Privacy statement
The Standard Bank of South Africa Limited, its successors and assigns Privacy Statement *
The Standard Bank of South Africa Limited, its successors and assigns (the Bank, we, us, our) treat the personal information we collect through our Channels (this website, associated websites, mobile sites, mobile applications and other channels) as private and confidential. This Privacy Statement and our Cookie Notice applies when you use our Channels.
1. Lawful processing of personal information
The Standard Bank of South Africa Limited is committed to processing personal information in keeping with its responsibilities under the applicable data protection laws.
The following conditions of lawful processing of personal information are the principles in terms of which we will be processing the collected personal information. They are:
- Accountability – the Bank as the responsible party and through its employees will make sure that personal information is processed in a lawful and responsible manner.
- Processing limitation – we shall lawfully collect personal information for a defined purpose and where applicable, with the consent of our clients and third parties.
- Purpose specification – we will only use personal information for the purposes that our clients, third parties and employees expect us to use it for. Further processing limitation – where a processing activity is seen as further processing (means a new purpose for processing personal information) and this new purpose is inconsistent with the original purpose (original reason we collected personal information), we will make sure that our processing activities meet the requirements of the applicable data protection laws.
- Information quality – we will take reasonable steps to ensure your personal information is accurate, complete and updated and not misleading.
- Openness – from the start, we will be open, clear and honest with our clients, third parties and employees on how and why we use their personal information and how we protect their personal information.
- Security safeguards – we will apply and follow appropriate and reasonable technical and organisational measures to make sure that the confidentiality, integrity and availability of personal information are secured. These measures will also be applied to protect personal information against loss, damage, unauthorised destruction or unlawful access.
- Data subject participation – we have processes in place for our clients, third parties and employees to access, correct and delete personal information and exercise their rights in terms of applicable data protection laws.
2. Collection
We collect and process the following categories and types of personal information through the relevant Channels, including:
- personal details (this can be your name, age, passport information, biometric information, information about personal interests);
- contact details (this can be your mobile number and email address);
- details related to a client (this can be the business contact details of an agent or representative, relationship with the client or related parties, shareholder information); and
- transactional details (this can be information about products, services, requests, queries or complaints).
We will collect personal information in the following ways:
- directly from you, and
- where lawful and reasonable, from third parties and public sources. This includes credit reporting and government agencies.
3. If you decide to give us express consent, we will use your personal information to:
- Meet our responsibilities to you.
- Process your personal information for ordinary business purposes (this includes to open and maintain your account, execute transactions, administer claims where applicable, manage our risks and maintain our overall relationship with you).
- Carry out statistical and other analyses to identify potential markets and trends, evaluate and improve our business (this includes improving existing and developing new products and services). Consent will not be obtained if we anonymise/de-identify the personal information.
- Tell you about similar services and products available within The Standard Bank of South Africa, Standard Bank Group or partner services and products. If you wish, you may opt out from receiving such information at any time by choosing the “Unsubscribe” option provided in every communication that we send to you.
- Comply with applicable laws and regulations.
The Standard Bank of South Africa Limited will not intentionally or knowingly collect personal information directly from minors (anyone under the age of 18). The personal information of minors will be collected through their legal guardian or parent only where products or services are obtained for the minors.
Standard Bank will only use and share your personal information where it is necessary for us to carry out our lawful business activities. To enable you to fully understand the way in which we process your personal information, we have described the different lawful grounds for such processing in detail below:
- Consent – We may process your personal information for a specific and explicitly defined purpose where you, or a competent person in the case of personal information relating to a minor, provide us with your express consent for such processing or where law requires.
- Contractual need - We may process your personal information where it is necessary to enter into a contract with you in order for us to provide our products or services to you or to perform our obligations under that contract. Please note that if you do not agree to provide us with the requested personal information, it may not be possible for us to continue to operate your account or provide services to you.
- Compliance with an obligation imposed by law- When you apply for a product or service, we are required by law to collect and process certain personal information about you. Please note that if you do not agree to provide us with the requested personal information, it may not be possible for us to continue to operate your account or provide services to you.
- Legitimate interests of the Bank - We may process your personal information where it is in our legal interests to do so as an organisation and without harming your interests or fundamental rights and freedoms (for example, for marketing purposes, site maintenance, etc.).
When can we process or share your personal information?
We will process your personal information if you give us your consent willingly or according to the grounds of lawful processing highlighted above. If we need your consent, we will notify you through our product and services agreements or application processes through our various authorised Channels.
