Who this package is for
- SMEs that have been trading without a privacy notice
- Businesses that process customer or employee personal information
- Companies that use third-party processors (payroll, CRM, email marketing)
- Businesses that have received an Information Regulator query or complaint
What’s included
Website Privacy Policy (POPIA)
PAIA Manual
Operator (data-processing) Agreement
Data-breach response procedure
Pricing
| Package fee (excl. VAT) | R 10 500 |
| VAT (15%) | R 1 575 |
| Total (incl. VAT) | R 12 075 |
| 50% deposit to begin (excl. VAT) | R 5 250 |
| Balance on delivery (excl. VAT) | R 5 250 |
All fees are quoted exclusive of VAT unless stated otherwise. VAT is levied at 15%. The deposit invoice is issued after the scoping consultation; the balance invoice issues on delivery of the completed documents or filings.
Frequently asked questions
Is a PAIA manual actually required?
Yes. Section 51 of the Promotion of Access to Information Act 2 of 2000 (PAIA) requires every private body to compile and make available a manual describing its information holdings. The Information Regulator enforces this alongside POPIA.
Does this package cover a POPIA compliance audit?
No. This package produces the required documentation. A compliance audit (reviewing your data flows, systems, and existing contracts) is a more extensive engagement. Contact us if you need that level of review.
Who must be designated as information officer?
The CEO or equivalent head of the private body is automatically the information officer. A deputy information officer can be designated to handle day-to-day queries. We prepare the designation letter for either route.
Is website cookie consent covered?
The package includes a cookie notice clause within the Privacy Notice. A standalone Cookie Policy is available as an add-on.
This page is general information, not legal advice. Package scope may be adjusted during the scoping consultation to fit your specific circumstances.