South Africa
Sign in
Personal
Business
Wealth

Privacy statement

The Standard Bank of South Africa Limited, its successors and assigns Privacy Statement *

The Standard Bank of South Africa Limited, its successors and assigns (the Bank, we, us, our) treat the personal information we collect through our Channels (this website, associated websites, mobile sites, mobile applications and other channels) as private and confidential. This Privacy Statement and our Cookie Notice applies when you use our Channels.

1. Lawful processing of personal information

The Standard Bank of South Africa Limited is committed to processing personal information in keeping with its responsibilities under the applicable data protection laws.

The following conditions of lawful processing of personal information are the principles in terms of which we will be processing the collected personal information. They are:

  • Accountability – the Bank as the responsible party and through its employees will make sure that personal information is processed in a lawful and responsible manner.
  • Processing limitation – we shall lawfully collect personal information for a defined purpose and where applicable, with the consent of our clients and third parties.
  • Purpose specification – we will only use personal information for the purposes that our clients, third parties and employees expect us to use it for. Further processing limitation – where a processing activity is seen as further processing (means a new purpose for processing personal information) and this new purpose is inconsistent with the original purpose (original reason we collected personal information), we will make sure that our processing activities meet the requirements of the applicable data protection laws.
  • Information quality – we will take reasonable steps to ensure your personal information is accurate, complete and updated and not misleading.
  • Openness – from the start, we will be open, clear and honest with our clients, third parties and employees on how and why we use their personal information and how we protect their personal information.
  • Security safeguards – we will apply and follow appropriate and reasonable technical and organisational measures to make sure that the confidentiality, integrity and availability of personal information are secured. These measures will also be applied to protect personal information against loss, damage, unauthorised destruction or unlawful access.
  • Data subject participation – we have processes in place for our clients, third parties and employees to access, correct and delete personal information and exercise their rights in terms of applicable data protection laws. 


2. Collection

We collect and process the following categories and types of personal information through the relevant Channels, including:

  1. personal details (this can be your name, age, passport information, biometric information, information about personal interests);
  2. contact details (this can be your mobile number and email address);
  3. details related to a client (this can be the business contact details of an agent or representative, relationship with the client or related parties, shareholder information); and
  4. transactional details (this can be information about products, services, requests, queries or complaints).

We will collect personal information in the following ways:

  • directly from you, and
  • where lawful and reasonable, from third parties and public sources. This includes credit reporting and government agencies.


3. If you decide to give us express consent, we will use your personal information to:

  • Meet our responsibilities to you.
  • Process your personal information for ordinary business purposes (this includes to open and maintain your account, execute transactions, administer claims where applicable, manage our risks and maintain our overall relationship with you).
  • Carry out statistical and other analyses to identify potential markets and trends, evaluate and improve our business (this includes improving existing and developing new products and services). Consent will not be obtained if we anonymise/de-identify the personal information.
  • Tell you about similar services and products available within The Standard Bank of South Africa, Standard Bank Group or partner services and products. If you wish, you may opt out from receiving such information at any time by choosing the “Unsubscribe” option provided in every communication that we send to you.
  • Comply with applicable laws and regulations.

The Standard Bank of South Africa Limited will not intentionally or knowingly collect personal information directly from minors (anyone under the age of 18). The personal information of minors will be collected through their legal guardian or parent only where products or services are obtained for the minors.

Standard Bank will only use and share your personal information where it is necessary for us to carry out our lawful business activities. To enable you to fully understand the way in which we process your personal information, we have described the different lawful grounds for such processing in detail below:

  1. Consent – We may process your personal information for a specific and explicitly defined purpose where you, or a competent person in the case of personal information relating to a minor, provide us with your express consent for such processing or where law requires.
  2. Contractual need - We may process your personal information where it is necessary to enter into a contract with you in order for us to provide our products or services to you or to perform our obligations under that contract. Please note that if you do not agree to provide us with the requested personal information, it may not be possible for us to continue to operate your account or provide services to you.
  3. Compliance with an obligation imposed by law- When you apply for a product or service, we are required by law to collect and process certain personal information about you. Please note that if you do not agree to provide us with the requested personal information, it may not be possible for us to continue to operate your account or provide services to you.
  4. Legitimate interests of the Bank - We may process your personal information where it is in our legal interests to do so as an organisation and without harming your interests or fundamental rights and freedoms (for example, for marketing purposes, site maintenance, etc.).