We will only share your personal information if:
- the law requires it;
- we have a public duty to share the personal information;
- our or your legitimate interests require us to share the personal information;
- it is necessary to conclude or perform due to an agreement between you and us; or
- you agreed that we may share your personal information.
Personal Information sharing and data transfers
- We will not share your personal information to external organisations that are not our service providers, unless business operations require the processing of your personal information in other countries, either to carry out processing based on your instructions or for ordinary business purposes. As specified by the above purposes, we may share your personal information with any of the parties mentioned below, located in any jurisdiction: Any member of Standard Bank Group.
- Professional advisers like auditors, third-party vendors, or independent contractors who process personal information on behalf of Standard Bank to support our business.
- Our business partners who provide their products and services to you.
- An employee of a card distributor or vendor where the personal information is shared in connection with the use of a card.
- Any individual who needs your personal information due to foreign or local law or regulation.
- Any court of justice, regulatory body, taxation authority (including any authority investigating an offence) or their agents.
- Any debt collection agency, credit bureau, insurer or broker, direct or indirect provider of credit protection and fraud prevention agencies.
- Any financial institution to conduct credit checks, anti-money laundering related checks, for fraud prevention and detection of crime purposes for the group.
The third party, who is located outside of South Africa and receives the personal information, will need to comply to either a law, or binding corporate rules or a binding agreement which states that they will provide an adequate level of protection to your personal information. This means that they have to agree to lawfully process your personal information and protect your personal in the same manner as we do.
The transfer of your personal information will be based one of the following conditions:
- You provide your consent to the transfer.
- The transfer is necessary for the conclusion or performance of a contract to which you are a party.
- The transfer is for your benefit, and it is not reasonably practical to obtain your consent to that transfer; and if it were reasonably practicable to obtain such consent, you would be likely to give it.
Storing personal information
We will store and keep your personal information according to the retention (holding) periods defined by law for legitimate business purposes and will take reasonably practicable steps to make sure that it is kept up to date and deleted and archived according to our defined retention schedules.
Our security practices
The security of your personal information is important to us. We have implemented appropriate and reasonable technical and organisational measures to prevent loss, unauthorised destruction, damage or access to your personal information by unauthorised third parties. The security of your personal information is important to us. We make sure that we implement organisational and technical procedures to keep your personal information safe.
However, you must not share or send us any personal information over unauthorised channels, since it is not a secure way of communication and carries a risk of interception and unauthorised access. You should only share personal information over authorised channels of Standard Bank of South Africa Limited.
Marketing by electronic means
We would like to share information about our own products, services and special offers that are similar to the products or services used by you, via your preferred method of communication (as indicated to us), such as email, text message, social media platforms or notification on your mobile application. Subject to your express consent and the option to opt-out or unsubscribe at any time, we may also share information with you about similar products, services and special offers of our partner companies. If you have opted-in to receive marketing communications, you may always opt out at a later stage using the link shared below or clicking on the “Unsubscribe” option included in every marketing communication sent to you. You have the right at any time to stop us from contacting you for marketing purposes or giving your data to other members of Standard Bank Group. If you no longer wish to be contacted for marketing purposes, please request for us to mark you as ‘No’ to Marketing by visiting any branch, calling us on 0860 123 000 or emailing us on [email protected].
Use of Cookies on our website
A “cookie” is a small text file that is stored on your computer, smartphone, tablet, or other device when you visit a website or use an app. They contain specific information related to your use of our website or app, such as login credentials, your preference settings or tracking identifiers. Cookies make it easier for us to give you a better experience online. For all optional types of cookies, we will obtain your consent before these cookies can be used or stored on your device.
For this reason, we limit our use of cookies as explained below to:
- provide products and services that you request;
- deliver advertising via marketing communications;
- provide you a better online experience and track website performance; and
- help us make our website more relevant to you.
Types of cookies used on our website:
Strictly necessary cookies – These cookies are required for the effective operation of our website on your system. These are necessary for the website to function, meaning that the collection of information via these cookies cannot be switched off.
