PAIA Manual: yourLIFE.shop (Pty) Ltd

Manual prepared in terms of section 51 of the Promotion of Access to Information Act 2 of 2000 (PAIA) and section 17 of the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Introduction and purpose

yourLIFE.shop (Pty) Ltd (registration number 2017/349779/07, VAT number 4360282414) is a private company that sells health, wellbeing, coffee and lifestyle products online at www.yourlife.shop and to customers who contact us directly.

We also hold records from our group's businesses, past and present. These include customers, warranty registrations and enquiries for brands such as Beurer, Sanitas, TROIKA, Vagnbys, Venta, Kellermann, PearlCo and Thomas. Some of these records were kept under the name Eurocare Wellness, which is the same company as yourLIFE.shop (Pty) Ltd.

The Promotion of Access to Information Act 2 of 2000 (PAIA) gives everyone the right to access records held by a private body when the record is needed to exercise or protect a right. This manual explains:

  • what records yourLIFE.shop (Pty) Ltd holds;
  • which records are available without a formal request;
  • how to request access to other records, and what it costs; and
  • how we process personal information, as required by section 51(1)(c) of PAIA and the Protection of Personal Information Act 4 of 2013 (POPIA).

In this manual, "we", "us" and "the company" mean yourLIFE.shop (Pty) Ltd.

2. Contact details of the Information Officer

The Managing Director is the head of the company and its Information Officer. Send all PAIA requests and personal-information queries to:

Role

Information Officer, yourLIFE.shop (Pty) Ltd

Email

privacy@yourlife.shop

Telephone

011 782 4503

Street address

5 Star Business Park, Unit 2 Insite Park, Honeydew, Gauteng, 2170

Postal address

PO Box 1980, Cresta, 2118

Website

www.yourlife.shop


3. The Regulator's guide on how to use PAIA

The Information Regulator has published a guide, in each official language, on how to use PAIA and POPIA to exercise your rights (section 10 of PAIA). It explains what PAIA is for, how to make a request, the fees, and what you can do if a request is refused.

You can get the guide from the Regulator's website, or ask the Information Officer for a copy. We will give you a copy free of charge, by email or for inspection at our office during office hours.

Information Regulator

Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191

Postal address

PO Box 31533, Braamfontein, Johannesburg, 2017

Telephone

010 023 5200

General enquiries

enquiries@inforegulator.org.za

PAIA complaints

PAIAComplaints@inforegulator.org.za

POPIA complaints

POPIAComplaints@inforegulator.org.za

Website

inforegulator.org.za


4. Records available without a request

The following records are available to anyone, without a PAIA request or fee (section 52 of PAIA):

Record

Where to find it

Product information, descriptions and prices

www.yourlife.shop

Terms of Service

www.yourlife.shop/policies/terms-of-service

Privacy Policy

www.yourlife.shop/policies/privacy-policy

Returns and Refunds Policy

www.yourlife.shop/policies/refund-policy

Delivery, payment and how-to-order information

www.yourlife.shop (Service & FAQ pages)

Promotion and competition terms

www.yourlife.shop, on the page for each promotion

This PAIA manual

www.yourlife.shop, and on request from the Information Officer


5. Records kept in terms of other legislation

We keep records as required by the following Acts, where they apply to the company. Some of these records are available only to the people or authorities named in the Act concerned.

  • Basic Conditions of Employment Act 75 of 1997
  • Companies Act 71 of 2008
  • Compensation for Occupational Injuries and Diseases Act 130 of 1993
  • Consumer Protection Act 68 of 2008
  • Electronic Communications and Transactions Act 25 of 2002
  • Employment Equity Act 55 of 1998
  • Income Tax Act 58 of 1962
  • Labour Relations Act 66 of 1995
  • Occupational Health and Safety Act 85 of 1993
  • Promotion of Access to Information Act 2 of 2000
  • Protection of Personal Information Act 4 of 2013
  • Skills Development Act 97 of 1998 and Skills Development Levies Act 9 of 1999
  • Tax Administration Act 28 of 2011
  • Unemployment Insurance Act 63 of 2001 and Unemployment Insurance Contributions Act 4 of 2002
  • Value-Added Tax Act 89 of 1991

This list is not complete. If you believe we hold a record under another Act, ask the Information Officer.

6. Subjects and categories of records held

We hold the following records. Most of them are available only on request (section 53), and some may be refused on the grounds set out in PAIA.

