PAIA Manual
Updated version: 14 July 2026
This manual is intended to support requests under the Promotion of Access to Information Act, 2000 (PAIA), and privacy-related requests under the Protection of Personal Information Act, 2013 (POPIA), for the South African entities involved in SC Spheres.
Entities Covered
This manual covers SC Technology (Pty) Ltd of Office 315, Sunclare Building, 21 Dreyer Street, Claremont, Cape Town, South Africa, 7708, and Greenfields Data Solutions (Pty) Ltd of Sunclair Building, 21 Dreyer Street, Claremont, 7708, South Africa.
SC Technology owns, develops, administers and maintains SC Spheres. Greenfields Data Solutions licenses SC Spheres in South Africa, Namibia, Lesotho, Swaziland, Zimbabwe, Botswana and Mozambique. SC Spheres (UK) Ltd licenses SC Spheres in other territories and is referenced where relevant in the Privacy Notice.
Information Officer Contact
PAIA, POPIA and privacy-related requests may be sent to support@scspheres.com. The request should include enough information to identify the requester, the records or personal information requested, the right the requester wishes to exercise, and how the requester would like to be contacted.
Records And Personal Information
Records held by the covered entities may include company records, governance records, contracts, supplier records, client records, support records, financial records, personnel records, security and operational records, and records relating to the operation, development, support and administration of SC Spheres.
SC Spheres may process personal information described in the Privacy Notice, including account and user information, Client Data, audit records, security records, signing evidence, technical diagnostics, support records and communications.
Website Visitors And Prospective Clients
Records relating to visitors to the SC Spheres public website may include website access logs, trial request information, contact and enquiry records, website chat messages, analytics consent preferences, and records of related communications. More detail is available in the Website Privacy Notice.
SC Spheres Application Users
Records relating to SC Spheres application users may include account details, roles, organisation and group access, authentication and security records, audit logs, signing evidence, support records and communication records. More detail is available in the Application Privacy Notice.
Client-Controlled Application Data
Client Data uploaded to or generated in a client's SC Spheres instance is generally controlled by that client organisation. Requests relating to Client Data may therefore need to be directed to or handled with the relevant client organisation, depending on the request, the applicable law, and the role of SC Technology, Greenfields Data Solutions or SC Spheres UK in relation to that data.
Processing Purposes
Personal information may be processed to provide and administer SC Spheres, manage client and user relationships, secure the platform, maintain audit and operational records, provide support, communicate with clients and users, manage suppliers, comply with legal obligations, and protect legitimate rights and interests.
Recipients And Sub-Processors
Personal information may be disclosed to authorised personnel, client administrators, service providers, professional advisers, regulators, public authorities, or other parties where required or permitted by law. SC Spheres sub-processors are listed on the Sub-processors page.
Application-specific sub-processors are listed on the Application Sub-processors page.
Security Safeguards
SC Technology maintains administrative, technical and organisational safeguards designed to protect personal information and Client Data. These safeguards include access controls, encryption, client instance isolation, audit logging, backups, supplier oversight, vulnerability management, incident response, and documented security policies and procedures.
Requests And Fees
Requests will be assessed in accordance with PAIA, POPIA and other applicable law. A requester may be asked to provide proof of identity, proof of authority to act on behalf of another person, or additional information needed to locate the requested record or personal information. Fees may apply where permitted by PAIA.
Information Regulator
Data subjects may contact the Information Regulator (South Africa) if they are not satisfied with the handling of a PAIA or POPIA request. More information is available at https://inforegulator.org.za/.