Yellow Tree Reading Academy
Legal

PAIA Manual

Manual prepared in terms of section 51 of the Promotion of Access to Information Act 2 of 2000 ("PAIA") for Yellow Tree Reading (PTY) LTD · Draft dated 10 September 2026 · [Information Officer to complete the bracketed items and approve]

1. Purpose of this manual

PAIA gives effect to the constitutional right of access to information held by private bodies where that information is required for the exercise or protection of any right. This manual explains how to request records from Yellow Tree Reading (PTY) LTD and how personal information is processed under the Protection of Personal Information Act 4 of 2013 ("POPIA").

2. Contact details of the private body and its Information Officer

  • Name of body: Yellow Tree Reading (PTY) LTD, trading as Yellow Tree Reading Academy
  • Registration number: [COMPANY REGISTRATION NUMBER]
  • Information Officer: Tania Roux, Co-Founder & CEO — registered with the Information Regulator under number [IO REGISTRATION NUMBER]
  • Deputy Information Officer: [NAME]
  • Postal and physical address: 49 Hibiscus Way, Halali, Cape Town, 7550, South Africa
  • Telephone: +27 82 331 3096
  • Email: privacy@yellowtreereading.com
  • Website: https://yellowtreereading.com

3. The Guide on how to use PAIA (section 10)

The Information Regulator has compiled a Guide, in each official language, on how to use PAIA. It is available from the Regulator at JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001; telephone +27 10 023 5200; email PAIAComplaints@inforegulator.org.za; and at www.inforegulator.org.za.

4. Categories of records held

Records automatically available without a PAIA request: this website, our product catalogue, published prices, our policies and this manual.

Records held that may be requested (subject to PAIA's grounds for refusal):

  • Company records: incorporation documents, statutory registers, minutes [confirm]
  • Financial records: invoices, orders, banking, tax and accounting records (retained 5 years)
  • Customer records: orders, training bookings, member accounts and Academy progress, contact-form and referral submissions, data-subject requests
  • Learner assessment records held in Yellow Tree Hub on behalf of schools and parents (see the Hub's own privacy policy)
  • Personnel records: [employment contracts, payroll — confirm]
  • Intellectual property: course materials, assessment instruments, brand assets

5. Records available in terms of other legislation

[Companies Act 71 of 2008; Income Tax Act 58 of 1962; Value-Added Tax Act 89 of 1991; Basic Conditions of Employment Act 75 of 1997; Consumer Protection Act 68 of 2008; Electronic Communications and Transactions Act 25 of 2002 — Information Officer to confirm the list.]

6. Processing of personal information (POPIA section 51(1)(c))

  • Purpose: selling and delivering digital resources, courses and training; running member accounts; providing the Yellow Tree Hub screening and assessment platform to schools and parents; responding to enquiries; complying with tax and consumer law.
  • Categories of data subjects: customers and website visitors; member account holders; training delegates; teachers and practitioners; parents and guardians; learners (children, in the Hub); suppliers; staff.
  • Categories of personal information: identity and contact details; order and payment references (no card numbers); account and course progress; correspondence; for learners in the Hub: name or reference, date of birth or age band, year group, assessment scores and notes, consent records.
  • Recipients: our processors — Supabase (database, authentication), Lovable (hosting, email delivery), Cloudflare (network), PayFast (payments), [Zoho Books / QuickBooks Online — confirm which] (invoicing). We do not sell personal information.
  • Cross-border flows: our processors host outside South Africa in [REGIONS]; transfers rely on POPIA section 72(1)(a) (adequate protection under the GDPR) and binding processing agreements.
  • Security measures: row-level access control, encryption in transit, two-factor authentication for administrators, access logging of learner records, minimisation of stored payment data, retention schedules enforced by scheduled jobs.

7. How to request access to a record

  1. Complete Form 2 (Request for Access to Record) from the Regulator's website, or email the same details to privacy@yellowtreereading.com: your name, contact details, the record you want, the right you seek to exercise or protect, and the form of access you prefer.
  2. A request fee of [R100, per the PAIA Regulations, 2021 — confirm] may be payable, plus access fees for reproduction and search time at the prescribed rates. Requests for your own personal information carry no request fee.
  3. We respond within 30 days, extendable once by up to 30 days where the Act allows.
  4. If a request is refused you may lodge a complaint with the Information Regulator (Form 5) within 180 days.

8. Availability of this manual

This manual is available on this website, at our offices during business hours, and from the Information Regulator. It is reviewed annually. [Approved by: Information Officer — date]