject | Records |
|---|---|
| Company | Incorporation and statutory records, agreements, policies |
| Finance and tax | Accounting records, invoices, bank records, tax returns |
| Customers (firms and users) | Account details, subscription and billing records, support correspondence, sign-in and security logs, records of terms accepted |
| Suppliers and service providers | Contracts, invoices, correspondence |
| Staff and contractors (if any) | Employment or service contracts, payroll, tax and leave records |
| Technology | System documentation, security records, incident records |
| Marketing | Website content, mailing-list consents and opt-outs |
Firm Data (the content that law firms store in Bamboo Tech Law) belongs to each firm. We hold it only as their operator. Requests for it must go to the firm concerned, which is the responsible party and holds it subject to legal professional privilege.
7. Processing of personal information (POPIA)
- Purposes: providing and billing for the service, security, support, complying with the law, and marketing with consent. See our Privacy Policy.
- Categories of data subjects and information:
- firm owners and users: identity, contact, account, billing and sign-in information;
- website visitors and enquirers: contact information and messages;
- suppliers: contact and contract information;
- staff: employment information.
- Recipients: the service providers listed in our Privacy Policy, our professional advisers, and authorities where the law requires.
- Transfers outside South Africa: to service providers in the United Kingdom, the United States and elsewhere, under section 72 of POPIA (see the Privacy Policy).
- Security measures: see our Security page and the Data Processing Agreement.
8. How to request a record
- Fill in Form 2 (Request for Access to Record) prescribed under the PAIA Regulations. It is available from the Information Regulator's website or from us.
- Send it to the Information Officer at support@bambootechlaw.com or to our address above.
- Give enough detail to identify the record and yourself, say how you want access, and say which right you are exercising or protecting and why you need the record.
- If you are asking on behalf of someone else, include proof of your authority.
9. Fees
A requester (other than a person asking for their own personal information) may have to pay the request fee and access fees prescribed in the PAIA Regulations. We will tell you if a fee or deposit is payable before we process the request.
10. Decision and grounds for refusal
We will decide within 30 days (extendable once by up to 30 days, with notice). We may refuse access on the grounds in Chapter 4 of Part 3 of PAIA, including:
- protecting the privacy of a third party;
- third-party commercial information;
- confidential information;
- the safety of people or property;
- legal privilege;
- our own commercial information.
11. Remedies
If you are not satisfied with our decision, you may complain to the Information Regulator within 180 days, or apply to court, as PAIA provides.
12. Availability and updates
This manual is available on our website and at our address, and from the Information Officer on request. We update it when our details or processing change.