When can we process or share your personal information?

We will process your personal information if you give us your consent willingly or according to the grounds of lawful processing highlighted above. If we need your consent, we will notify you through our product and services agreements or application processes through our various authorised Channels.

We will only share your personal information if:

  • the law requires it;
  • we have a public duty to share the personal information;
  • our or your legitimate interests require us to share the personal information; 
  • it is necessary to conclude or perform due to an agreement between you and us; or
  • you agreed that we may share your personal information.


Personal Information sharing and data transfers

  1. We will not share your personal information to external organisations that are not our service providers, unless business operations require the processing of your personal information in other countries, either to carry out processing based on your instructions or for ordinary business purposes. As specified by the above purposes, we may share your personal information with any of the parties mentioned below, located in any jurisdiction: Any member of Standard Bank Group.
  2. Professional advisers like auditors, third-party vendors, or independent contractors who process personal information on behalf of Standard Bank to support our business.
  3. Our business partners who provide their products and services to you.
  4. An employee of a card distributor or vendor where the personal information is shared in connection with the use of a card.
  5. Any individual who needs your personal information due to foreign or local law or regulation.
  6. Any court of justice, regulatory body, taxation authority (including any authority investigating an offence) or their agents.
  7. Any debt collection agency, credit bureau, insurer or broker, direct or indirect provider of credit protection and fraud prevention agencies.
  8. Any financial institution to conduct credit checks, anti-money laundering related checks, for fraud prevention and detection of crime purposes for the group.

The third party, who is located outside of South Africa and receives the personal information, will need to comply to either a law, or binding corporate rules or a binding agreement which states that they will provide an adequate level of protection to your personal information. This means that they have to agree to lawfully process your personal information and protect your personal in the same manner as we do.

The transfer of your personal information will be based one of the following conditions:

  1. You provide your consent to the transfer.
  2. The transfer is necessary for the conclusion or performance of a contract to which you are a party.
  3. The transfer is for your benefit, and it is not reasonably practical to obtain your consent to that transfer; and if it were reasonably practicable to obtain such consent, you would be likely to give it.


Storing personal information

We will store and keep your personal information according to the retention (holding) periods defined by law for legitimate business purposes and will take reasonably practicable steps to make sure that it is kept up to date and deleted and archived according to our defined retention schedules.


Our security practices

The security of your personal information is important to us. We have implemented appropriate and reasonable technical and organisational measures to prevent loss, unauthorised destruction, damage or access to your personal information by unauthorised third parties. The security of your personal information is important to us. We make sure that we implement organisational and technical procedures to keep your personal information safe.

However, you must not share or send us any personal information over unauthorised channels, since it is not a secure way of communication and carries a risk of interception and unauthorised access. You should only share personal information over authorised channels of Standard Bank of South Africa Limited.


Marketing by electronic means

We would like to share information about our own products, services and special offers that are similar to the products or services used by you, via your preferred method of communication (as indicated to us), such as email, text message, social media platforms or notification on your mobile application. Subject to your express consent and the option to opt-out or unsubscribe at any time, we may also share information with you about similar products, services and special offers of our partner companies. If you have opted-in to receive marketing communications, you may always opt out at a later stage using the link shared below or clicking on the “Unsubscribe” option included in every marketing communication sent to you. You have the right at any time to stop us from contacting you for marketing purposes or giving your data to other members of Standard Bank Group. If you no longer wish to be contacted for marketing purposes, please request for us to mark you as ‘No’ to Marketing by visiting any branch, calling us on 0860 123 000 or emailing us on [email protected].


