RunIT — PAIA Manual

Manual published in terms of section 51 of the Promotion of Access to Information Act 2 of 2000 ("PAIA"), read with the Protection of Personal Information Act 4 of 2013 ("POPIA").

Effective date: 17 July 2026 · Version: 1

1. Our contact details

RunIT operates a marketplace platform that matches Customers who need home services with independent Workers who perform them.

2. The Information Regulator's guide on how to use PAIA

The Information Regulator has compiled a guide, in terms of section 10 of PAIA, containing information to help a person who wishes to exercise any right under PAIA and POPIA. The guide is available in each official language and may be obtained from:

The Information Regulator (South Africa) JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 Email: enquiries@inforegulator.org.za · Complaints: complaints.IR@inforegulator.org.za Website: https://inforegulator.org.za

3. Records available without a formal request

The following records are automatically available and may be accessed without submitting a PAIA request:

• Publicly visible Worker profiles on the RunIT apps — display name, photo, services offered, service area, verification badge, rating and public reviews.
• Ratings and reviews displayed publicly in the apps.
• Our published policies — Terms of Service, Customer Agreement, Worker Agreement, Refund & Cancellation Policy and Privacy Policy, available in-app and on our website.
• Marketing material, public blog posts, pricing information and service category listings.
• Records available in terms of other legislation — for example records filed with the CIPC under the Companies Act 71 of 2008.
• Your own account data, which you can view and update directly in the app (profile, addresses, bookings, chat history, receipts and settings) without any formal request.

4. Records available on formal request

The following categories of record are held by RunIT and are available only on a formal PAIA request, subject to the grounds for refusal in Chapter 4 of PAIA (including the mandatory protection of the privacy of a third party, and of commercially sensitive information):

4.1 Operational records

• User account details and registration records.
• Customer transaction and booking logs.
• In-app chat records and dispute records.
• Internal app usage statistics and analytics.
• Audit logs of administrative actions.

4.2 Worker records

• Verified identity documents and ID numbers.
• Police clearance certificates supplied by Workers, and their verification status.
• Banking details held for payouts.
• Signed Worker Agreements and verification history.
• Referral and portfolio records.

4.3 Financial records

• Financial statements and management accounts.
• VAT status and tax records, and SARS correspondence.
• Payment, fund-release, commission and payout records.
• Records retained for the minimum seven (7) years required by section 24 of the Companies Act.

4.4 Company and employment records

• Statutory records under the Companies Act (MOI, registers, resolutions).
• Contracts with service providers and suppliers.
• Internal policies and procedures.
• Records held under employment-related legislation, where applicable.

5. How to make a request

1. Complete the prescribed form. Use Form 2 (Request for Access to Record), prescribed under PAIA regulations and available from the Information Regulator's website.
2. Send it to the Information Officer — Simo Memela, at support@runitt.co.za, or to our registered address above.
3. Provide sufficient detail — enough particulars for us to identify the record and to identify you, the form of access required, and your contact details. If you are requesting the record on behalf of someone else, attach proof of your authority.
4. State the right you are exercising. If the record is required to exercise or protect a right, explain which right and how the record is required for it.
5. Pay the prescribed fees. A request fee and, where applicable, an access fee (for search, reproduction and postage) are payable at the rates prescribed by the PAIA regulations. A requester seeking access to a record containing their own personal information does not pay a request fee. We will notify you of any access fee before processing.
6. Our response. We will decide within 30 days of receiving the request and notify you in writing. This period may be extended by a further 30 days in the circumstances allowed by PAIA. If we refuse, we will give reasons and explain your right to lodge a complaint with the Information Regulator or to apply to court.

6. POPIA — how we process personal information

Why we collect it. To match Customers with independent Workers; to enable bookings, in-app communication and payment; to verify Worker identity for trust and safety; to prevent fraud; to support disputes; and to comply with our legal obligations.

Who we share it with.

• Our Payment Partner, Ozow (Pty) Ltd — payment processing, settlement, and account and fraud verification. Ozow processes personal information in South Africa and Ireland under its own privacy policy.
• Supabase (on Amazon Web Services, UK/EU regions) — hosting, storage and processing.
• SMS and push-notification providers — OTPs and service notifications.
• Background-check and verification providers — Worker vetting.
• Between Customers and Workers — only what each needs to complete a booking.
• Professional advisers and authorities — where required by law.

We do not sell personal information.

How we keep it secure. Encryption in transit and at rest; Row-Level Security so users can reach only their own data; tokenised payments (we never store card numbers); an immutable audit log of privileged actions; access controls, fraud detection and least-privilege service design.

Cross-border transfers. Personal information is stored in the UK and EU under a binding Data Processing Addendum enforcing UK/EU GDPR standards, in reliance on POPIA §72(1)(a).

Full detail is in our Privacy Policy.

7. Complaints

If you are dissatisfied with how we handled your request or your personal information, you may complain to the Information Regulator at the address in clause 2, or approach a court.

• Legal entity: RunIT (Pty) Ltd · Registration number: 2026/475840/07
• Information Officer: Simo Memela · support@runitt.co.za
• Registered address: Cleeve Rd, Henley on Klip, Meyerton, Gauteng, 1961, South Africa