Cookie name | Cookie description and purpose | Expiry |
---|---|---|
_cfduid | Used by third-party content network, Cloudflare, to identify trusted web traffic | 29 days |
at_check | This cookie determines whether the browser accepts cookies. | Session |
BIGipServer# | Used to distribute traffic to the website on several servers in order to optimise response times. | Session |
com.adobe.reactor.data ElementCookiesMigrated |
Used in context with the cache-function on the website, facilitating data transfer between Adobe DTM onto Adobe Launch. | Persistent |
CONSENT | Used to detect if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for GDPR-compliance of the website. | 6084 days |
CookieConsent | Stores the user's cookie consent state for the current domain. | 1 year |
gdpr_status | Determines whether the visitor has accepted the cookie consent box. This ensures that the cookie consent box will not be presented again when re-entering. | 6 months |
JSESSIONID | Preserves user’s states across page requests. /td> | Session |
rc::a | This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to draw up valid reports on the use of their website. | Persistent |
rc::c | This cookie is used to distinguish between humans and bots. | Session |
SERVERID | This cookie is used to assign the visitor to a specific server - this function is needed for the website to function. | 1 day |
test | Used to detect if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for GDPR-compliance of the website. | Session |
Strictly necessary cookies – These cookies are required for the effective operation of our website on your system. These are necessary for the website to function, meaning that the collection of information via these cookies cannot be switched off.
Cookie name | Cookie description and purpose | Expiry |
---|---|---|
Remembers the language a user has selected in a specific website. | Session |
Statistic cookies help website owners understand how visitors interact with websites by collecting and reporting information anonymously.
Cookie name | Cookie description and purpose | Expiry |
---|---|---|
AMCV_# | Unique user ID that recognises the user on returning visits. | 2 years |
AnalyticsSynHistory | Used in connection with data-synchronisation with third-party analysis service. | 29 days |
bounce | Determines if a user leaves the website straight away. This information is used for internal statistics and analytics by the website operator. | Session |
cksync.php | This cookie is used to determine if cookie data synchronisation is enabled or disabled – cookie data synchronisation is used to synchronise and gather visitor data on several domains. | Session |
cksyn.php | This cookie is used to determine if cookie data synchronisation is enabled or disabled – cookie data synchronisation is used to synchronise and gather visitor data on several domains. | Session |
dextp | This cookie is set by the audience manager of the website to determine the time and frequencies of visitor data synchronisation - cookie data synchronisation is used to synchronise and gather visitor data from several websites. | 179 days |
gpv_pn | Registers statistical data on users' behaviour on the website. Used for internal analytics by the website operator. | 1 day |
s_cc | Used to check if the user's browser supports cookies. | Session |
s_invisit | Collects statistics on the visitors visits to the website, such as the number of visits, average time spent on the website and what pages have been read. | 1 day |
s_nr | Registers a unique ID that identifies the user's device for return visits | 29 days |
s_ppv | Saves information on what vertical percentage of a page has been displayed to the user. | Session |
s_ppvl | This cookie is used to collect information on the user. This information will be stored for internal analytics at the website's operator. Internal analytics is used by websites to optimise their domains. | Session |
s_vnum | Registers how the user has reached the website. | 26 Days |
visitor-id | This cookie is used to collect information on the visitor. This information will be stored for internal analytics at the website's operator. Internal analytics is used by websites to optimise their domains. | 1 year |
Marketing cookies are used to track visitors across websites. The intention is to display advertisements that are relevant and engaging for the individual user and thereby more valuable for publishers and third-party advertisers.
Cookie name | Cookie description and purpose | Expiry |
---|---|---|
_cc_aud | Cookie description and purpose Collects statistical data related to the user's website visits, such as the number of visits, average time spent on the website and what pages have been loaded. The purpose is to split the website's users according to factors such as demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups for customised online advertising. | 269 days |
_cc_cc | Collects statistical data related to the user's website visits, such as the number of visits, average time spent on the website and what pages have been loaded. The purpose is to split the website's users according to factors such as demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups for customised online advertising. | Session |
_cc_dc | Collects statistical data related to the user's website visits, such as the number of visits, average time spent on the website and what pages have been loaded. The purpose is to split the website's users according to factors such as demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups for customised online advertising. | 269 days |
_fbp | Used by Facebook to deliver a series of advertisement products like real-time bidding from third-party advertisers. | 3 months |
_gcl_au | Used by Google AdSense for experimenting with advertisement efficiency across websites using their services. | 3 months |
