Privacy Statement

Your privacy is important to us and we know that you are concerned about how we use your personal information. Standard Bank Group Limited, its subsidiaries and their subsidiaries* (Group, we, us, our) collect and process your personal information according to the data protection principles set out below. Reference to personal information means any information which identifies you, and includes information such as your name/s, email address, telephone number, biometric information and password, as well as any other personal information collected. This Privacy Statement and our Cookie Notice applies when you use our Channels (this website, associated websites, mobile sites, mobile applications and other channels).

These principles are in line with our Code of Ethics and comply with applicable laws, rules and standards.

1. We maintain and continuously improve our data privacy culture by providing training and awareness sessions for all employees, and where relevant, for third-party service providers.
2. All employees  are made aware of their responsibilities in terms of laws and internal rules that apply to protecting personal information.
3. We promote the protection of personal information by ensuring that we comply with applicable laws, rules and standards when processing your personal information.  
4. We will be transparent in our dealings with you and will tell you how we collect and use your personal information. These practices can be found in our privacy statements and all our products and services agreements.
5. We  rely on lawful grounds with respect to the collection, use, and sharing of personal information and collect personal information only for the purposes identified in our privacy statements and all our products and services agreements. Lawful grounds include consent (when needed we may ask for consent), contract (where processing is necessary for the performance of a contract with you for example, to deliver the products or services you have requested) and for the purposes of our legitimate interests (to manage corporate transactions, such as mergers or acquisitions) or your legitimate interests (to protect you or others from threats such as security threats or fraud) or for the legitimate interests of third parties.
6. When you use our Channels, we collect your personal information through cookies enabled on these channels. A “cookie” is a small text file that is stored on your computer, smartphone, tablet, or other device when you visit a website or use an app. They contain specific information relating to your use of our website or app, such as login credentials; your preference settings or tracking identifiers. Cookies make it easier for us to give you a better experience online. For all optional types of cookies, we will obtain your consent before these cookies can be used or stored on your device.

For this reason, we limit our use of cookies as explained below to: 

• provide products and services that you request; 
• deliver advertising via marketing communications;  
• provide you a better personalised online experience and track website performance; and 
• help us make our website more relevant to you. 

To learn more about our site's cookies and how you can manage them, please visit out manage your cookies page. 

Optional Cookies  
Session cookies - These cookies are temporary and only exist while you browse our website. As soon as you close your browser or move to a different website, they are removed. They allow our website to link your actions during a browser session. 
  

Persistent cookies - These are permanent cookies that are stored on your device until they reach a set expiry date or until you delete them. They remember your preferences or actions across our site (or in some cases across different websites). We may use them for various reasons, like remembering your preferences and choices when using our site, or to display only relevant advertising messages to you. 

First-party cookies – We own and create these cookies. 

 Third-party cookies - These cookies are owned and created by another company that provides a service to us, like social media sharing, website analytics or content marketing. 
 

How to disable cookies 

You can stop your browser from accepting cookies by changing the settings on your web browser. Please note that restricting cookies may impact the functionality of our websites. We recommend that you allow cookies, to enable the efficient and proper functioning of the website. Explore the settings and options on your browser to disable or enable them or visit  https://www.aboutcookies.org  for detailed information about managing cookies on different browsers. 

How we use your Personal Information

1. We process your personal information in a lawful and reasonable manner that does not infringe your privacy.
2. We will take reasonably practicable steps to ensure that the personal information is complete, accurate, not misleading and updated where necessary. 
3. We limit the use of personal information to the purposes identified in our privacy statements and all our products and services agreements and for which the individual has provided consent. We store your personal information securely and retain or keep your personal information for only as long as necessary to fulfil the stated purposes or as required by law or regulations and thereafter appropriately dispose or anonymise of such personal information.
4. We will take note of the rights you have under applicable privacy and data protection laws and will make sure that we respond to and manage data subject rights requests as soon as reasonably possible and as prescribed by law.
5. In terms of our operating model, we may share your personal information with our subsidiaries* and affiliates and third parties only for the purposes identified in the privacy statement and with your explicit consent, where required to provide the services to you. Standard Bank Group ensures that our subsidiaries and affiliates, including third parties, receiving your personal information have appropriate, reasonable technical and organisational measures in place which adhere to our privacy principles and practices.
6. We comply with data protection laws and other related laws and codes of conduct that apply in the countries where we operate.  
7. We protect personal information against unlawful and/or unauthorised access (both physical and logical), use, sharing, loss and damage.
8. We will take reasonable actions to make sure that adequate privacy and security measures are in place before we transfer your personal information to other countries if the transfer is necessary to provide services to you. Data and personal information we collect may be transferred to, stored and processed in any country or territory where one or more of our group companies or service providers are based or have facilities. While other countries or territories may not have the same standards of data protection as those in your home country, we will continue to protect personal information that we transfer in line with our privacy principles and practices.  We only transfer data and personal information to places where we are satisfied that adequate protection can be provided and we use due diligence and appropriate contractual clauses to make sure that adequate and appropriate levels of data protection are used.
9. We process the personal information of minors (minors defined under applicable laws within the jurisdictions we operate), only when a competent person consents to the processing or as allowed by law.
10. We respect your data protection rights although rights vary depending on the relevant data protection laws.  However, at a minimum we include:
    1. Your right of access - You have the right to ask us for copies of your personal information.
    2. Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
    3. Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
    4. Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
    5. Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
    6. Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
11. We monitor compliance with data privacy-related policies and procedures and have procedures to address data privacy related complaints and disputes.
12. We may update this privacy statement from time to time. We will publish all changes on our website. The latest version of our privacy statement will replace all earlier versions, unless otherwise indicated. If you have any questions or complaints about privacy, please contact the Group Privacy Officer:

Melindie Esterhuyse – Deputy Information Officer 
The Standard Bank of South Africa Limited
P O Box 1155
Johannesburg 
2000 

Physical Address 
Standard Bank Centre 
5 Simmonds street 
Johannesburg 
2001

Telephone: 011 636 7385
Email: [email protected]

Regulatory
Version: 3

Date published: 14 June 2021
Standard Bank Group Limited

* Subsidiaries and their subsidiaries

Diners Club (S.A.) (Pty) Ltd, Standard Bank Financial Services Holdings (Pty) Ltd, Standard Offshore Finance Company (Pty) Ltd, Melville Douglas Investment Management (Pty) Ltd, FHPManagers (Pty) Ltd, Standard Trust Limited, Standard Insurance Limited, Stanhold Investments (Pty) Ltd, Greenfield Newgate (Pty) Ltd, The Unisec Group Limited, Standard Bank Properties (Pty) Ltd, Blue Waves Properties 78 (Pty) Ltd, SBG Securities (Pty) Ltd.