Date of this version: October 24, 2026
1. About this manual
PAIA gives everyone the right to ask for records held by a private body, such as a company, when they need the record to exercise or protect a right. POPIA also gives you rights over your own personal information.
This manual explains what records we keep, how to ask for them, what it may cost, and how we process personal information.
It covers all of Impart Productions' work: the marketing, digital and automation services we provide to clients, and our online wall art store, Impart Home.
2. Our details
| Company | Impart Productions (Pty) Ltd. Our online store trades as Impart Home. |
| Registration number | 2020/588692/07 |
| Head of the company | Liam Pitcher, director |
| Information Officer | Liam Pitcher, registered with the Information Regulator |
| Street and postal address | 30 Mountain Road, Claremont, Cape Town 7708, South Africa |
| Phone | +27 82 527 4968 |
| support@impart.global (subject: "PAIA request") | |
| Websites | impart.global and home.impart.global |
3. The Information Regulator's guide
The Information Regulator publishes a guide on how to use PAIA and POPIA. It explains the rights these laws give you and how to use them. You can get it from the Regulator's website, inforegulator.org.za, or by contacting the Regulator. You can also ask us for a copy.
Information Regulator
- Website: inforegulator.org.za
- General enquiries: enquiries@inforegulator.org.za
- PAIA complaints: PAIAComplaints@inforegulator.org.za
- POPIA complaints: POPIAComplaints@inforegulator.org.za
- Phone: +27 10 023 5200
- Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg 2191
4. Records available without a request
We have not published a notice under section 52 of PAIA. These records are freely available on our website, without a request:
- the Impart Home Shipping Policy, Returns and Refunds Policy, Privacy Policy and Terms of Service
- our contact and business details, and information about our services
- this manual
5. Records we keep under other laws
We keep records as required by these laws, where they apply to us:
- Companies Act 71 of 2008
- Income Tax Act 58 of 1962
- Tax Administration Act 28 of 2011
- Electronic Communications and Transactions Act 25 of 2002
- Protection of Personal Information Act 4 of 2013
- Promotion of Access to Information Act 2 of 2000
- Currency and Exchanges Act 9 of 1933 and the Exchange Control Regulations
- Consumer Protection Act 68 of 2008
6. The records we hold
| Subject | Categories of records |
|---|---|
| Company and statutory | Registration documents, Memorandum of Incorporation, share register, beneficial ownership records, director records, resolutions and minutes |
| Finance and tax | Financial statements, accounting records, bank statements, invoices and receipts, tax returns and correspondence with the South African Revenue Service |
| Clients and projects | Proposals, quotes and agreements, briefs, project files and deliverables, campaign, website and automation materials, messages, invoices and payment records |
| Information we handle for clients | Personal information our clients give us, or ask us to collect, for their projects, such as contact lists, customer relationship (CRM) records and website usage data. We hold it under our agreement with that client. |
| Store customers | Orders, payment and refund records, production, delivery and tracking records, claims and the photos sent with them, messages, marketing consents and opt-outs |
| Products and artwork | Artwork files, generation and edit records, quality checks, product listings and prices |
| Suppliers and service providers | Agreements and terms, production orders, payment records, messages |
| Website and systems | Website content and policies, analytics data (with consent), security and access logs |
| Staff | Employment records, if we employ staff |
Listing a category does not mean that every record in it will be released. Section 8 explains when we may refuse a request.
7. How to ask for a record
- Use Form 2 (Request for Access to Record) in the PAIA Regulations, 2021. The form is on the Information Regulator's website, or we can email it to you.
- Send it to our Information Officer at support@impart.global, or to the address in section 2.
- Give enough detail for us to find the record, and say how you want to receive it (for example, by email).
- Say which right you want to exercise or protect, and why you need the record for it. PAIA requires this for requests to private bodies.
- Include proof of identity. If you ask on behalf of someone else, include proof that you may act for them.
Your own personal information. To see, correct or delete your own personal information, you can also simply email us, as our Privacy Policy explains. The POPIA forms are Form 1 (objection to processing) and Form 2 (correction or deletion) in the POPIA Regulations, 2018. We accept requests by email too.
Fees. We may charge the request fee and access fees set out in the PAIA Regulations. There is no request fee when you ask for your own personal information. If a fee applies, we tell you the amount before we process the request, and we may ask for a deposit when the search will take a long time, as the regulations allow.
Our answer. We decide within 30 days of receiving a complete request. We may extend this once, by up to 30 more days, if the law allows it. If we do, we tell you why.
8. When we may refuse
PAIA lets us refuse access, in whole or in part, in limited cases. These include protecting:
- another person's personal information
- a third party's commercial or confidential information
- someone's safety or property
- records privileged from production in legal proceedings
- our own commercial information
- research information
If we refuse, we give you our reasons.
9. If you are unhappy with our decision
You may complain to the Information Regulator within 180 days of our decision. After that process, you may apply to a court.
10. How we process personal information
Why we process it
- to provide marketing, digital and automation services to our clients, and to manage our client relationships and projects
- to process personal information for our clients, on their instructions and under our agreements with them
- to sell made-to-order prints, have them printed and delivered, take payments and make refunds
- to answer messages and settle claims
- to prevent fraud
- to send marketing emails, only with consent
- to understand how our website is used, only with consent
- to keep accounting, tax and company records, and to meet our legal duties
Whose information, and what kinds
| People | Information |
|---|---|
| Clients and their contact people | Names, contact details, company details, project messages, billing details |
| People whose information our clients share with us | Contact and customer details, CRM records and website usage data, as each client's instructions require |
| Store customers | Name, email address, phone number, shipping and billing addresses, order details, limited payment details (card type, last four digits, payment result), production, tracking and delivery status, messages and claim photos, marketing choices |
| Website visitors | Device and usage information, and cookie choices |
| Suppliers and service providers, and their contact people | Names, contact details, bank details, agreement terms |
| Directors and shareholders | Names, identity numbers, addresses and contact details, as company law and our banks require |
Who receives it
- Google, through Google Workspace, for our email, documents and file storage, and for website analytics and advertising, only with consent
- Anthropic, whose AI assistant Claude we use to draft, analyse and automate work
- Mouseflow, which records how visitors use a website, on the websites where it is installed
- Nedflow, a customer relationship management (CRM) system we use for one client's records
- Shopify, which hosts our store and checkout
- PayPal, and the banks and card networks involved in each payment
- Printify, our print-on-demand partner, the print shop in the US that makes each order, and carriers
- Cloudflare (our order-checking system) and GoDaddy (our email and domains)
- our bank, accountants and other professional advisers
- the Companies and Intellectual Property Commission, the South African Revenue Service, and other authorities when the law requires it
Information we process for clients. When we process personal information for a client, that client usually decides why and how it is processed, and we act on its instructions. If your request is about information a client of ours holds, please contact that client. We help our clients answer such requests.
Sending it outside South Africa. Personal information goes to the United States, Canada, the European Union and the United Kingdom, and other countries where our service providers operate. For store customers, our Privacy Policy explains why we may send it and the level of protection in those countries.
How we protect it
- our website uses an encrypted (HTTPS) connection
- we never see or store full card numbers; PayPal processes payments
- access to personal information is limited to the people and systems that need it
- our service providers protect the information under their own security terms
11. Where to find this manual
This manual is on our website at home.impart.global/pages/paia-manual. You can also ask for a copy by email, or see it at our address in section 2 during business hours. We give a copy to the Information Regulator on request. We update this manual when our details or practices change.