PAIA MANUAL
Khula Information Systems cc.
Trading as Docto
CC Registration Number: 2004/029349/23
IN ACCORDANCE WITH THE PROMOTION OF ACCESS TO INFORMATION ACT 2 OF 2000
Effective Date: 22 June 2026 Version: 1.0
TABLE OF CONTENTS
- Preamble
- About Docto
- Contact Details
- Information Regulator's Guide
- Objectives of this Manual
- Entry Point for Requests
- Automatically Available Information
- Information Available in Terms of POPIA - 8.1 Categories of Data Subjects and Personal Information Collected - 8.2 The Purpose of Processing Personal Information - 8.3 Recipients of Personal Information - 8.4 Planned Transborder Flows of Personal Information - 8.5 General Description of Information Security Measures
- Information Available in Terms of Other Legislation
- Categories of Records Available Upon Request
- Request Procedure
- 11.1 Completion of the Prescribed Form
- 11.2 Proof of Identity
- 11.3 Payment of the Prescribed Fees
- 11.4 Timelines for Consideration of a Request
- 11.5 Grounds for Refusal of Access
- Remedies Available to a Requester on Refusal of Access
- Availability of this Manual
Annexures: - Annexure A — Form 2: Request for Access to Record - Annexure B — Fees in Respect of Private Bodies - Annexure C — Form 1: Request for a Copy of the Guide - Annexure D — Form 3: Outcome of Request and Fees Payable - Annexure E — Objection to Processing of Personal Information - Annexure F — Request for Correction or Deletion of Personal Information
1. PREAMBLE
The Promotion of Access to Information Act 2 of 2000 ("PAIA") came into operation on 9 March 2001. PAIA gives effect to the Constitutional right of access to any information held by the State or by any other person, where such information is required for the exercise or protection of any right. It gives natural and juristic persons the right of access to records held by either a private or public body, subject to certain limitations.
Where a request is made in terms of PAIA to a private body, that body must disclose the information if the requester can demonstrate that the record is required for the exercise or protection of a right, provided no grounds for refusal under PAIA apply.
Section 51 of PAIA obliges private bodies to compile a manual to enable persons to obtain access to information held by them, and stipulates the minimum requirements that such manual must comply with.
This Manual constitutes the PAIA Manual of Khula Information Systems cc., trading as Docto. It is compiled in accordance with section 51 of PAIA as amended by the Protection of Personal Information Act 4 of 2013 ("POPIA"), which gives effect to everyone's Constitutional right to privacy. POPIA promotes the protection of personal information processed by public and private bodies, provides for the establishment of an Information Regulator, and regulates the flow of personal information.
This PAIA Manual also includes information on the submission of objections to the processing of personal information, and requests to correct, delete, or destroy personal information or records thereof, in terms of POPIA.
2. ABOUT DOCTO
Khula Information Systems cc. (CC Registration Number: 2004/029349/23), trading as Docto, operates the website docto.co.za — an online healthcare provider directory and appointment scheduling platform serving patients and registered healthcare providers in South Africa, including general practitioners, medical specialists, dental practitioners, and allied health professionals.
3. CONTACT DETAILS
| Name of Private Body | Khula Information Systems cc. (trading as Docto) |
| CC Registration Number | 2004/029349/23 |
| Designated Information Officer | The Information Officer |
| Email Address of Information Officer | privacy@docto.co.za |
| Postal Address | 1 Nirvana Drive, Lenasia, South Africa |
| Street Address | 1 Nirvana Drive, Lenasia, South Africa |
| Website | www.docto.co.za |
All PAIA requests, POPIA objections, and data subject rights requests must be directed to the Information Officer at the contact details above.
4. INFORMATION REGULATOR'S GUIDE
An official Guide has been compiled by the Information Regulator (established in terms of POPIA) to assist persons wishing to exercise a right of access to information in terms of PAIA and POPIA. Copies of the updated Guide are available from the Information Regulator free of charge.
