PAIA Manual
Manual in terms of Section 51 of the Promotion of Access to Information Act, 2 of 2000 ("PAIA")
Momo Global (Pty) Ltd · Registration No. 2025/467876/07 · Date of compilation: 5 July 2026
1. Purpose of this manual
This manual is published in terms of Section 51 of PAIA, read with the Protection of Personal Information Act, 4 of 2013 ("POPIA"). It explains what records Momo Global (Pty) Ltd ("Momo Global") holds, how to request access to them, and how Momo Global processes personal information. It follows the template prescribed by the Information Regulator.
2. Contact details (Section 51(1)(a))
| Item | Detail |
|---|---|
| Private body | Momo Global (Pty) Ltd, Registration No. 2025/467876/07 |
| Head of body / Information Officer | Brink Olivier (Director) |
| Postal and physical address | 3 Kiepersol, 149 Dormie Ave, Clubview, Centurion, Gauteng, 0157 |
| Telephone | +27 72 842 1159 |
| [email protected] | |
| Website | affy.co.za |
3. The Regulator's Guide on how to use PAIA (Section 51(1)(b))
The Information Regulator has published a Guide, in all official languages, on how to use PAIA. The Guide is available from the Information Regulator:
- Website: inforegulator.org.za
- Email: [email protected]
- Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001; P.O. Box 31533, Braamfontein, Johannesburg, 2017
4. Records available in terms of other legislation (Section 51(1)(d))
Momo Global holds records in accordance with, among others, the following legislation:
- Companies Act, 71 of 2008 (incorporation and statutory records)
- Income Tax Act, 58 of 1962 and Value-Added Tax Act, 89 of 1991 (tax records)
- Protection of Personal Information Act, 4 of 2013 (personal information processing records)
- Electronic Communications and Transactions Act, 25 of 2002 (electronic records and transactions)
- Basic Conditions of Employment Act, 75 of 1997 (employment records, where applicable)
5. Records automatically available
The following records are available without a formal PAIA request:
- Content published on affy.co.za, including product information and blog articles
- This PAIA manual
- Our Privacy Policy, Terms, and Cookie Policy
- Marketing and product brochures, on request
6. Subjects and categories of records held (Section 51(1)(e))
| Subject | Categories of records |
|---|---|
| Company records | Incorporation documents, statutory registers, share register, minutes |
| Financial records | Accounting records, banking records, invoices, tax returns |
| Client records | Client agreements (including data operator agreements), correspondence, account records |
| Assessment records | Bank statement data and assessment outputs processed on behalf of client credit providers under written operator agreements, subject to the retention limits in those agreements and our Privacy Policy |
| Operational records | Supplier agreements, insurance records, information security records |
| Personnel records | Employment contracts and related records, where applicable |
The listing of a category does not imply that a record within it will be released. Every request is assessed under the grounds for refusal in Chapter 4 of Part 3 of PAIA.
7. How to request access to a record
- Complete Form 2 (Request for Access to Record), prescribed under the PAIA Regulations of 2021, available from the Information Regulator's website.
- Send the completed form to the Information Officer at [email protected] or the address in section 2.
- Identify the record requested, the form of access required, and provide proof of identity. If you request access on behalf of another person, provide proof of authority.
- If you seek access to exercise or protect a right, state which right and why the record is required for that purpose.
- Pay the prescribed request fee of R140.00 (private bodies, PAIA Regulations 2021). Personal requesters (a person requesting their own personal information) do not pay the request fee. Access fees for reproduction may apply per the fee schedule in the Regulations.
We will respond within 30 days as required by PAIA. If a request is refused, the response will state the grounds for refusal and the remedies available, including application to court or a complaint to the Information Regulator.
8. Processing of personal information (POPIA, Regulation 4(1)(d))
Purpose of processing
Momo Global processes personal information to deliver bank statement analysis services (AffyAssess) to client credit providers under written operator agreements, to operate its websites, to respond to enquiries, and to comply with legal obligations. When processing bank statement data for a client credit provider, Momo Global acts as an operator under Section 21 of POPIA; the credit provider remains the responsible party.
Categories of data subjects and personal information
| Data subjects | Personal information |
|---|---|
| Clients' credit applicants | Names, identity numbers, bank account details, transaction histories, income and expense information contained in bank statements supplied by the client credit provider |
| Client and supplier contacts | Names, contact details, correspondence |
| Website visitors | Analytics data, contact form submissions |
| Employees, where applicable | Employment and payroll records |
Recipients of personal information
The client credit provider that supplied the data (assessment outputs); contracted service providers (hosting, document extraction, identity verification) under written agreements; regulators and law enforcement where required by law. Momo Global does not sell personal information and does not share one client's data with any other client.
Planned cross-border flows
Primary processing infrastructure is hosted in South Africa. Certain contracted service providers (document extraction and identity verification) process data on infrastructure outside South Africa. All such transfers take place under written agreements providing an adequate level of protection as required by Section 72 of POPIA.
Security measures
Encryption of personal information in transit and at rest, access controls limiting access to authorised personnel, secure hosting, retention limits with scheduled deletion, and regular review of security measures (Section 19 of POPIA). Retention periods are set out in our Privacy Policy and in each client operator agreement.
9. Availability of this manual
This manual is available on affy.co.za/paia.html, for inspection at our principal place of business during normal business hours, and by email request to the Information Officer. It is reviewed and updated when our details or processing activities change.