Subject

Categories of records

Company secretarial

Memorandum of Incorporation, CIPC registration documents, share register, directors' resolutions and minutes

Finance and tax

Annual financial statements, accounting records, invoices, bank statements, VAT and income tax records, audit reports

Customers

Customer accounts, order and delivery records, invoices, returns and warranty records, customer correspondence, marketing consent and preferences, records of consent requests and answers, the do-not-contact list, product reviews, loyalty points records

Suppliers and service providers

Supplier agreements, purchase orders, supplier invoices, contact details

Products and stock

Product information, stock records, pricing records, warranty and product safety information

Marketing

Campaign records, email and newsletter lists, website and advertising analytics

Website and IT

Website content, system and access logs, IT and data security policies

Staff and contractors (where applicable)

Employment contracts, payroll and tax records, leave records, disciplinary records, training records

Legal

Contracts, legal correspondence, records of disputes, POPIA and PAIA compliance records


7. Processing of personal information

Purposes. We process personal information to:

  • sell and deliver products, and handle payments, returns, warranties and repairs;
  • manage customer accounts, reviews and loyalty rewards;
  • answer questions and complaints;
  • send marketing to people who have agreed to receive it, or to existing customers about similar products, with an opt-out in every message;
  • ask people on our group's records once whether they want our marketing, keep proof of their answer, and keep a do-not-contact list so that people who said no are never contacted again;
  • understand how our website is used and improve it;
  • manage suppliers, service providers and staff; and
  • meet our legal, tax and accounting obligations.

Data subjects and categories of personal information.

Data subjects

Personal information

Customers and website visitors

Name, email, phone number, delivery and billing address, order history, account details, marketing preferences, reviews, loyalty points, device and browsing information (IP address, cookies)

People on our group's records (past customers, warranty registrations and enquiries)

Name and email address, the date we asked for marketing consent and the answer given

Suppliers and service providers

Company and contact person details, bank details, VAT and registration numbers, contracts

Staff and contractors (where applicable)

Name, ID number, contact details, bank details, tax number, employment and payroll records

We do not ask for special personal information, such as health information, and we do not store full card details. Card payments are handled by our payment providers.

Recipients. We share personal information only as needed for the purposes above, with:

  • our e-commerce platform (Shopify), which hosts our store and customer data;
  • an email checking service, to confirm addresses are valid before we send to them;
  • payment providers, to process payments;
  • couriers and delivery platforms, to deliver orders;
  • review and loyalty providers;
  • email, marketing and advertising platforms, to send marketing and measure advertising;
  • suppliers and brand distributors, where needed for a warranty claim or repair;
  • our auditors, accountants and legal advisers; and
  • authorities, where the law requires it.

Cross-border transfers. Some of these providers store or process information outside South Africa. Shopify uses servers in Canada and the United States. Our email checking service uses servers in the European Union. Google and Meta process advertising data in the United States and other countries where they operate, under their own data protection terms. We use only providers that are bound by data protection law or contract terms giving protection substantially similar to POPIA (section 72 of POPIA).

Security measures. We protect personal information with:

  • access limited by role, with individual logins and passwords;
  • encrypted (HTTPS) connections on our website and checkout;
  • payment processing by PCI-DSS compliant providers;
  • confidentiality obligations on staff and service providers; and
  • a process for reporting and handling security compromises, including notice to the Information Regulator and affected people under section 22 of POPIA.

8. How to request access to a record

  1. Complete the request form. Use Form 2 (Request for Access to Record) of the PAIA Regulations, 2021, available from the Regulator's website or from the Information Officer. Describe the record clearly, say how you want access (copy, email or inspection), and explain which right the record will help you exercise or protect.
  2. Send it to the Information Officer by email to privacy@yourlife.shop, or by hand or post to the address in section 2. If you are asking on someone else's behalf, include proof of your authority.
  3. Pay the fees. A request fee and, if access is granted, an access fee apply, as prescribed in the PAIA Regulations. You do not pay a request fee to access your own personal information. If the search will take longer than the prescribed hours, we may ask for a deposit of part of the access fee. We will tell you the amounts in writing before you pay.
  4. We decide within 30 days. We will tell you in writing whether access is granted. We may extend this once, by up to 30 days, and will tell you why.
  5. Access. If the request is granted, we give access once the access fee is paid.

Grounds for refusal. We may or must refuse access on the grounds in sections 62 to 70 of PAIA. These include protecting another person's privacy, commercial information of a third party or of the company, confidential information, safety of people and property, and legally privileged records. If part of a record can be released, we release that part.

If you are not satisfied. There is no internal appeal for a private body. Within 180 days of our decision you may complain to the Information Regulator (PAIAComplaints@inforegulator.org.za), or apply to court.

Your own personal information. Under sections 23 and 24 of POPIA you may ask whether we hold your personal information, ask for a copy, and ask us to correct or delete it. Email privacy@yourlife.shop. To ask for a correction or deletion, or to object to processing, you may use the forms in the POPIA Regulations, 2018. You can unsubscribe from marketing at any time through the link in every message.

9. Availability and updating of this manual

This manual is available:

  • on our website, www.yourlife.shop;
  • for inspection at our office (section 2) during office hours, free of charge; and
  • by email from the Information Officer on request.

We review this manual at least once a year and update it when our records, processing or contact details change.

Approved by the Information Officer, yourLIFE.shop (Pty) Ltd, on 12.10.2026