Use of Cookies on our website

A “cookie” is a small text file that is stored on your computer, smartphone, tablet, or other device when you visit a website or use an app. They contain specific information related to your use of our website or app, such as login credentials, your preference settings or tracking identifiers. Cookies make it easier for us to give you a better experience online. For all optional types of cookies, we will obtain your consent before these cookies can be used or stored on your device.

For this reason, we limit our use of cookies as explained below to:

  • provide products and services that you request;
  • deliver advertising via marketing communications;
  • provide you a better online experience and track website performance; and • help us make our website more relevant to you.

Types of cookies used on our website:

Category: Mandatory cookies

Strictly necessary cookies – These cookies are required for the effective operation of our website on your system. These are necessary for the website to function, meaning that the collection of information via these cookies cannot be switched off.

Cookie name Cookie description and purpose Expiry
_cfduid Used by third-party content network, Cloudflare, to identify trusted web traffic 29 days
at_check This cookie determines whether the browser accepts cookies. Session
BIGipServer# Used to distribute traffic to the website on several servers in order to optimise response times. Session
com.adobe.reactor.data
ElementCookiesMigrated
Used in context with the cache-function on the website, facilitating data transfer between Adobe DTM onto Adobe Launch. Persistent
CONSENT Used to detect if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for GDPR-compliance of the website. 6084 days
CookieConsent Stores the user's cookie consent state for the current domain. 1 year
gdpr_status Determines whether the visitor has accepted the cookie consent box. This ensures that the cookie consent box will not be presented again when re-entering. 6 months
JSESSIONID Preserves user’s states across page requests. /td> Session
rc::a This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to draw up valid reports on the use of their website. Persistent
rc::c This cookie is used to distinguish between humans and bots. Session
SERVERID This cookie is used to assign the visitor to a specific server - this function is needed for the website to function. 1 day
test Used to detect if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for GDPR-compliance of the website. Session
Category: Preferences

Strictly necessary cookies – These cookies are required for the effective operation of our website on your system. These are necessary for the website to function, meaning that the collection of information via these cookies cannot be switched off.

Cookie name Cookie description and purpose Expiry
lang Remembers the language a user has selected in a specific website. Session
Category: Statistics

Statistic cookies help website owners understand how visitors interact with websites by collecting and reporting information anonymously.

Cookie name Cookie description and purpose Expiry
AMCV_# Unique user ID that recognises the user on returning visits. 2 years
AnalyticsSynHistory Used in connection with data-synchronisation with third-party analysis service. 29 days
bounce Determines if a user leaves the website straight away. This information is used for internal statistics and analytics by the website operator. Session
cksync.php This cookie is used to determine if cookie data synchronisation is enabled or disabled – cookie data synchronisation is used to synchronise and gather visitor data on several domains. Session
cksyn.php This cookie is used to determine if cookie data synchronisation is enabled or disabled – cookie data synchronisation is used to synchronise and gather visitor data on several domains. Session
dextp This cookie is set by the audience manager of the website to determine the time and frequencies of visitor data synchronisation - cookie data synchronisation is used to synchronise and gather visitor data from several websites. 179 days
gpv_pn Registers statistical data on users' behaviour on the website. Used for internal analytics by the website operator. 1 day
s_cc Used to check if the user's browser supports cookies. Session
s_invisit Collects statistics on the visitors visits to the website, such as the number of visits, average time spent on the website and what pages have been read. 1 day
s_nr Registers a unique ID that identifies the user's device for return visits 29 days
s_ppv Saves information on what vertical percentage of a page has been displayed to the user. Session
s_ppvl This cookie is used to collect information on the user. This information will be stored for internal analytics at the website's operator. Internal analytics is used by websites to optimise their domains. Session
s_vnum Registers how the user has reached the website. 26 Days
visitor-id This cookie is used to collect information on the visitor. This information will be stored for internal analytics at the website's operator. Internal analytics is used by websites to optimise their domains. 1 year
Category: Marketing

Marketing cookies are used to track visitors across websites. The intention is to display advertisements that are relevant and engaging for the individual user and thereby more valuable for publishers and third-party advertisers.