Any request for public inspection of the Guide at the office of the Information Officer, or a request for a copy of the Guide from the Information Officer, must substantially correspond with Form 1 of Annexure A to Government Notice No. R.757 dated 27 August 2021 promulgated under the PAIA Regulations. Please refer to Annexure C of this Manual.
Information Regulator contact details:
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 Email: inforeg@justice.gov.za Website: www.inforegulator.org.za
5. OBJECTIVES OF THIS MANUAL
The objectives of this Manual are:
- To provide a list of all categories of records held by Docto.
- To set out who may request information in terms of PAIA, and the grounds on which a request may be denied.
- To define the manner and form in which a request for information must be submitted.
- To comply with the additional requirements imposed by POPIA.
- To inform data subjects of their rights to object to, correct, or request deletion of personal information held by Docto.
6. ENTRY POINT FOR REQUESTS
PAIA provides that a person may only request access to information if the information is required for the exercise or protection of a legitimate right.
Information will not be furnished unless the requester provides sufficient particulars to enable Docto to identify the right the requester seeks to protect, and an explanation of why the requested information is required for the exercise or protection of that right.
The exercise of an individual's rights is subject to justifiable limitations, including the reasonable protection of privacy, commercial confidentiality, and effective governance. PAIA and the request procedure in this Manual may not be used for access to a record for criminal or civil proceedings, and information may not be requested after the commencement of such proceedings.
The Information Officer is responsible for receiving and co-ordinating all requests for access to records in terms of PAIA, in order to ensure proper compliance with PAIA and POPIA.
All requests in terms of PAIA and this Manual must be addressed to the Information Officer using the contact details in paragraph 3 above.
7. AUTOMATICALLY AVAILABLE INFORMATION
Information about Docto that is obtainable via the docto.co.za website is automatically available and need not be formally requested under this Manual.
The following categories of records are automatically available for inspection free of charge:
- Terms and Conditions (published on docto.co.za)
- Privacy Policy (published on docto.co.za)
- This PAIA Manual (published on docto.co.za)
- General information about Docto's services and how the platform works
- Provider listings and profiles as published on the Site
8. INFORMATION AVAILABLE IN TERMS OF POPIA
In terms of POPIA, personal information must be processed for a specified, lawful purpose. The purpose for which data is processed by Docto will depend on the nature of the data and the particular data subject. This purpose is ordinarily disclosed, explicitly or implicitly, at the time the data is collected.
Please also refer to the Docto Privacy Policy available at www.docto.co.za for further information.
8.1 Categories of Data Subjects and Personal Information Collected by Docto
Consumers (Patients and Platform Users)
- Title, full names, and surname
- Email address
- Contact telephone number(s)
- Appointment booking information (selected Provider, preferred date and time, type of appointment)
- Browsing habits and click patterns on the Docto website
- Technical data (IP address, browser type, device type, operating system)
Note: Docto does not collect medical records, diagnoses, prescriptions, identity or passport numbers, or clinical health information through the platform.
