PAIA Manual

Effective Date: 10 July 2026 · Last updated: 14 July 2026

Prepared in terms of section 51 of the Promotion of Access to Information Act 2 of 2000, as amended, by YENKO BUDDY (PTY) LTD trading as Gatherlane.

1. List of Acronyms and Abbreviations

CEO means Chief Executive Officer.
DIO means Deputy Information Officer.
ECTA means Electronic Communications and Transactions Act 25 of 2002.
IO means Information Officer.
PAIA means Promotion of Access to Information Act 2 of 2000, as amended.
POPIA means Protection of Personal Information Act 4 of 2013.
Regulator means Information Regulator (South Africa).
Republic means Republic of South Africa.
Gatherlane means the online event and wedding management platform operated by YENKO BUDDY (PTY) LTD.

2. Purpose of PAIA Manual

This PAIA Manual is useful for the public to:

check the categories of records held by YENKO BUDDY (PTY) LTD trading as Gatherlane which are available without a person having to submit a formal PAIA request;
have a sufficient understanding of how to make a request for access to a record held by Gatherlane, including the subjects on which records are held and the categories of records held on each subject;
know the description of the records of Gatherlane which are available in accordance with other South African legislation;
access the relevant contact details of the Information Officer and any Deputy Information Officer who will assist the public with records they intend to access;
know the description of the Guide on how to use PAIA, as updated by the Regulator, and how to obtain access to it;
know whether Gatherlane processes personal information, the purpose of such processing, and the description of the categories of data subjects and personal information processed;
know the recipients or categories of recipients to whom personal information may be supplied;
know whether Gatherlane has planned to transfer or process personal information outside the Republic of South Africa, and the categories of recipients involved; and
know whether Gatherlane has appropriate security measures to ensure the confidentiality, integrity and availability of personal information processed by or for Gatherlane.

3. Key Contact Details for Access to Information

3.1 Information Officer / Head of Private Body

Field	Detail
Name	Frank Boateng
Position	Director and Information Officer, unless another duly authorised person is appointed and registered with the Information Regulator
Telephone	+27 71 462 1686
Email	privacy@gatherlane.events
Fax number	Not applicable, unless otherwise published by Gatherlane

3.2 Deputy Information Officer

Not appointed as at the date of compilation of this Manual, unless otherwise published by Gatherlane.

3.3 Access to information general contacts

Purpose	Contact
PAIA and POPIA requests	privacy@gatherlane.events
General legal enquiries	legal@gatherlane.events
Support enquiries	support@gatherlane.events

3.4 National or head office

Field	Detail
Postal address	25 Hill Park, 27 Carisbrook Street, Cape Town, Western Cape, 8001, Republic of South Africa
Physical address	25 Hill Park, 27 Carisbrook Street, Cape Town, Western Cape, 8001, Republic of South Africa
Telephone	+27 71 462 1686
Email	privacy@gatherlane.events
Website	www.gatherlane.events

4. Guide on How to Use PAIA and How to Obtain Access to the Guide

The Regulator has, in terms of section 10(1) of PAIA, as amended, updated and made available the revised Guide on how to use PAIA ("Guide") in an easily comprehensible form and manner, as may reasonably be required by a person who wishes to exercise any right contemplated in PAIA and POPIA.

The Guide is available in each of the official languages and in braille. The Guide contains, among other things, the objects of PAIA and POPIA; the contact details of Information Officers and Deputy Information Officers; the manner and form of a request for access to records; the assistance available from Information Officers and the Regulator; remedies available in law, including complaints to the Regulator and applications to court; the requirements for PAIA manuals; voluntary disclosure of records; prescribed fees; and PAIA regulations.

Members of the public may inspect or make copies of the Guide at the offices of public and private bodies, including the office of the Regulator, during normal working hours. The Guide may also be obtained upon request to Gatherlane's Information Officer or from the website of the Regulator at www.inforegulator.org.za. Gatherlane will make a copy of the Guide available for public inspection during normal office hours in English and Afrikaans.