Cookie name Cookie description and purpose Expiry
_cc_aud Cookie description and purpose Collects statistical data related to the user's website visits, such as the number of visits, average time spent on the website and what pages have been loaded. The purpose is to split the website's users according to factors such as demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups for customised online advertising. 269 days
_cc_cc Collects statistical data related to the user's website visits, such as the number of visits, average time spent on the website and what pages have been loaded. The purpose is to split the website's users according to factors such as demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups for customised online advertising. Session
_cc_dc Collects statistical data related to the user's website visits, such as the number of visits, average time spent on the website and what pages have been loaded. The purpose is to split the website's users according to factors such as demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups for customised online advertising. 269 days
_fbp Used by Facebook to deliver a series of advertisement products like real-time bidding from third-party advertisers. 3 months
_gcl_au Used by Google AdSense for experimenting with advertisement efficiency across websites using their services. 3 months
_gcl_aw Used to measure the efficiency of the website’s advertisement efforts, by collecting data on the conversion rate of the website’s ads across multiple websites. 3 months
_kg Presents the user with relevant content and advertisement. The service is provided by third-party advertisement hubs, which facilitate real-time bidding for advertisers. Persistent
_kuid_ Registers a unique ID that identifies a returning user's device. The ID is used for targeted ads. 179 days
A3 Collects information on user behaviour on multiple websites. This information is used to optimise the relevance of advertisement on the website. 1 year
adscores/g.pixel Presents the user with relevant content and advertisement. The service is provided by third-party advertisement hubs, which facilitate real-time bidding for advertisers. Session
anj Registers a unique ID that identifies a returning user's device. The ID is used for targeted ads. 3 months
audience Used to determine whether the video-ads have been displayed correctly on the website. This is done to make video-ads more effective and ensure that the visitor is not shown the same ads more times than intended. The cookie also detects whether the visitor has any Do not track preferences. 1 year
bcookie Used by the social networking service, LinkedIn, for tracking the use of embedded services. 2 years
bkdc Registers user data, such as IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. 179 days
bkpa Presents the user with relevant content and advertisement. The service is provided by third-party advertisement hubs, which facilitate real-time bidding for advertisers. 179 days
bku Registers anonymised user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. 179 days
bscookie Used by the social networking service, LinkedIn, for tracking the use of embedded services 2 years
c Regulates synchronisation of user identification and exchange of user data between various ad services. 1 year
cm Identifies if the cookie-data needs to be updated in the visitor's browser - This is determined through third-party a d-serving-companies. Session
CMID Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads. 1 year
CMPRO Collects data on visitor behaviour from multiple websites, in order to present more relevant advertisement. This also allows the website to limit the number of times that they are shown the same advertisement. 3 months
CMPS Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads. 3 months
CMRUM3 Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads 1 year
CMST Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads. 1 day
data-rk Collects data on visitor behaviour from multiple websites, in order to present more relevant advertisement. This also allows the website to limit the number of times that they are shown the same advertisement. 1 year
demdex The user’s navigation on the website is registered and linked to offline data from surveys and similar registrations to display targeted ads. This is done with a unique ID used for semantic content analysis. 179 days
dpm Sets a unique ID for the visitor that allows third-party advertisers to target the visitor with relevant advertisement. This pairing service is provided by third-party advertisement hubs, which facilitates real-time bidding for advertisers. 179 days
e/rocketfuel_sync Detects whether partner data synchronisation is functioning and currently running. This function sends user data between third-party advertisement companies for the purpose of targeted advertisements. Session
eud Registers user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. 1 year
euds Registers anonymised user data, such as IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. 1 year
ev_sync_ax Collects information on user preferences or interaction with web-campaign content. This is used on CRM-campaign-platforms used by website owners for promoting events or products. 30 days
ev_sync_yh This cookie is set by the audience manager of the website to determine the time and frequencies of visitor data synchronisation. Cookie data synchronisation is used to synchronise and gather 30 days
everest_g_v2 Used for targeted ads and to document efficacy of each individual ad. 1 year
everest_session_v2 Used for targeted ads and to document efficacy of each ad. Session
fr Used by Facebook to deliver a series of advertisement products like real-time bidding from third-party advertisers./td> 3 months
IDE Used by Google DoubleClick to register and report the website user's actions after viewing or clicking one of the advertiser's ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user. 1 year
kg Presents the user with relevant content and advertisement. The service is provided by third-party advertisement hubs, which facilitate real-time bidding. Persistent
krux_views Used to track users on multiple websites, in order to present relevant advertisement based on the user's preferences. Session
lang Set by LinkedIn when a web page contains an embedded Follow us panel. Session
lidc Used by LinkedIn to track the use of embedded services. 1 day
mako_uid Collects data on user visits to the website, like what pages have been accessed. The registered data is used to categorise the user's interest and demographic profiles in terms of resales for targeted marketing. 1 year
match/bounce Used to track users on multiple websites, in order to present relevant advertisement based on the user's preferences. Session
mbox This cookie is used to collect non-personal information on the user’s behaviour and non-personal user statistics, which can be used by a third-party ad-targeting agency. 1 day
p2 Registers user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. Session
pagead/1p-user-list/# Tracks if the user has shown interest in specific products or events across multiple websites and detects how the user navigates between sites. This is used for measurement of advertisement efforts and facilitates payment of referral-fees between websites. Session
pagead/landing Collects data on visitor behaviour from multiple websites, in order to present more relevant advertisements. This allows the website to limit the number of times that they are shown the same advertisement. Session
partner Used in context with video-advertisement. The cookie limits the number of times a user is shown the same advertisement. The cookie is also used to ensure relevance of the video-advertisement to the specific user. Session
pxrc This cookie registers data on the visitor. The information is used to optimise advertisement relevance. 2 months
r1 Collects data related to the user's navigation visits to webpages in order to assess the efficacy of ads that are displayed on the website. Session
rlas3 Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads. 1 year
rud Registers user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. 1 year
ruds Registers user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. Session
RUL Used by DoubleClick to determine whether website advertisement has been properly displayed. This is done to make their marketing efforts more efficient. 1 year
Rum Collects data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads. Session
sd-session-id Registers data on visitors from multiple visits and on multiple websites. This information is used to measure the efficiency of advertisement on websites. 179 days
smd Presents the user with relevant content and advertisement. The service is provided by third-party advertisement hubs, which facilitate real-time bidding for advertisers. 1 year
sync Collects data on user behaviour and interaction to optimise the website and make advertisement on the website more relevant. Session
test_cookie Used to check if the user's browser supports cookies. 1 day
tr Used by Facebook to deliver a series of advertisement products like real-time bidding from third-party advertisers. Session
tuuid Contains a unique visitor ID, which allows Bidswitch.com to track the visitor across multiple websites. This allows Bidswitch to optimise advertisement relevance and ensure that the visitor does not see the same ads multiple times. Session
u2 Collects data related to the user's navigation visits to webpages in order to assess the efficacy of ads that are displayed on the website. 3 months
uid Collects user data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.; 1 year
     