Healthcare Providers (GPs, Specialists, Dentists, Allied Health Professionals)
- Full name and professional title
- Practice name and contact details (address, telephone, email)
- Professional registration number and regulatory body
- Specialisation and service information
- Availability and scheduling information
- Banking or payment details (where applicable for future billing)
Employees, Contractors, and Consultants (present and future)
- Full name and contact details
- Identity number and identity documents (including passport where applicable)
- Employment history and professional references
- Employment or contractor agreements
- Remuneration and payroll records
- Performance records
- Disciplinary records (where applicable)
- Leave records
- Training records and qualifications
- Banking and financial details
Vendors, Suppliers, and Other Business Partners
- Name and contact details
- Company registration information and details of authorised representatives
- Banking and financial information
- Information about products or services provided
- Contractual records
8.2 The Purpose of Processing Personal Information
For consumers (patients and platform users):
- Facilitating the booking and management of appointments with Providers
- Operating and managing user accounts
- Sending booking confirmations, reminders, and account-related communications
- Communicating about Docto's services (including, with consent, direct marketing)
- Carrying out market research, statistical and analytical purposes (on an anonymised basis)
- Performing administrative and operational functions, including testing of systems
- Complying with Docto's regulatory and legal obligations
- Any other reasonably required purpose relating to Docto's business
For healthcare providers:
- Listing Provider profiles and making them discoverable to patients
- Managing Provider accounts and appointment availability
- Communicating with Providers regarding bookings and platform updates
- Verifying and updating Provider information
- Complying with regulatory and legal obligations
- Any other reasonably required purpose relating to the Docto platform
For employees and contractors (present and future):
- Recruitment, verification of applicant information, and onboarding
- Management of the employment or contractor relationship
- Payroll, remuneration, and benefits administration
- Disciplinary processes and performance management
- Training and skills development
- Complying with employment legislation and regulatory obligations
- Any other reasonably required purpose relating to the employment relationship
For vendors, suppliers, and business partners:
- Verifying information and conducting due diligence
- Managing contractual and business relationships
- Processing invoices and payments
- Complying with Docto's regulatory and legal obligations
- Any other reasonably required purpose relating to Docto's business operations
8.3 Recipients of Personal Information
Personal information collected by Docto may be shared with the following categories of recipients:
- Healthcare Providers listed on the platform, for the purpose of fulfilling appointment bookings
- Cloud hosting and infrastructure service providers (see section 8.4)
- Analytics service providers (e.g. Google Analytics)
- Email and SMS communication service providers
- Payment processing providers (where applicable)
- Regulatory and governmental authorities, including the South African Revenue Service, where Docto has a legal duty to disclose
- Law enforcement authorities, where required by law or court order
- A successor entity in the event of a merger, acquisition, or sale of Docto's business
- Employees, contractors, and agents of Docto who require access to fulfil their functions
Docto does not share personal information with third parties for their own promotional or marketing purposes, nor with medical aids or health insurers, except where you have specifically used the platform in connection with such an insurer or medical aid.
8.4 Planned Transborder Flows of Personal Information
Docto stores and processes personal information on international cloud infrastructure (such as Amazon Web Services, Microsoft Azure, or Google Cloud Platform). Accordingly, personal information may be transferred to and stored on servers located outside the Republic of South Africa.
Docto takes reasonable steps to ensure that any cross-border transfer of personal information is made only where the recipient provides an adequate level of protection consistent with the requirements of POPIA, or subject to appropriate contractual safeguards.
8.5 General Description of Information Security Measures
Docto implements appropriate technical and organisational measures to protect the personal information in its possession against unauthorised access, loss, misuse, alteration, or destruction. These measures include:
- Secure HTTPS encryption for all data transmitted to and from the Site
- Access controls and authentication measures restricting internal access to personal data
- Contractual data security obligations imposed on all third-party service providers
- Regular review of information security practices
In the event of a security compromise that materially affects the personal information of data subjects, Docto will notify affected data subjects and the Information Regulator as required by POPIA.
9. INFORMATION AVAILABLE IN TERMS OF OTHER LEGISLATION
Information is available in terms of certain provisions of the following legislation to the persons or entities specified in such legislation:
- Basic Conditions of Employment Act 75 of 1997
- Broad-Based Black Economic Empowerment Act 53 of 2003
- Close Corporations Act 69 of 1984
- Consumer Protection Act 68 of 2008
- Electronic Communications and Transactions Act 25 of 2002
- Electronic Communications Act 36 of 2005
- Labour Relations Act 66 of 1995
- National Health Act 61 of 2003
- Protection of Personal Information Act 4 of 2013
- Promotion of Access to Information Act 2 of 2000
- Value Added Tax Act 89 of 1991
- Such other legislation as may from time to time be applicable to Docto's business
10. CATEGORIES OF RECORDS AVAILABLE UPON REQUEST
Docto maintains records in the categories listed below. Please note that listing a category does not imply that a request for access to records in that category will be granted. All requests will be evaluated on a case-by-case basis under PAIA. Many records held by Docto relate to third parties (such as Providers and consumers), and Docto takes the protection of third-party confidential information seriously.