4.1 How to request access to a Gatherlane record

A request for access to a record of a private body must be made on the prescribed PAIA request form, currently Form 2: Request for Access to Record.
The request must be addressed to the Information Officer / Head of the private body and sent to the contact details in Section 3 above.
The requester must provide sufficient particulars to enable Gatherlane to identify the record requested, the requester, the form of access required, and the right that the requester seeks to exercise or protect.
Proof of identity and, where applicable, proof of authority to act on behalf of another person must accompany the request.
The prescribed request fee and any access fee may be payable, where applicable. Gatherlane will inform the requester of any fee before further processing the request where required by PAIA.
Access may be refused on a ground permitted or required by PAIA, including privacy, commercial confidentiality, legal privilege, safety, security, research information, or other protected interests.

5. Categories of Records Available Without a Person Having to Request Access

Category of records	Types of record	Available on website	Available upon request
Company and platform information	Company name, trading name, website information, general platform descriptions, contact information and public notices	Yes	Yes
Legal policies	Privacy Policy, Terms of Service, Cookie Policy, Refund Policy, Vendor Agreement, Donation or Gift Registry Terms and feature-specific terms	Yes	Yes
PAIA documentation	This PAIA Manual and guidance on how to submit a request for access to records	Yes	Yes
Public website content	Published event platform descriptions, FAQs, help pages, public marketing content and public vendor pages, where available	Yes	Yes
Regulator and PAIA forms	Links or references to PAIA Form 2, PAIA Guide and complaints forms available from the Regulator	Yes	Yes
CIPC public information	Certain public company information that is available from CIPC or public registries	No	Yes

6. Description of Records Available in Accordance With Other Legislation

Gatherlane may create, hold or make available records in accordance with the following legislation, where applicable to its business, employees, platform operations, payments, vendors, taxation and corporate compliance.

Category of records	Applicable legislation
Memorandum of Incorporation, registration certificate, company registration records, director records, shareholder records, resolutions, annual returns and beneficial ownership records	Companies Act 71 of 2008 and Companies Regulations
PAIA Manual, PAIA request records, request outcomes, fee notices and correspondence relating to access requests	Promotion of Access to Information Act 2 of 2000 and PAIA Regulations
Privacy notices, personal information processing records, consent records, data subject requests, security compromise records and operator/service provider records	Protection of Personal Information Act 4 of 2013
Website terms, electronic communications, online transaction records, electronic records and payment-related online disclosures	Electronic Communications and Transactions Act 25 of 2002
Consumer complaints, cancellation/refund records, service records and customer communications where consumer law applies	Consumer Protection Act 68 of 2008
Tax invoices, accounting records, payment records, bank records, expense records and tax correspondence	Income Tax Act 58 of 1962, Tax Administration Act 28 of 2011 and Value-Added Tax Act 89 of 1991, where applicable
Employment contracts, payroll records, leave records, disciplinary records and employee policies, where Gatherlane has employees	Basic Conditions of Employment Act 75 of 1997, Labour Relations Act 66 of 1995, Employment Equity Act 55 of 1998 and related employment legislation, where applicable
UIF, COIDA and skills development records, where applicable	Unemployment Insurance Act 63 of 2001, Compensation for Occupational Injuries and Diseases Act 130 of 1993 and Skills Development Levies Act 9 of 1999, where applicable
Financial control, anti-fraud, payment gateway, chargeback, payout and verification records	Applicable payment, tax, consumer, anti-fraud and financial legislation and payment gateway rules, where applicable
Contracts, vendor agreements, service provider agreements, operator/data processing terms and confidentiality undertakings	Common law, POPIA, ECTA, CPA and applicable commercial legislation

