PAIA Manual

Last updated: July 2026

This manual is published in terms of section 51 of the Promotion of Access to Information Act 2 of 2000 ("PAIA"), as amended by the Protection of Personal Information Act 4 of 2013 ("POPIA"), for ROF Labs , operator of Model Search. It explains what records we hold, how you can request access to them, and how we process personal information under POPIA.

1. Contact details

Head of the private body / Information Officer: [Name to be appointed and registered]
Email: privacy@modelsearch.co.za
Postal / physical address: [To be added]

2. About this document

PAIA gives effect to the constitutional right of access to information. This manual describes the categories of records Model Search holds and the procedure for requesting access to them. It should be read alongside the Information Regulator's guide to using PAIA, available at inforegulator.org.za.

3. Records we hold

Model Search holds records in the following categories:

• Account records — email address, hashed password, account role.
• Model profile records — display name, physical stats, categories, rates, availability, agency, private contact details, verification status, date of birth (used only to confirm age, never displayed).
• Portfolio records — albums and photos uploaded by models.
• Brand profile records — company name, company type, verification status, credit balance.
• Casting call records — listings posted by brands and interest expressed by models.
• Contact unlock records — a log of which brands unlocked which models, and the shoot brief attached.
• Message records — in-app messages exchanged after an unlock is accepted.
• Financial records — credit purchase transactions processed via Yoco.
• Trust and safety records — reports submitted about accounts or casting calls.

4. Processing of personal information (POPIA)

Purpose of processing

To operate a marketplace connecting models and brands, verify age eligibility, facilitate paid unlocks and casting call applications, enable in-app messaging after mutual consent, process credit payments, and maintain trust and safety through a reporting system.

Categories of data subjects

Models, brand representatives, and administrators of the platform.

Recipients of personal information

Brand users (only after a paid unlock), our payment processor Yoco (for payment processing only), and our hosting/infrastructure providers (Replit) as necessary to operate the service.

Cross-border transfers

[To be confirmed — describe whether any personal information is processed or stored outside South Africa.]

Security measures

Passwords are stored as secure hashes, never in plain text. Contact details are withheld from public view and only released via a paid unlock. Access to administrative functions is restricted by role. Photos are stored in access-controlled object storage.

5. How to request access to a record

Requests must be made in writing to the Information Officer above, identifying the record sought and the right you need to exercise or protect. We will respond within the timeframes prescribed by PAIA. A prescribed fee may apply for locating and copying records, in line with the PAIA Regulations.

6. Grounds for refusal

Access may be refused on grounds set out in PAIA, including where disclosure would unreasonably disclose another person's personal information, or where an exemption otherwise applies. Reasons for any refusal will be provided in writing.

7. Availability of this manual

This manual is available on our website at all times. A copy can also be requested by emailing privacy@modelsearch.co.za.