| Category of Records | Examples of Records |
|---|---|
| Internal Corporate Records | CC founding statement and amendments; statutory records; minutes of meetings; internal policies and procedures; internal correspondence; operational records; financial records; intellectual property records; marketing materials |
| Personnel Records | Employment and contractor agreements; personal information provided by staff; payroll and remuneration records; performance and disciplinary records; leave and training records; qualifications and references |
| Consumer / User Records | Booking records; account information; correspondence with users; records relating to PAIA or POPIA requests submitted by users |
| Healthcare Provider Records | Provider profile information; listing agreements; correspondence with Providers; scheduling and availability records |
| Client and Vendor Records | Contracts with suppliers and service providers; correspondence; financial and payment records; records provided by third parties relating to Docto's operations |
| Technical Records | System logs; analytics data (anonymised); security incident records |
| Other Records | Research or analytical information compiled by or for Docto; any other records reasonably required for Docto's operations |
11. REQUEST PROCEDURE
11.1 Completion of the Prescribed Form
Any request for access to a record in terms of PAIA must substantially correspond with Form 2 of Annexure A to Government Notice No. R.757 dated 27 August 2021 promulgated under the PAIA Regulations. Please refer to Annexure A of this Manual. Requests must be specific in identifying the record requested.
A request that does not comply with the prescribed formalities will be returned to the requester.
POPIA rights in addition to PAIA:
- A data subject may, upon proof of identity, request Docto to confirm — free of charge — all personal information it holds about that data subject, and may request access to such information, including information about any third parties who have had access to it.
- A data subject may at any time object to the processing of their personal information on reasonable grounds relating to their particular situation, unless legislation provides for such processing. The data subject must complete the form in Annexure E and submit it to the Information Officer.
- A data subject may request Docto to correct or delete personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or obtained unlawfully. The data subject must complete the form in Annexure F and submit it to the Information Officer.
11.2 Proof of Identity
The requester must submit acceptable proof of identity together with the prescribed form. This may include a certified copy of a South African identity document, passport, or other legally recognised identity document. Where a request is made on behalf of another person, proof of authorisation must also be submitted.
11.3 Payment of the Prescribed Fees
There are two categories of fees payable under PAIA:
Request fee: R140.00 — payable before the request will be processed.
Access fee: Calculated based on reproduction costs, search and preparation time, and postage costs, as set out in Annexure B of this Manual (and in Annexure B to Government Notice No. R.757 dated 27 August 2021).
- Where a decision to grant access has been made, the record will not be disclosed until the prescribed fees have been paid in full.
- Where a deposit is required (where the search is estimated to exceed 6 hours), one third of the total access fee is payable in advance.
- Where a data subject requests access to their own personal information held by Docto under POPIA, confirmation of whether Docto holds such information is provided free of charge. A fee may apply for providing access to the actual records.
Payment details: Docto's banking details for payment of PAIA fees will be provided to the requester at the time the request is processed and the fee estimate is issued. Please contact privacy@docto.co.za.
11.4 Timelines for Consideration of a Request for Access
- Requests will be processed within 30 (thirty) days of receipt, unless the nature of the request requires an extension.
- The Information Officer will notify the requester of the decision and the fees payable (if any) on a form corresponding substantially with Form 3 of Annexure A to Government Notice No. R.757 dated 27 August 2021. Please refer to Annexure D.
- Where an extension is required, the requester will be notified in writing, with reasons.
- Where a request affects a third party, that third party will be notified within 21 (twenty-one) days of receipt of the request, and will have a further 21 (twenty-one) days to make representations regarding the granting of access.