7. Description of Subjects on Which the Body Holds Records and Categories of Records Held on Each Subject

Subjects on which the body holds records	Categories of records
Corporate and governance records	Registration certificate, Memorandum of Incorporation, CIPC disclosure documents, beneficial ownership records, director and shareholder records, company resolutions, statutory registers and annual return records.
Legal and compliance records	PAIA Manual, Privacy Policy, Terms of Service, Cookie Policy, Refund Policy, Vendor Agreement, Donation or Gift Registry Terms, regulatory correspondence, legal opinions, complaints and dispute records.
Platform and user account records	User accounts, authentication records, account preferences, user roles, login/session records, security logs, usage data and support records.
Event owner and event records	Event pages, wedding and event details, event schedules, venue information, dress codes, travel/accommodation details, guest update content, invitation settings, seating information and event-owner instructions.
Guest, RSVP and communication records	Guest lists, contact details, invitation status, RSVP responses, plus-one information, dietary and accessibility requests, seating/table information, event messages and communication records.
Donation, gift registry and payment records	Gift and donation amounts, payment references, payment status, payer information, refund/chargeback records, payout references, billing metadata, reconciliation records and fraud indicators.
Vendor and marketplace records	Vendor profiles, business information, contact details, service areas, portfolio content, pricing, quotes, enquiries, bookings, reviews, payout details, compliance records and vendor disputes.
Media and content records	Photos, videos, captions, guest messages, gallery uploads, moderation records, timestamps and related metadata.
Technology, security and analytics records	Technical logs, IP addresses, device information, error logs, cookie identifiers, analytics events, hosting records, backup records, vulnerability/security records and incident records.
Finance, accounting and tax records	Invoices, receipts, statements, bank records, payment gateway reports, reconciliations, expense records, tax submissions and audit records.
Human resources and contractor records	Employee, contractor or consultant records, contracts, payroll records, leave records, performance records, disciplinary records, onboarding/offboarding records and training records, where applicable.
Supplier and service provider records	Service provider contracts, operator agreements, data processing terms, confidentiality agreements, security due diligence, invoices and correspondence.

8. Processing of Personal Information

8.1 Purpose of processing personal information

Gatherlane processes personal information for purposes reasonably connected with operating an online event and wedding management platform, including:

creating, authenticating and managing user accounts;
creating, publishing and managing event pages, digital invitations, RSVPs, seating and guest logistics;
sending service communications such as wedding invitations, RSVP reminders, event updates, confirmations and support messages;
processing gifts, donations, registry contributions, vendor payments, refunds, chargebacks, payouts and reconciliations;
providing vendor marketplace and vendor page features;
hosting, moderating and displaying photos, videos, messages and other event content;
providing customer support, resolving disputes and responding to complaints;
securing, monitoring, improving and maintaining the Platform;
complying with legal, regulatory, tax, accounting, audit and record-keeping obligations; and
sending lawful direct marketing or platform updates where POPIA permits this and the user has not opted out where applicable.

8.2 Description of categories of data subjects and personal information processed

Categories of data subjects	Personal information that may be processed
Event Owners / hosts / couples	Names, surnames, email addresses, cellphone numbers, account details, authentication credentials, profile images, event details, venue and schedule information, payment or payout references, support communications and preferences.
Guests and invitees	Names, email addresses, cellphone numbers, invitation status, RSVP responses, plus-one details, meal choices, dietary requirements, accessibility requests, seating information, guest messages, uploaded media and communication preferences.
Contributors / payers	Names, email addresses, billing details, transaction amounts, payment references, payment status, refund or chargeback status, payer correspondence and fraud indicators. Gatherlane does not intend to store full card numbers, CVV numbers or online banking login details.
Vendors and vendor representatives	Business name, trading name, contact person, email address, cellphone number, business address or service area, registration/tax details where required, portfolio images, pricing, quotes, bookings, reviews, payout references, bank details where required, support and dispute records.
Website visitors and users	IP address, device information, browser type, operating system, pages viewed, referring URL, cookie identifiers, session data, analytics events, approximate location derived from technical data and security logs.
Employees, contractors and consultants	Names, contact details, identity or passport details, employment or contractor records, tax and banking details, qualifications, performance records, disciplinary records and access credentials, where applicable.
Directors, shareholders and officers	Names, contact details, statutory records, appointment records, CIPC records, resolutions, beneficial ownership information and governance records.
Suppliers and service providers	Names, contact details, company registration details, tax or VAT details, banking details, contracts, invoices, confidentiality undertakings, security and service records.

