PAIA
manual.

This manual is prepared for SnapStream (Pty) Ltd under section 51 of the Promotion of Access to Information Act 2 of 2000 (PAIA). It explains the records we hold and how to request access. POPIA means the Protection of Personal Information Act 4 of 2013; the Regulator means South Africa's Information Regulator.

SnapStream provides event galleries, face matching and photo delivery. Listing a record in this manual does not make it public or guarantee access: the applicable rights, procedural requirements and lawful grounds for refusal still apply.

Company and registration

SnapStream (Pty) Ltd, 2026/311990/07, Republic of South Africa.

Business address

160 High Level Road, Sea Point, Cape Town, South Africa.

Information Officer

Mikhail Kuschke. Contact: hello@snapstream.co.za.

Website

www.snapstream.co.za

Address access requests to the Information Officer using these business contact details. The Information Officer can assist you with the request process and route a request to the person responsible for the record.

The Regulator's PAIA guides, forms and assistance explain how to exercise access rights, what help is available, fees, complaints and court remedies. Guides in multiple South African languages are available there. You may also request a copy or help obtaining the guide from our Information Officer.

You can complain to the Information Regulator (South Africa), including through its eServices portal. General enquiries: enquiries@inforegulator.org.za; telephone 010 023 5200.

Our published plan descriptions and prices, website information, Terms & Conditions,Privacy Policy and this manual are freely available on our website. You can read, save or print them without completing a PAIA form.

• Company administration: incorporation and corporate records, policies, contracts and service-provider arrangements.
• Customers and events: enquiries, organiser account and contact details, event setup, plan and activation records, photographs and contributor records.
• Guests and matching: registration and consent records, event membership, selfies, face-template references, photo matches, preferences and gallery access records.
• Communications: service messages, delivery records, support correspondence, transcripts, complaints and rights requests.
• Finance: transaction references, invoices, receipts, payment status, refunds, accounting and tax records, where held.
• Service operations: usage measurements, technical and security logs, access controls, incident records and software documentation.

The records available in a particular case depend on the service used and applicable retention periods. We do not hold every category about every person.

Company and financial records may be maintained under the Companies Act 71 of 2008; accounting and tax records under applicable tax legislation, including the Income Tax Act 58 of 1962, Tax Administration Act 28 of 2011 and, where applicable, the Value-Added Tax Act 89 of 1991. Electronic transaction and consumer records relate to ECTA 25 of 2002 and the Consumer Protection Act 68 of 2008. Privacy, consent and access-request records relate to POPIA and PAIA.

Access under another Act is subject to that Act's requirements.

The Privacy Policy forms part of this manual's processing description. It identifies the categories of people and information, sources and purposes, including guests, people appearing in photographs, organisers, contributors, enquirers and website visitors.

Recipients include authorised staff, organisers and permitted gallery viewers, hosting and face-processing providers, messaging, payment, AI and analytics providers, and lawful recipients of disclosures. Primary application storage is in South Africa; face processing is in Ireland, and other services may process information overseas. The international-processing section describes these transfers and how to request details.

Safeguards include access controls, encrypted connections, signed gallery links, restricted administration and controls on organiser access to guest information. You can request an explanation relevant to your information from the Information Officer.

1. Use the current PAIA Form 2 (Request for Access to Record) and send it to hello@snapstream.co.za or deliver it to the business address in section 2, marked for the Information Officer.
2. Identify the record sufficiently clearly, provide your contact details and preferred form of access, and state the right you wish to exercise or protect and why the record is required for that right.
3. If acting for another person, provide proof of your authority. We may request reasonable identity verification before releasing personal information.

For your own personal information, POPIA section 23 also applies. You may contact our Information Officer directly for access, correction and objection requests.

Confirmation that we hold your personal information is free. PAIA request, search, reproduction or access fees apply only where the legislation permits. We will explain any prescribed fee, deposit and exemption before payment is required. The Regulator's resources above provide the applicable forms and fee information.

A PAIA decision is normally due within 30 days after receipt of the request. A single extension of up to 30 further days is allowed only on the Act's grounds, with notice explaining the reason and your remedies. A refusal must identify its lawful basis and the available challenge process; lack of a response within the applicable period can be treated as a refusal.

As a private body we do not have PAIA's internal appeal process for public bodies. You may complain to the Regulator, ordinarily within 180 days of the decision or deemed refusal, or use the applicable court remedy. The Regulator's guide explains the requirements and assistance with a complaint.

This manual is available free on this website. It can be saved or printed using your browser. A copy may be requested from the Information Officer, including for inspection at the business address during normal business hours; any reproduction fee is limited to what the law permits. Contact us for an accessible format.

The Information Officer is responsible for maintaining the manual and updating it when the company's records, contact details or processing materially change. The current revision date appears at the top.