_gcl_aw | Used to measure the efficiency of the website’s advertisement efforts, by collecting data on the conversion rate of the website’s ads across multiple websites. | 3 months |
_kg | Presents the user with relevant content and advertisement. The service is provided by third-party advertisement hubs, which facilitate real-time bidding for advertisers. | Persistent |
_kuid_ | Registers a unique ID that identifies a returning user's device. The ID is used for targeted ads. | 179 days |
A3 | Collects information on user behaviour on multiple websites. This information is used to optimise the relevance of advertisement on the website. | 1 year |
adscores/g.pixel | Presents the user with relevant content and advertisement. The service is provided by third-party advertisement hubs, which facilitate real-time bidding for advertisers. | Session |
anj | Registers a unique ID that identifies a returning user's device. The ID is used for targeted ads. | 3 months |
audience | Used to determine whether the video-ads have been displayed correctly on the website. This is done to make video-ads more effective and ensure that the visitor is not shown the same ads more times than intended. The cookie also detects whether the visitor has any Do not track preferences. | 1 year |
bcookie | Used by the social networking service, LinkedIn, for tracking the use of embedded services. | 2 years |
bkdc | Registers user data, such as IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. | 179 days |
bkpa | Presents the user with relevant content and advertisement. The service is provided by third-party advertisement hubs, which facilitate real-time bidding for advertisers. | 179 days |
bku | Registers anonymised user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. | 179 days |
bscookie | Used by the social networking service, LinkedIn, for tracking the use of embedded services | 2 years |
c | Regulates synchronisation of user identification and exchange of user data between various ad services. | 1 year |
cm | Identifies if the cookie-data needs to be updated in the visitor's browser - This is determined through third-party a d-serving-companies. | Session |
CMID | Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads. | 1 year |
CMPRO | Collects data on visitor behaviour from multiple websites, in order to present more relevant advertisement. This also allows the website to limit the number of times that they are shown the same advertisement. | 3 months |
CMPS | Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads. | 3 months |
CMRUM3 | Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads | 1 year |
CMST | Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads. | 1 day |
data-rk | Collects data on visitor behaviour from multiple websites, in order to present more relevant advertisement. This also allows the website to limit the number of times that they are shown the same advertisement. | 1 year |
demdex | The user’s navigation on the website is registered and linked to offline data from surveys and similar registrations to display targeted ads. This is done with a unique ID used for semantic content analysis. | 179 days |
dpm | Sets a unique ID for the visitor that allows third-party advertisers to target the visitor with relevant advertisement. This pairing service is provided by third-party advertisement hubs, which facilitates real-time bidding for advertisers. | 179 days |
e/rocketfuel_sync | Detects whether partner data synchronisation is functioning and currently running. This function sends user data between third-party advertisement companies for the purpose of targeted advertisements. | Session |
eud | Registers user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. | 1 year |
euds | Registers anonymised user data, such as IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. | 1 year |
ev_sync_ax | Collects information on user preferences or interaction with web-campaign content. This is used on CRM-campaign-platforms used by website owners for promoting events or products. | 30 days |
ev_sync_yh | This cookie is set by the audience manager of the website to determine the time and frequencies of visitor data synchronisation. Cookie data synchronisation is used to synchronise and gather | 30 days |
everest_g_v2 | Used for targeted ads and to document efficacy of each individual ad. | 1 year |
everest_session_v2 | Used for targeted ads and to document efficacy of each ad. | Session |
fr | Used by Facebook to deliver a series of advertisement products like real-time bidding from third-party advertisers./td> | 3 months |
IDE | Used by Google DoubleClick to register and report the website user's actions after viewing or clicking one of the advertiser's ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user. | 1 year |
kg | Presents the user with relevant content and advertisement. The service is provided by third-party advertisement hubs, which facilitate real-time bidding. | Persistent |
krux_views | Used to track users on multiple websites, in order to present relevant advertisement based on the user's preferences. | Session |
lang | Set by LinkedIn when a web page contains an embedded Follow us panel. | Session |
lidc | Used by LinkedIn to track the use of embedded services. | 1 day |
mako_uid | Collects data on user visits to the website, like what pages have been accessed. The registered data is used to categorise the user's interest and demographic profiles in terms of resales for targeted marketing. | 1 year |
match/bounce | Used to track users on multiple websites, in order to present relevant advertisement based on the user's preferences. | Session |
mbox | This cookie is used to collect non-personal information on the user’s behaviour and non-personal user statistics, which can be used by a third-party ad-targeting agency. | 1 day |
