PAIA is the Promotion of Access to Information Act. It lets people ask for information that a business holds.
Every private body must have a PAIA manual. Small businesses had an exemption until 31 December 2021. The Information Regulator said that was the final exemption.
You can keep the manual at your business. Or you can put it on your website.
The Information Regulator has a template on its website. It is free to use.