GADGIT customer care
PAIA Manual
How to request records from GADGIT under section 51 of the Promotion of Access to Information Act.
Last updated: 9 October 2026
1. Business and scope
This manual provides access information for records held by GADGIT, registration 2025/431781/07, in connection with GADGIT and the relevant central company functions. GADGIT supplies new and pre-owned technology and administers sales, trade-ins and aftercare.
A request concerning another business activity will be directed to the head of the company for the appropriate records. A category in this manual is a description of a record type, not a representation that every possible record exists or that confidential records are automatically public.
2. Where to send requests
Address a request to the head of the private body / Information Officer, GADGIT. Email: support@gadgit.co.za. Business contact: 082 311 4959. Company correspondence address: 31 Engelbrecht Street, Oatlands, Krugersdorp, Gauteng, 1739, South Africa. Website: https://gadgit.co.za.
Please identify the record or information required and provide a reliable way to contact you. A request does not require an online customer account. If you need assistance making the request accessible, ask us; a particular website form is not the only channel.
3. The Regulator’s PAIA guide
The Information Regulator publishes the guide under section 10 of PAIA, explaining access rights, request procedures and the assistance available. The guide and prescribed forms can be obtained from the Regulator’s website. A copy or assistance locating it may also be requested from us.
Information Regulator (South Africa): enquiries@inforegulator.org.za; 010 023 5200. Its website provides current offices, language versions, complaint details and eServices.
4. Information available without a formal request
Publicly displayed product information, prices and availability, this manual, the Privacy Policy, Contact page, Terms & Conditions, Returns & Refunds, Shipping & Delivery and Warranty policies can be accessed on the website without a PAIA request.
Information already available to a customer through their own account or ordinary order-support channels can usually be requested through those channels. This does not remove a formal access right, and an account login is not a prerequisite for making a PAIA request.
5. Categories of records
Corporate and governance: incorporation and company records, relevant resolutions, registrations, policies, contracts and governance evidence. Finance and tax: invoices, payments, refunds, accounting records, tax records and audit support.
Customers and transactions: customer profiles, contact and delivery details, orders, quotations, trade-ins, device identifiers, covered second-hand transaction registers and identity evidence, aftercare, returns, warranties and related correspondence.
Suppliers and service providers: business contacts, applications, agreements, purchase orders, supplier invoices, delivery and warranty records. Staff and contractors: engagement, payroll and employment records where applicable, role authorisations and training.
Technology and privacy: authentication and security records, relevant access/audit logs, support records, privacy choices and consent evidence, privacy-rights requests, retention/disposal and incident records. Marketing: subscription status, requested preferences, consent and withdrawal history, campaign delivery and suppression records.
6. Records held under other legislation
Depending on the record and activity, relevant legislation includes the Companies Act 71 of 2008; Tax Administration Act 28 of 2011; Income Tax Act 58 of 1962; Consumer Protection Act 68 of 2008; Electronic Communications and Transactions Act 25 of 2002; Protection of Personal Information Act 4 of 2013; and Second-Hand Goods Act 6 of 2009.
Employment, unemployment-insurance, compensation and value-added-tax legislation applies where its factual requirements are met. Listing legislation does not claim that the company holds a particular licence, has a particular tax registration, or that every record under that law is freely disclosable. Access remains subject to the applicable law.
7. Processing purposes and people concerned
The main GADGIT purposes are providing accounts and orders; taking or confirming payments; fulfilment and delivery; device purchases, trade-ins and lawful identity/ownership checks; customer service and warranty handling; business administration; security and fraud prevention; legal compliance; and marketing where lawfully authorised.
Data subjects may include customers, prospective customers, device sellers, website visitors, subscribers, staff, contractors, suppliers and their representatives. Information can include names and contact details, account/transaction records, device information, relevant identity records, business and staff records, security logs, correspondence and privacy choices. Only information relevant to a lawful purpose should be processed.
8. Recipients and international transfers
Recipient categories include authorised staff; payment services and banks; shipping platforms and couriers; hosting, email and technical providers; accounting/legal advisers; suppliers assisting with an actual transaction or warranty; and authorities where disclosure is required or lawfully justified. BOBPAY and Bob Go are the selected payment and shipping services, subject to the methods offered for a transaction.
Some technology or service-provider processing can occur outside South Africa. An applicable section 72 basis and adequate protection must be established for each transfer. Ask us for the relevant actual recipients, countries and safeguards for your information. A supplier contract or confidentiality label does not, on its own, establish that every transfer is lawful.
9. General safeguards
Safeguards include role-based access, authentication and session controls, private access to customer files, secure transmission, record access and change logs, retention and lawful-hold procedures, service-provider controls and incident handling. Measures must be appropriate to the information and reviewed.
This is a general security description to assist an initial assessment. It does not disclose credentials or infrastructure access details, promise absolute security, or constitute a regulatory compliance certificate.
10. Making a formal PAIA request
Use the current PAIA Form 2 (Request for Access to Record), or contact us for help completing the required particulars. PAIA Form 2 for access is different from POPIA Form 2 for correction/deletion. Identify the requested record, requester and any person represented; explain the right to be exercised or protected and why the record is needed where required for private-body access; state the preferred form of access and contact method.
If acting for someone else, provide suitable proof of authority. We may request proportionate identity verification. Do not include passwords or unnecessary identity documents. We will assist with procedural deficiencies rather than treating a minor format problem as an automatic loss of access.
11. Timing, fees and decisions
For a formal private-body access request, PAIA ordinarily requires a decision as soon as reasonably possible and within 30 days of receipt, subject to the applicable statutory requirements and third-party process. A permitted extension of up to a further 30 days requires the Act’s conditions and timely written notice explaining the reason and available remedy.
Only applicable prescribed fees may be charged. Any fee or required deposit must be explained with the available challenge process; obtain an estimate before a chargeable service. The free confirmation, objection and correction/deletion rights under POPIA are not converted into a paid service by this manual.
We explain a grant, partial grant or refusal in writing. A lawful refusal can protect another person’s privacy, privileged material or protected commercial information. Separable information should be disclosed where required. If a record cannot be found after reasonable steps or does not exist, the statutory process applies; we do not invent a record.
12. Correction, deletion and objection
Use the privacy request service or contact support@gadgit.co.za for access to your personal information, correction of inaccurate information, an applicable objection, withdrawal of consent or deletion where retention is no longer authorised. We will help with the appropriate POPIA form or accessible equivalent and explain verification if needed.
A legitimate tax, company-record, second-hand transaction or dispute hold can prevent immediate erasure of particular records. It does not authorise unrelated use of retained information. The Privacy Policy explains the relevant choices and contact routes.
13. Complaints and review
If dissatisfied, ask us to explain or reconsider the decision. You can also complain to the Information Regulator using its prescribed channel or seek the court remedy available under PAIA. A company support review does not remove those rights or extend a statutory deadline.
The Regulator’s current guide explains the applicable time limits and complaint procedure. Keep the request, acknowledgement, response and any fee or extension notice.
14. Availability and updates
This manual is available free on this website and may be requested from support@gadgit.co.za. Contact us for directions and arrangements to inspect the manual at the principal place of business during normal business hours. Arrangements must not prevent a lawful inspection or access request. A reasonable reproduction amount may apply to requested copies where allowed.
The manual is supplied to the Information Regulator on request and reviewed when relevant contact details, records or processing change. The date above identifies this version. You may print or save this page for reference.
Related information: Returns & Refunds · Warranty · Delivery · Contact GADGIT