Legal
PAIA Manual
How to request access to records held by BMS Holdings under the Promotion of Access to Information Act.
Last updated: 21 October 2026
This manual is published under section 51 of the Promotion of Access to Information Act 2 of 2000 (PAIA), as amended by the Protection of Personal Information Act 4 of 2013 (POPIA).
1. Company details
- Name: Business Made Safe Holdings (Pty) Ltd, trading as BMS Holdings
- Registration number: available on request
- Address: The Colosseum, First Floor, Century Way, Century City, Cape Town, 7441
- Phone: 064 549 5312
- Email: info@bmsholdings.co.za
- Information Officer: the head of BMS Holdings (Managing Director), contactable at info@bmsholdings.co.za
2. The Information Regulator's guide
The Information Regulator publishes a guide on how to use PAIA and POPIA. It is available from the Information Regulator at inforegulator.org.za.
3. Records we hold
BMS Holdings holds records in these general categories:
- Company and statutory records
- Financial and tax records
- Employee and human resources records
- Client and supplier records, including quotes, contracts and correspondence
- Occupational health records from medicals
- Training records and certificates
- Consulting, audit and ISO project records
The fact that a category is listed does not mean every record in it will be made available. Each request is assessed under PAIA.
4. Records available without a request
Information published on this website, including our services, course outlines and this manual, is available without a formal request.
5. Processing of personal information
Purposes. We process personal information to respond to enquiries, prepare quotes, deliver our services (training, consulting, thermal imaging, ISO implementation and occupational medicals), issue certificates, meet our legal obligations and run our business.
Data subjects and information. Clients and their employees (contact details, training and assessment records, occupational health records), website visitors who contact us (contact details and enquiry details), suppliers and service providers (contact and payment details), and our own employees (employment records).
Recipients. Clients who are entitled to the records (for example an employer receiving certificates of fitness or training records), laboratories, certification bodies, our service providers and authorities where the law requires it.
Cross-border transfers. Some of our service providers, such as website hosting and email delivery, may store information outside South Africa. Where that happens, we make sure the protection is substantially similar to POPIA, as section 72 requires.
Security. We use reasonable technical and organisational measures, including encrypted connections, access controls and confidentiality obligations for staff. See our privacy policy for more detail.
6. How to request access
Submit the prescribed form (Form 2) to the Information Officer by email. We may charge the prescribed fees. We will respond within 30 days, as PAIA requires. The prescribed forms and fees are available from the Information Regulator at inforegulator.org.za.
7. Grounds for refusal
We may refuse access on the grounds set out in Chapter 4 of Part 3 of PAIA, for example to protect the privacy of third parties, commercial information or confidential information.
8. Availability of this manual
This manual is available on this website and at our offices during business hours.