11.5 Grounds for Refusal of Access and Protection of Information
A request for access to a record may be refused on the following grounds (among others):
- Protection of the personal information of a third party (natural person) from unreasonable disclosure
- Protection of the commercial information of a third party (e.g. trade secrets; financial, commercial, scientific, or technical information that could harm the commercial or financial interests of that third party)
- Disclosure would result in a breach of a duty of confidence owed to a third party
- Disclosure would jeopardise the safety of an individual or prejudice property rights of a third party
- The record was produced in the course of legal proceedings and legal privilege has not been waived
- The record contains trade secrets, financial or sensitive information that would prejudice Docto in negotiations or commercial competition
- The record contains information about research being carried out on behalf of a third party or by Docto
Overriding provision (Section 70 of PAIA): Disclosure of a record is compulsory if it would reveal (i) a substantial contravention of, or failure to comply with, the law, or (ii) there is an imminent and serious public safety or environmental risk, and (iii) the public interest in the disclosure clearly outweighs the harm contemplated.
12. REMEDIES AVAILABLE TO A REQUESTER ON REFUSAL OF ACCESS
If the Information Officer decides to grant access to a record, access must be provided within 30 (thirty) days of the decision being communicated.
There is no internal appeal procedure after a request has been refused. The decision of the Information Officer is final at an internal level. A requester who is not satisfied with the outcome is entitled to apply to a court of competent jurisdiction to challenge the decision.
Where a third party is affected by the request and the Information Officer decides to grant access, the third party has 30 (thirty) days from notification of the decision to appeal to a court of competent jurisdiction. If no such appeal is lodged within 30 days, access must be granted to the requester.
A requester may also refer a complaint to the Information Regulator in terms of POPIA.
13. AVAILABILITY OF THIS MANUAL
Copies of this Manual are available free of charge for inspection at:
- The offices of Khula Information Systems cc., 1 Nirvana Drive, Lenasia, South Africa
- The Docto website: www.docto.co.za
- Via email request to privacy@docto.co.za
ANNEXURE A
FORM 2 — REQUEST FOR ACCESS TO RECORD
[Regulation 7]
Requests can be submitted by post or email: privacy@docto.co.za Addressed to: The Information Officer, Khula Information Systems cc. (trading as Docto)
Note: 1. Proof of identity must be attached by the requester. 2. If a request is made on behalf of another person, proof of authorisation must be attached.
To: The Information Officer Khula Information Systems cc. (trading as Docto) 1 Nirvana Drive, Lenasia, South Africa Email: privacy@docto.co.za
Mark with an "X":
☐ Request is made in my own name
☐ Request is made on behalf of another person
PERSONAL INFORMATION OF REQUESTER
Full names and surname:
Identity number:
Capacity in which request is made (if on behalf of another):
Postal address:
Street address:
Email address:
Telephone number (business):
Cellular number:
Facsimile:
PARTICULARS OF RECORD REQUESTED
(Provide full particulars of the record, including the reference number if known, to enable it to be located. If additional space is required, attach additional signed pages.)
Description of record or relevant part thereof:
Reference number (if available):
Any further particulars:
TYPE OF RECORD (Mark with an "X")
☐ Record is in written or printed form ☐ Record comprises visual images (photographs, video recordings, computer-generated images, sketches, etc.) ☐ Record consists of recorded words or information which can be reproduced in sound ☐ Record is held on a computer or in an electronic or machine-readable form
FORM OF ACCESS REQUESTED (Mark with an "X")
☐ Printed copy of record ☐ Written or printed transcription of visual images ☐ Transcription of soundtrack (written or printed document) ☐ Copy of record on flash drive ☐ Copy of record on compact disc ☐ Copy of record saved on cloud storage server
MANNER OF DELIVERY (Mark with an "X")
☐ Personal inspection at Docto's registered address ☐ Postal service to postal address ☐ Postal service to street address ☐ Courier service to street address ☐ Facsimile ☐ Email ☐ Cloud share / file transfer
Preferred language: (Note: if the record is not available in your preferred language, access may be granted in the language in which it is available.)
PARTICULARS OF RIGHT TO BE EXERCISED OR PROTECTED
(If space is inadequate, attach additional signed pages.)
