PAIA Manual: KOSBAAR COLLECTIVE (PTY) LTD, trading as GeniusAI
1. About this manual. This manual explains what records KOSBAAR COLLECTIVE (PTY) LTD, trading as GeniusAI ("we"), keeps and how you can ask for access to them. It is available free on this page, and on request at our address below.
2. Our details. Name: KOSBAAR COLLECTIVE (PTY) LTD, trading as GeniusAI. Registration number: 2025/606688/07 (CIPC). Head of the business and Information Officer: Adien Aggenbach (director). Street address: Kosbaar SANDZ, Shop 3, Unit 14, 3 Church Street, Strand, 7140, South Africa. Phone: +27 60 828 3401. Email: hello@geniusai.co.za. Website: https://geniusai.co.za. Adien Aggenbach also handles deputy Information Officer matters. Registration of our Information Officer with the Information Regulator is pending.
3. The Information Regulator's PAIA Guide. The Information Regulator publishes a Guide on how to use PAIA and POPIA, in all official languages. You can get it from https://inforegulator.org.za/paia/ or from the Information Regulator, Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191; enquiries@inforegulator.org.za; 010 023 5200.
4. Records available without a request (section 52). We have not published a section 52 notice. Our Terms of Sale & Use, Privacy Notice and this manual are freely available on our website.
5. Records kept under other laws. We keep records as required by, among others: the Companies Act 71 of 2008; the Tax Administration Act 28 of 2011; the Income Tax Act 58 of 1962; the Consumer Protection Act 68 of 2008; the Electronic Communications and Transactions Act 25 of 2002; and the Protection of Personal Information Act 4 of 2013.
6. Categories of records we hold. Company records (incorporation documents, director records, resolutions). Financial and tax records (accounting records, bank and payment-processor statements, invoices). Sales records (order references, amounts, dates, payment IDs, and email addresses buyers chose to give for their download link). Customer correspondence (support and refund emails). Product records (course content, website content). Supplier and service-provider agreements and terms (for example Yoco, Netlify, Afrihost). Website and security logs.
7. Personal information we process (POPIA). Purpose: to sell and deliver our digital courses, provide support and refunds, prevent fraud and misuse, and keep the records the law requires. Data subjects and information: buyers (order details, optional email address, correspondence); people who email us (name, email address, message); suppliers (business contact and payment details). Recipients: our operators Yoco (payments, South Africa), Netlify (website hosting, download delivery and order records, United States) and Afrihost (email, South Africa); our accountant; and authorities such as SARS when the law requires it. Cross-border transfers: order records and website data are stored by Netlify in the United States, as explained in our Privacy Notice. Security: payments on Yoco's secure hosted checkout (we never receive card details), encrypted HTTPS connections, restricted and password-protected access to our accounts, and download links that expire after 7 days.
8. How to request access. Use Form 2 (Request for Access to a Record), available on the Information Regulator's website, and send it to the Information Officer at hello@geniusai.co.za or our street address. Describe the record you want, say which right you want to exercise or protect and why you need the record, and tell us how you want to receive it. If you're asking on someone else's behalf, include proof of your authority. You can ask for your own personal information, or ask us to correct or delete it, under POPIA (Form 2 of the POPIA Regulations for correction or deletion), and you don't pay a request fee for this.
9. Fees. For requests other than for your own personal information, the PAIA Regulations allow a private body to charge a request fee of R140, plus prescribed fees for searching for, preparing and copying records. We'll tell you the amount before we process your request.
10. Our decision. We'll reply within 30 days of receiving your request. We may extend this once by up to 30 days if the law allows it, and we'll tell you why. We can only refuse access on the grounds set out in Chapter 4 of Part 3 of PAIA (for example, to protect someone else's privacy or confidential commercial information), and we'll give reasons.
11. If you're not happy. You can complain to the Information Regulator (PAIA Form 5, PAIAComplaints@inforegulator.org.za) within 180 days of our decision, or of the date your request is regarded as refused, or apply to court.
12. Availability and updates. This manual is available on our website and at our street address. We'll update it when our details or records change.