8.3 Recipients or categories of recipients to whom personal information may be supplied

Category of personal information	Recipients or categories of recipients
Guest names, contact details, RSVP responses, dietary/accessibility notes, gift/donation confirmations, uploaded media and guest messages	Event Owners, where necessary to manage the event, guest logistics, seating, meals, donations and media galleries.
Event details, venue information, schedule information and approved gallery content	Guests and public event page visitors, according to event settings selected by the Event Owner.
Contact details, event details, booking details, enquiries and communications	Vendors, where necessary to facilitate vendor quotes, bookings, service delivery and reviews.
Payer details, transaction amount, payment reference, billing information and payout details	Payment providers, banks and payment gateway partners for payments, refunds, chargebacks, fraud checks and payouts.
Account, event, guest, media and technical data	Hosting, database, cloud storage, caching, media delivery and infrastructure providers.
Names, email addresses, phone numbers and message content	Email, WhatsApp, SMS and communication providers used to send invitations, updates, reminders, confirmations and support messages.
Authentication identifiers, names, email addresses and profile data	Authentication providers, such as Google sign-in, where selected by users.
Technical data, logs, usage data, IP addresses, device information and error data	Analytics, security, rate-limiting, monitoring and error-reporting providers.
Relevant contracts, correspondence, payment records, dispute records and compliance information	Professional advisers, auditors, accountants, insurers, courts, regulators, law enforcement bodies and public authorities where required or permitted by law.
Business and user records relevant to a transaction	Potential business transfer recipients in a merger, acquisition, financing, restructuring or sale, subject to appropriate confidentiality and privacy safeguards.

8.4 Planned transborder flows of personal information

Gatherlane uses or may use cloud, payment, communication, authentication, hosting and monitoring providers whose systems or support personnel may be located outside South Africa. Personal information may therefore be transferred to, stored in or accessed from countries outside the Republic, subject to POPIA and appropriate contractual or legal safeguards. The current schedule of such providers is set out in Section 12 of the Privacy Policy.

8.5 General description of information security measures

Gatherlane takes, or should take, reasonable technical and organisational measures to protect personal information against loss, damage, unauthorised access, unauthorised disclosure and unlawful processing. These measures include or may include:

role-based access controls and restricted administrative permissions;
password hashing and secure authentication practices;
encryption of data in transit and appropriate safeguards for stored data;
secure hosting, database management, backups and disaster-recovery practices;
logging and monitoring of administrative actions, access events and security incidents;
file upload restrictions, malware or abuse controls where appropriate, and moderation of uploaded media where necessary;
supplier due diligence and operator/data processing clauses for service providers that process personal information;
confidentiality obligations for employees, contractors, vendors and service providers with access to personal information;
incident response procedures, including assessment, containment, remediation and notification where required by POPIA; and
periodic review of security measures, retention periods and access privileges.

9. Availability of the Manual

A copy of this Manual is available:

on the Gatherlane website at www.gatherlane.events, or at the specific PAIA Manual URL published by Gatherlane;
at the registered office / head office of YENKO BUDDY (PTY) LTD trading as Gatherlane for public inspection during normal business hours by prior arrangement;
to any person upon request and upon payment of a reasonable prescribed fee where applicable; and
to the Information Regulator upon request.

A fee for a copy of the Manual, as contemplated in the applicable PAIA Regulations and fee schedules, may be payable per each A4-size photocopy or other prescribed format, where applicable.

10. Updating of the Manual

The head of YENKO BUDDY (PTY) LTD trading as Gatherlane will update this Manual on a regular basis, and whenever there are material changes to the company details, Information Officer details, records held, processing activities, service providers, transborder flows, security safeguards or applicable legal requirements.

The latest version will be made available in accordance with Section 9 above. Where material changes are made, Gatherlane should update the date of revision on the cover page and publish the updated version on the Platform or make it available on request.

11. Issued By

Issued by:

Frank Boateng
Director / Information Officer
For and on behalf of YENKO BUDDY (PTY) LTD trading as Gatherlane
Date: 10 July 2026

Company Details

Item	Details
Legal entity	YENKO BUDDY (PTY) LTD trading as Gatherlane
Registration number	2025/302541/07
Registered office	25 Hill Park, 27 Carisbrook Street, Cape Town, Western Cape, 8001
Website / platform	gatherlane.events and related Gatherlane websites, applications and services
Commencement / effective date	10 July 2026
Contact	privacy@gatherlane.events