Indicate which right is to be exercised or protected:
Explain why the record is required for the exercise or protection of that right:
FEES
a) A request fee of R140.00 must be paid before the request will be considered. b) You will be notified of the access fee payable. c) The fee depends on the form of access requested and the time required to search for and prepare the record. d) If you qualify for fee exemption, please state the reason:
Signed at this day of 20
Signature of Requester / Person on behalf of whom request is made
FOR OFFICIAL USE
| Reference number | |
|---|---|
| Request received by | |
| Date received | |
| Access fees | |
| Deposit (if any) | |
| Signature of Information Officer |
ANNEXURE B
FEES IN RESPECT OF PRIVATE BODIES
(In terms of Government Notice No. R.757 dated 27 August 2021)
| Item | Description | Amount |
|---|---|---|
| 1 | The request fee payable by every requester | R140.00 |
| 2 | Photocopy of A4-size page | R2.00 per page or part thereof |
| 3 | Printed copy of A4-size page | R2.00 per page or part thereof |
| 4 | Copy in computer-readable form — Flash drive (provided by requestor) | R40.00 |
| 4 | Copy in computer-readable form — Compact disc (provided by requestor) | R40.00 |
| 4 | Copy in computer-readable form — Compact disc (provided to requestor) | R60.00 |
| 5 | Transcription of visual images per A4-size page | To be outsourced — quotation provided |
| 6 | Copy of visual images | To be outsourced — quotation provided |
| 7 | Transcription of audio record, per A4-size page | R24.00 |
| 8 | Copy of audio record — Flash drive (provided by requestor) | R40.00 |
| 8 | Copy of audio record — Compact disc (provided by requestor) | R40.00 |
| 8 | Copy of audio record — Compact disc (provided to requestor) | R60.00 |
| 9 | Search and preparation of record — per hour or part thereof (excluding first hour) | R145.00 |
| 9 | Maximum search and preparation fee | R435.00 |
| 10 | Deposit where search exceeds 6 hours | One third of estimated total |
| 11 | Postage, email, or other electronic transfer | Actual cost, if any |
ANNEXURE C
FORM 1 — REQUEST FOR A COPY OF THE GUIDE
[Regulation 3]
Requests can be submitted by post or email: privacy@docto.co.za Addressed to: The Information Officer, Khula Information Systems cc. (trading as Docto)
To: The Information Officer Khula Information Systems cc. (trading as Docto) 1 Nirvana Drive, Lenasia, South Africa Email: privacy@docto.co.za
I, (full names) in my capacity as:
Mark with "X":
☐ Information Officer
☐ Other:
Name of public/private body (if applicable):
Postal address:
Street address:
Email address:
Telephone number (business):
Cellular number:
Facsimile:
Hereby request the following copy(ies) of the Guide:
| Language | No. of copies | Language | No. of copies |
|---|---|---|---|
| Sepedi | Sesotho | ||
| Setswana | siSwati | ||
| Tshivenda | Xitsonga | ||
| Afrikaans | English | ||
| isiNdebele | IsiXhosa | ||
| isiZulu |
Manner of collection (Mark with "X")
☐ Personal collection
☐ Postal address
☐ Facsimile
☐ Electronic communication (please specify):
Signed at this day of 20
Signature of Requester
ANNEXURE D
FORM 3 — OUTCOME OF REQUEST AND FEES PAYABLE
[Regulation 8]
Requests can be submitted by post or email: privacy@docto.co.za Addressed to: The Information Officer, Khula Information Systems cc. (trading as Docto)
Note: 1. If your request is granted — (a) any deposit is payable before your request is processed; and (b) the requested record will only be released once proof of full payment is received. 2. Please use the reference number below in all future correspondence.
Reference number:
To:
Your request dated refers.
1. You requested: (Personal inspection — free of charge)
Personal inspection of information at the registered address of Docto (including listening to recorded words or information held on computer or in electronic form) is free of charge. You are required to make an appointment and bring this Form with you. If you then require any form of reproduction of the information, the fees in Annexure B will apply.