UID Collects information of the user and his/her movement, like timestamps for visits, most recently loaded pages and IP address. The data is used by the marketing research network, Scorecard Research, to analyse traffic patterns and carry out surveys to help their clients better understand the customer's preferences. 2 years
ul_cb/sync Collects information on user behaviour on multiple websites. This information is used in order to optimise the relevance of advertisement on the website. 3 months
um2 Sets a unique ID for the visitor, that allows third-party advertisers to target the visitor with relevant advertisement. This pairing service is provided by third-party advertisement hubs, which facilitates real-time bidding for advertisers. 3 months
UserMatchHistory Used to track visitors on multiple websites, in order to present relevant advertisement based on the visitor's preferences. 29 days
uuid2 Registers a unique ID that identifies a returning user's device. The ID is used for targeted ads. 3 months
VISITOR_INFO1_LIVE Tries to estimate the users' bandwidth on pages with integrated YouTube videos. 179 days
YSC Registers a unique ID to keep statistics of what YouTube videos the user has viewed. Session
yt.innertube::nextId Registers a unique ID to keep statistics of what YouTube videos the user has viewed. Persistent
yt.innertube: requests Registers a unique ID to keep statistics of what YouTube videos the user has viewed. Persistent
yt-remote-cast-installed Stores the user's video player preferences using embedded YouTube video. Session
: yt-remote-connected-devices Stores the user's video player preferences using embedded YouTube video. Persistent
yt-remote-device-id Stores the user's video player preferences using embedded YouTube video. Persistent
yt-remote-fast-check-period/td> Stores the user's video player preferences using embedded YouTube video. Session
yt-remote-session-app Stores the user's video player preferences using embedded YouTube video. Session
yt-remote-session-name Stores the user's video player preferences using embedded YouTube video. Session
zync-uuid Sets a unique ID for the visitor, that allows third-party advertisers to target the visitor with relevant advertisement. This pairing service is provided by third-party advertisement hubs, which facilitates real-time bidding for advertisers. 179 days
s_campaign Used by Adobe Analytics to monitor tracking codes or campaign codes used in marketing efforts. Session
s_intcampaign Used by Adobe Analytics to monitor tracking codes or campaign codes used in internal campaign marketing efforts. Session
_kxstandardbanksa_e_L8nae7l9 Relates to a given marketing event (i.e. form submit). Persistent
_kxstandardbanksa_event3p Relates to a given marketing event (i.e. form submit).; Persistent
_kxstandardbanksa_geo Contains browser geographic data. Persistent
_kxstandardbanksa_kuid Contains audience studio pseudonymous user ID. Persistent
_kxstandardbanksa_user Contains audience studio pseudonymous user ID. Persistent
_kxstandardbanksa_visits Contains audience studio pseudonymous visitor ID. Persistent
kxstandardbanksa_whistle Signals if a user has an adblocker. Persistent

