Identity and purpose
This is the public web manual of [LEGAL_ENTITY_NAME], registration number [COMPANY_REGISTRATION_NUMBER], operating Bloom under the Plainspoken trading brand in South Africa. The head of the private body fulfils the information-officer role. Contact the information officer at legal@plainspoken.co.za; privacy matters may be sent to privacy@plainspoken.co.za. The site is https://plainspoken.co.za. No unverified physical address is published here. An official prescribed filing may require further entity particulars before submission.
PAIA guide and availability
The Information Regulator publishes the PAIA guide and forms at https://inforegulator.org.za/paia/. This manual is available without charge on this site and can be printed from your browser. Ask legal@plainspoken.co.za for an accessible copy.
Records held
Depending on actual operations, records may include incorporation and governance records, contracts, customer and subscription records, invoices and accounting records, staff and supplier records, support correspondence, product and security documentation, audit logs and customer data hosted in Bloom. Public website pages and published policies are automatically available without a PAIA request. Records required under applicable company, tax, labour, consumer and data-protection legislation may also be held; the exact set depends on the legal entity and operations.
Request procedure and fees
Use the current prescribed Form 2 for access to a private-body record, identify the record and the right to exercise or protect, state the form of access requested and provide proof of identity or authority. Send it to legal@plainspoken.co.za. Prescribed fees and any permitted deposit or access charge will be communicated under the current regulations. We decide requests within the statutory period, subject to lawful extension and third-party notice procedures.
Refusal and remedies
PAIA permits or requires refusal in cases such as unreasonable disclosure of personal information, commercial confidentiality, privilege, safety or protected third-party interests. A requester may complain to the Information Regulator or apply to a competent court where PAIA allows. See https://inforegulator.org.za/paia/.
POPIA processing
We process account holders, staff, salon clients, suppliers and website contacts as described in the Privacy Policy and DPA. Categories can include identity and contact details, appointments, notes, staff records, transactions and logs. Recipients may include authorised personnel, configured hosting and email providers, PayFast for subscription checkout, advisers and lawful authorities. Cross-border flows depend on verified deployment and are subject to POPIA safeguards. We use role controls, password hashing, tenant scoping, private media, HTTPS production settings and audit logging; see Security and Subprocessors for detail.