PAIA Manual.

01Introduction

This manual is published in terms of section 51 of the Promotion of Access to Information Act, 2000 ("PAIA"), by Agility Solutions (Pty) Ltd ("Agility Solutions"), a private body as defined in PAIA. Agility Solutions provides the Linen Management Solutions platform.

Agility Solutions (Pty) Ltd was previously registered as Linen Management Solutions (Pty) Ltd. The name changed with effect from 25 August 2026. The registration number is unchanged, and the change of name does not affect any existing agreement. Linen Management Solutions remains the name of the platform.

PAIA gives effect to the constitutional right of access to information held by another person that is required for the exercise or protection of any rights. This manual explains the types of records Agility Solutions holds and the procedure to request access to those records. It also describes how Agility Solutions processes personal information, as required by the Protection of Personal Information Act, 2013 ("POPIA").

02Company and contact details

03The Information Regulator's guide (section 51(1)(b))

The Information Regulator has, in terms of section 10(1) of PAIA, published a Guide on how to use PAIA and POPIA. The Guide is available in each official language and contains information required by a person wishing to exercise any right contemplated in PAIA or POPIA.

The Guide is available from the Information Regulator, and a copy may be requested from the Regulator on Form 1 of the PAIA regulations:

04Records available in terms of other legislation

Records are kept in accordance with legislation applicable to Agility Solutions, including, where applicable:

• Companies Act, 71 of 2008
• Income Tax Act, 58 of 1962
• Value-Added Tax Act, 89 of 1991
• Basic Conditions of Employment Act, 75 of 1997
• Labour Relations Act, 66 of 1995
• Unemployment Insurance Act, 63 of 2001
• Electronic Communications and Transactions Act, 25 of 2002
• Protection of Personal Information Act, 4 of 2013
• Promotion of Access to Information Act, 2 of 2000

05Categories of records held

Agility Solutions holds records in the following categories. Listing a category does not imply that a request for access to such records will be granted; all requests are evaluated in terms of PAIA, including the grounds for refusal in Chapter 4 of Part 3.

• Company records: incorporation documents, statutory registers, minutes, and governance records.
• Financial records: accounting records, financial statements, tax records, invoices, and banking records.
• Employment records: employee personal information, employment contracts, payroll, and related HR records.
• Client and contractual records: service agreements, subscription orders, correspondence, and support records.
• Platform and operational records: user account records, system logs, audit trails, and operational data processed within the Linen Management Solutions platform on behalf of clients. This includes linen counts, requests, collections and deliveries, stock takes, asset registers and service records, housekeeping records, completed forms with their photographs and signatures, incident reports, and occupancy counts received from a client's own systems.
• Marketing and website records: enquiries, marketing materials, and website analytics.
• Compliance records: POPIA documentation, policies, and this manual.

06Records automatically available

The following records are automatically available without a formal PAIA request:

• Information published on our website, including marketing material and product information.
• Our Terms and Conditions, our Privacy Policy and this PAIA Manual.

07How to request access to records

A request for access to a record must be made on Form 2 of the PAIA regulations (Request for Access to Record) and submitted to the Information Officer at the contact details in section 2. The prescribed form is available from the Information Regulator's website.

The requester must:

• Provide sufficient particulars to enable the Information Officer to identify the record and the requester.
• Indicate the form of access required.
• Identify the right the requester is seeking to exercise or protect, and explain why the record is required for the exercise or protection of that right.
• Provide proof of identity.
• Pay the prescribed request fee and, where applicable, access fees before the request is processed.

Agility Solutions will respond to a request within 30 days as required by PAIA, subject to any extension permitted by the Act. If a request is refused, reasons will be provided with reference to the applicable grounds of refusal in PAIA.

A requester who is not satisfied with the outcome of a request may lodge a complaint with the Information Regulator, on Form 5 of the PAIA regulations, or apply to a court, as PAIA provides.

08Prescribed fees

Fees payable in respect of requests are those prescribed in the PAIA regulations from time to time, which currently include a request fee of R140 for private bodies, as well as access and reproduction fees depending on the form of access. Personal requesters (persons requesting records containing their own personal information) are not required to pay the request fee.

The current fee schedule is available from the Information Regulator's website.

09Processing of personal information (POPIA)

As required by regulation, this manual includes a description of how Agility Solutions processes personal information.

Purpose of processing: Agility Solutions processes personal information to provide the Linen Management Solutions platform and its services (hospital and hospitality linen management, asset management, housekeeping, forms, stock takes and reports), manage user accounts, process payments, provide support, comply with legal obligations, and market its services, as detailed in our Privacy Policy. Where Agility Solutions processes personal information on behalf of a client, it does so as that client's operator, as set out in our Terms and Conditions.

Categories of data subjects and personal information:

• Clients and their personnel: names, contact details, employment details, and user account information. For the staff of hospital groups and hospitality properties who use the platform, such as ward, theatre and housekeeping staff, this includes usernames, email addresses, the sites and roles a person works in, sign-in information, signatures and photographs captured in the platform, identifiers of phones registered as trusted devices, and records of the activity carried out under each account.
• Laundry contractors and their personnel: company and contact person details, the same user account and activity information as above, and the names and signatures of drivers recorded on consignments.
• Other people named in platform records: contact persons of an organisation, people a client has chosen to receive alert emails without holding an account (an email address), and people named in incident reports, which may record an injury and so include special personal information.
• Employees: personal, employment, and payroll information.
• Suppliers and service providers: contact and contractual information.
• Website visitors and enquirers: the details given in an enquiry (name, organisation, email address, telephone number and message), and technical and usage information about visits, as described in section 14 of our Privacy Policy.

The platform is not designed to hold records about patients or guests. Occupancy information received from a client's own systems is a count of occupied beds or the status of a room, not who occupies it.

Recipients: personal information may be shared with service providers (such as cloud hosting and payment processors), and with legal and regulatory bodies when required by law. The service providers currently used are listed in section 10 of our Privacy Policy.

Cross-border flows: the platform's production database and its daily backups are hosted in South Africa, in the Amazon Web Services Africa (Cape Town) region. Some service providers, such as those used for email delivery and for hosting our website, may store or process personal information in other countries, subject to the safeguards described in section 11 of our Privacy Policy and POPIA.

Security measures: Agility Solutions applies appropriate and reasonable technical and organisational measures, including access control by role and permission, encrypted connections, sign-in credentials stored as hashes, audit logging, daily backups, secure storage, monitoring, and secure destruction of records no longer required.

10Availability of this manual

This manual is available on our website at linenmanagement.co.za and on request from the Information Officer. A copy will be provided at our offices during business hours, and copies may be requested at the prescribed reproduction fee, if applicable.

11Updating of this manual

This manual will be reviewed and updated as and when required, including when there are material changes to the categories of records held, the contact details of the Information Officer, or the applicable legislation.