Optional cookies

Session cookies - These cookies are temporary and only exist while you browse our website. As soon as you close your browser or move to a different website, they are removed. They allow our website to link your actions during a browser session.

Persistent cookies - These are permanent cookies that are stored on your device until they reach a set expiry date or until you delete them. They remember your preferences or actions across our site (or in some cases across different websites). We may use them for various reasons, such as remembering your preferences and choices when using our site, or to display only relevant advertising messages to you.

First-party cookies – We own and create these cookies. Third-party cookies - These cookies are owned and created by another company that provides a service to us, such as social media sharing, website analytics or content marketing.

 

How to disable cookies

You can stop your browser from accepting cookies by changing the settings on your web browser. Please note that restricting cookies may impact the functionality of our websites. We recommend that you allow cookies, to enable the efficient and proper functioning of the website. Explore the settings and options on your browser to disable or enable them, or visit https://www.aboutcookies.org for detailed information about managing cookies on different browsers.


Links to other websites

Our website, related websites and mobile applications may have links to or from other websites. Although we try to link only to websites that also have high privacy standards, we are not responsible for their security, privacy practices or content. We recommend that you always read the privacy and security statements on these websites.


Monitoring of electronic communications

We communicate with you through different methods and Channels. Where permitted by law, we may record and monitor electronic communications to make sure that we comply with legal and regulatory responsibilities and internal policies.


Monitoring and analysis

We will monitor and analyse your account for credit, fraud, compliance and other risk-related purposes as required by law. However, you may not be subject to a decision which results in legal consequences for you or which affects you to a great degree, which is based only on the automated processing of personal information.


Social media

We operate and communicate through our designated profiles, pages and accounts on some social media sites (such as Facebook and Twitter) to inform, help and engage with our clients. We monitor and record comments and posts made about us on these channels so that we can improve our services.

The general public can access, read, share, and comment on any information posted on these sites. We are not responsible for any information posted on those sites, except for the information posted by our designated officials. We do not endorse the social media sites themselves nor any information posted on them by third parties or other users.

We do not give investment, tax or other professional advice on social media sites. You should always get independent advice before making any decisions.

