Legal

PAIA manual

Last updated 25 September 2026

Draft — pending legal review

This page is a draft and hasn't yet been reviewed by our legal advisers. It may change before it is finalised.

Details marked “To be confirmed” are still being finalised and will be added before the page is published in final form.

This manual is published in terms of section 51 of the Promotion of Access to Information Act 2 of 2000 (PAIA). It explains which records we hold and how to request access to them.

1.Introduction

The Promotion of Access to Information Act 2 of 2000 ("PAIA") gives effect to the constitutional right of access to information. Section 51 requires private bodies to publish a manual that explains how to request access to the records they hold. This is the PAIA manual of Whitestar Cruise & Travel.

This manual is available on our website and at our head office, and a copy can be requested from our Information Officer.

2.Company details

ItemDetails
Trading nameWhitestar Cruise & Travel
Registered nameTo be confirmed (registered company name)
Registration numberTo be confirmed (CIPC registration number)
VAT numberTo be confirmed (VAT number)
Physical addressAugusta Building, Ground Floor, Fourways Golf Park, 32 Roos Street, Fourways, 2191, Johannesburg
Postal addressTo be confirmed (postal address)
Telephone011 463 3293 (Johannesburg), 021 100 3300 (Cape Town)
Emailinfo@whitestar.co.za
Websitehttps://portal.wscruise.co.za

3.Information Officer and Deputy Information Officer

Requests for access to records must be addressed to the Information Officer:

Information OfficerDeputy Information Officer
NameTo be confirmed (name)To be confirmed (name)
EmailTo be confirmed (email)To be confirmed (email)
TelephoneTo be confirmed (phone)To be confirmed (phone)
AddressAugusta Building, Ground Floor, Fourways Golf Park, 32 Roos Street, Fourways, 2191, JohannesburgAugusta Building, Ground Floor, Fourways Golf Park, 32 Roos Street, Fourways, 2191, Johannesburg

4.Guide on how to use PAIA

The Information Regulator has published a guide (in terms of section 10 of PAIA) that explains how to exercise your rights under PAIA and POPIA. It is available from the Information Regulator's website, inforegulator.org.za, and a copy can be inspected at our office during office hours.

5.Records available without a request

The following records are available without a formal PAIA request:

6.Records kept in terms of legislation

We keep records as required by the legislation that applies to us, which may include:

  • Basic Conditions of Employment Act 75 of 1997
  • Companies Act 71 of 2008
  • Compensation for Occupational Injuries and Diseases Act 130 of 1993
  • Consumer Protection Act 68 of 2008
  • Electronic Communications and Transactions Act 25 of 2002
  • Employment Equity Act 55 of 1998
  • Income Tax Act 58 of 1962
  • Labour Relations Act 66 of 1995
  • Protection of Personal Information Act 4 of 2013
  • Tax Administration Act 28 of 2011
  • Unemployment Insurance Act 63 of 2001
  • Value-Added Tax Act 89 of 1991
  • To be confirmed (confirm and complete this list with the company's legal adviser)

7.Subjects and categories of records held

SubjectCategories of records
CompanyIncorporation documents, statutory registers, minutes, shareholder records
FinanceAccounting records, bank records, invoices, tax and VAT records, audit reports
Human resourcesEmployment contracts, personnel files, payroll, leave records, recruitment records and CVs
ClientsEnquiries, quotes, booking records, correspondence, travel documents supplied for bookings, consent and marketing preferences
Suppliers and cruise linesAgency and supplier agreements, correspondence, commission and payment records
Information technologySystem and security logs, website and portal records, IT policies
MarketingNewsletter subscriber lists, campaign records, website analytics (with consent)

8.Processing of personal information (POPIA)

Section 51(1)(c) of PAIA requires this manual to describe how we process personal information. In summary (see our privacy policy for full details):

ItemDetails
Purpose of processingAnswering enquiries; arranging, confirming and managing cruise and travel bookings; running the client portal; recruitment; direct marketing with consent; complying with the law; security and administration.
Categories of data subjectsClients and prospective clients (including travelling companions and children, with a parent's or guardian's consent); job applicants; employees; suppliers and cruise lines; travel-agent partners; website visitors.
Categories of personal informationIdentity and contact details; dates of birth and ages; passport details and copies; loyalty numbers; travel preferences and special requests (which may include health or dietary information); booking and payment records; employment and CV information; device and usage data.
RecipientsCruise lines and travel suppliers; service providers (operators) such as authentication, hosting, email, analytics and AI chat providers; professional advisers; authorities where the law requires.
Cross-border transfersYes: to cruise lines and suppliers abroad and to service providers whose systems are outside South Africa, as permitted by section 72 of POPIA.
Security measuresEncrypted connections, access controls, restricted document storage and rate limiting.

9.How to request access

  • Complete the prescribed request form (Form 2 of the PAIA Regulations), available from the Information Regulator's website or from our Information Officer.
  • Send it to the Information Officer by email or deliver it to our office (see section 3).
  • Give enough detail for us to identify the records and the requester, say which form of access you want, and give an address or email for our reply.
  • If you are asking on behalf of someone else, include proof of the capacity in which you make the request.
  • If you need access to exercise or protect a right, explain which right and why you need the record.

We will respond within 30 days of receiving a complete request, unless the period is extended as PAIA allows, in which case we will tell you.

10.Fees

PAIA and its regulations prescribe a request fee and access fees (for example for copying and postage), and a deposit may be payable for large requests. The current prescribed fees are set out in the PAIA Regulations published by the Information Regulator. A requester asking for their own personal information does not pay a request fee. We will tell you if a fee applies before we process your request.

11.Grounds for refusal

We may refuse access only on the grounds set out in Chapter 4 of Part 3 of PAIA, for example to protect the privacy of third parties, commercial information of third parties or of Whitestar, confidential information, the safety of individuals or property, or legally privileged records.

12.Remedies

We do not have an internal appeal procedure. If you are not satisfied with our decision, you may lodge a complaint with the Information Regulator within 180 days, or apply to court for appropriate relief, as provided for in PAIA.

13.Availability and updates

This manual is available on our website and for inspection at our head office during office hours. We review it regularly and update it when our details or processes change.

Questions about this page? Email info@whitestar.co.za.

Back to top