OR
2. You requested: (Mark with "X")
☐ Printed copies of the record ☐ Written or printed transcription of visual images ☐ Transcription of soundtrack (written or printed document) ☐ Copy on flash drive ☐ Copy on compact disc ☐ Copy saved on cloud storage server
3. To be submitted: (Mark with "X")
☐ Postal service to postal address ☐ Postal service to street address ☐ Courier service to street address ☐ Facsimile ☐ Email ☐ Cloud share / file transfer
Preferred language:
Kindly note that your request has been:
☐ Approved
☐ Denied for the following reasons:
Fees payable:
| Item | Cost | No. of pages/items | Total |
|---|---|---|---|
| Photocopy per A4 page | R2.00 | ||
| Printed copy per A4 page | R2.00 | ||
| Flash drive copy | R40.00 | ||
| Compact disc (requestor provides) | R40.00 | ||
| Compact disc (Docto provides) | R60.00 | ||
| Audio transcription per A4 page | R24.00 | ||
| Postage / electronic transfer | Actual cost | ||
| TOTAL |
Deposit payable (if search exceeds six hours):
☐ Yes ☐ No
| Hours of search | Amount of deposit (one third of total per request) |
|---|---|
Payment details will be provided separately upon request. Please contact privacy@docto.co.za for banking details.
Signed at this day of 20
Signature of Information Officer
ANNEXURE E
OBJECTION TO THE PROCESSING OF PERSONAL INFORMATION
In terms of Section 11(3) of the Protection of Personal Information Act 4 of 2013 POPIA Regulations, 2018 [Regulation 2]
Requests can be submitted by post or email: privacy@docto.co.za Addressed to: The Information Officer, Khula Information Systems cc. (trading as Docto)
Note: 1. Affidavits or other documentary evidence in support of the objection may be attached. 2. If space is inadequate, submit information as an annexure and sign each page. 3. Complete as applicable.
A. DETAILS OF DATA SUBJECT
Name(s) and surname:
Identity / Unique Identifier Number:
Residential, postal or business address:
Postal code:
Contact number(s):
Email address:
B. DETAILS OF RESPONSIBLE PARTY
Name: Khula Information Systems cc. (trading as Docto)
Address: 1 Nirvana Drive, Lenasia, South Africa
Email: privacy@docto.co.za
C. REASONS FOR OBJECTION
(In terms of Section 11(1)(d) to (f) of POPIA — please provide detailed reasons)
Signed at this day of 20
Signature of Data Subject / Designated Person
ANNEXURE F
REQUEST FOR CORRECTION OR DELETION OF PERSONAL INFORMATION
In terms of Section 24(1) of the Protection of Personal Information Act 4 of 2013 POPIA Regulations, 2018 [Regulation 3]
Requests can be submitted by post or email: privacy@docto.co.za Addressed to: The Information Officer, Khula Information Systems cc. (trading as Docto)
Note: 1. Affidavits or other documentary evidence in support of the request may be attached. 2. If space is inadequate, submit information as an annexure and sign each page. 3. Complete as applicable.
Mark with "X":
☐ Correction or deletion of personal information about the data subject which is in the possession or under the control of Docto.
☐ Destruction or deletion of a record of personal information about the data subject which Docto is no longer authorised to retain.
A. DETAILS OF DATA SUBJECT
Name(s) and surname:
Identity / Unique Identifier Number:
Residential, postal or business address:
Postal code:
Contact number(s):
Email address:
B. DETAILS OF RESPONSIBLE PARTY
Name: Khula Information Systems cc. (trading as Docto)
Address: 1 Nirvana Drive, Lenasia, South Africa
Email: privacy@docto.co.za
C. INFORMATION TO BE CORRECTED / DELETED / DESTROYED
D. REASONS FOR REQUEST
(Please provide detailed reasons for the correction, deletion, or destruction of the personal information or record)
Signed at this day of 20
Signature of Data Subject / Designated Person
This PAIA Manual was last updated on 22 June 2026.