When you engage with us through social media your personal information may be processed by the site owner. This process is outside our control and may be in a country outside South Africa that may have different privacy principles. For more information about the privacy practices of a social media site, please refer to and read the terms and conditions of that site.

Social media sites are not appropriate forums to discuss our clients' products or financial arrangements. We will not ask you to share personal, account or security information on social media sites in a public post. We may ask you to message us in private through one of our official accounts, profiles or pages on a social media site.

We regularly update and monitor our social media presence and welcome feedback and ideas sent to us through these channels. We try to join conversations whenever possible but cannot guarantee that we will read or reply to all messages sent to official Standard Bank social media accounts. Emerging themes and helpful suggestions will be given to the relevant people within the Standard Bank Group for consideration but we cannot guarantee that any themes or suggestions will be acted on.


Your Rights 

We want to ensure that you are aware of your rights in relation to the personal information that we process about you.

  1. Right to access - You have a right to get access to the personal information that we hold about you. If you would like a record or description of the personal information that we hold about you, please request this through 1. our customer service channels. OR 2. the [email protected] We may, if allowed by law, charge a fee for this.
  2. Right to rectify/correct/ update - You have a right to correct inaccurate personal information and to update incomplete personal information. Please request this through 1. Our customer service channels. OR 2. the [email protected] to exercise your rights.
  3. Right to be notified – You have the right to be notified that your personal information is being collected by us or has been accessed or acquired by an unauthorised person.
  4. Right to object - You have a right to object to us processing your personal information where we have relied on one of the lawful grounds above for legitimate interest or where we perform a public law duty (and to request us to restrict processing). Please note that if you request us to restrict processing your personal information, we may have to stop or suspend the operation of your account or the products and services we provide to you. Please note that where the law permits us to process your personal information, we will have a legal obligation to do so. Please request this through 1. Our customer service channels. OR 2. the [email protected] to exercise your rights.
  5. Right to deletion - You have a right to request that we delete your personal information. Please request this through 1. Our customer service channels. OR 2. the [email protected]to exercise your rights.
  6. Right to object to the processing of personal information for the purposes of direct marketing - You have a right to object at any time to the processing of your personal information for direct marketing purposes, including profiling you for the purposes of direct marketing. Please request this through 1. our customer service channels. OR 2. the [email protected] to exercise your rights.
  7. Right not to be subject, under certain circumstances, to automated-decision-making processes. You have rights in relation to automated decision-making, including a right to appeal if your application is refused. You can exercise your right by submitting your request to [email protected]
  8. Right to lodge a complaint with the Regulator. If you wish to raise a complaint on how we have handled your personal information, you can contact our Deputy Information Officer who will investigate the matter. We hope that we can address any concerns you may have.


Queries and complaints

If you have any queries or complaints about privacy, please contact the Group Privacy Officer:

Melindie Esterhuyse 
Deputy Information Officer
The Standard Bank of South Africa Limited
P O Box 1155
Johannesburg
2000

Physical address:
Standard Bank Centre
5 Simmonds Street
Johannesburg
2001
Telephone: +27 11 636 7385
Email:  [email protected]


Right to change this privacy statement

We may change this privacy statement from time to time. We will publish all changes on our website. The latest version of our privacy statement will replace all earlier versions, unless it says differently.

* Standard Bank Group subsidiaries and their subsidiaries: Diners Club (S.A.) (Pty) Ltd, Standard Bank Financial Services Holdings (Pty) Ltd, Standard Offshore Finance Company (Pty) Ltd, Melville Douglas Investment Management (Pty) Ltd, FHPManagers (Pty) Ltd, Standard Trust Limited, Standard Insurance Limited, Stanhold Investments (Pty) Ltd, Greenfield Newgate (Pty) Ltd, The Unisec Group Limited, Standard Bank Properties (Pty) Ltd, Blue Waves Properties 78 (Pty) Ltd, SBG Securities (Pty) Ltd.

Regulatory

Version: 3
Date published: 17 June 2021
Standard Bank Group Privacy Statement