p2 | Registers user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. | Session |
pagead/1p-user-list/# | Tracks if the user has shown interest in specific products or events across multiple websites and detects how the user navigates between sites. This is used for measurement of advertisement efforts and facilitates payment of referral-fees between websites. | Session |
pagead/landing | Collects data on visitor behaviour from multiple websites, in order to present more relevant advertisements. This allows the website to limit the number of times that they are shown the same advertisement. | Session |
partner | Used in context with video-advertisement. The cookie limits the number of times a user is shown the same advertisement. The cookie is also used to ensure relevance of the video-advertisement to the specific user. | Session |
pxrc | This cookie registers data on the visitor. The information is used to optimise advertisement relevance. | 2 months |
r1 | Collects data related to the user's navigation visits to webpages in order to assess the efficacy of ads that are displayed on the website. | Session |
rlas3 | Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads. | 1 year |
rud | Registers user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. | 1 year |
ruds | Registers user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. | Session |
RUL | Used by DoubleClick to determine whether website advertisement has been properly displayed. This is done to make their marketing efforts more efficient. | 1 year |
Rum | Collects data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads. | Session |
sd-session-id | Registers data on visitors from multiple visits and on multiple websites. This information is used to measure the efficiency of advertisement on websites. | 179 days |
smd | Presents the user with relevant content and advertisement. The service is provided by third-party advertisement hubs, which facilitate real-time bidding for advertisers. | 1 year |
sync | Collects data on user behaviour and interaction to optimise the website and make advertisement on the website more relevant. | Session |
test_cookie | Used to check if the user's browser supports cookies. | 1 day |
tr | Used by Facebook to deliver a series of advertisement products like real-time bidding from third-party advertisers. | Session |
tuuid | Contains a unique visitor ID, which allows Bidswitch.com to track the visitor across multiple websites. This allows Bidswitch to optimise advertisement relevance and ensure that the visitor does not see the same ads multiple times. | Session |
u2 | Collects data related to the user's navigation visits to webpages in order to assess the efficacy of ads that are displayed on the website. | 3 months |
uid | Collects user data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.; | 1 year |
UID | Collects information of the user and his/her movement, like timestamps for visits, most recently loaded pages and IP address. The data is used by the marketing research network, Scorecard Research, to analyse traffic patterns and carry out surveys to help their clients better understand the customer's preferences. | 2 years |
ul_cb/sync | Collects information on user behaviour on multiple websites. This information is used in order to optimise the relevance of advertisement on the website. | 3 months |
um2 | Sets a unique ID for the visitor, that allows third-party advertisers to target the visitor with relevant advertisement. This pairing service is provided by third-party advertisement hubs, which facilitates real-time bidding for advertisers. | 3 months |
UserMatchHistory | Used to track visitors on multiple websites, in order to present relevant advertisement based on the visitor's preferences. | 29 days |
uuid2 | Registers a unique ID that identifies a returning user's device. The ID is used for targeted ads. | 3 months |
VISITOR_INFO1_LIVE | Tries to estimate the users' bandwidth on pages with integrated YouTube videos. | 179 days |
YSC | Registers a unique ID to keep statistics of what YouTube videos the user has viewed. | Session |
yt.innertube::nextId | Registers a unique ID to keep statistics of what YouTube videos the user has viewed. | Persistent |
yt.innertube: requests | Registers a unique ID to keep statistics of what YouTube videos the user has viewed. | Persistent |
yt-remote-cast-installed | Stores the user's video player preferences using embedded YouTube video. | Session |
: yt-remote-connected-devices | Stores the user's video player preferences using embedded YouTube video. | Persistent |
yt-remote-device-id | Stores the user's video player preferences using embedded YouTube video. | Persistent |
yt-remote-fast-check-period/td> | Stores the user's video player preferences using embedded YouTube video. | Session |
yt-remote-session-app | Stores the user's video player preferences using embedded YouTube video. | Session |
yt-remote-session-name | Stores the user's video player preferences using embedded YouTube video. | Session |
zync-uuid | Sets a unique ID for the visitor, that allows third-party advertisers to target the visitor with relevant advertisement. This pairing service is provided by third-party advertisement hubs, which facilitates real-time bidding for advertisers. | 179 days |
s_campaign | Used by Adobe Analytics to monitor tracking codes or campaign codes used in marketing efforts. | Session |
s_intcampaign | Used by Adobe Analytics to monitor tracking codes or campaign codes used in internal campaign marketing efforts. | Session |
_kxstandardbanksa_e_L8nae7l9 | Relates to a given marketing event (i.e. form submit). | Persistent |
_kxstandardbanksa_event3p | Relates to a given marketing event (i.e. form submit).; | Persistent |
_kxstandardbanksa_geo | Contains browser geographic data. | Persistent |
_kxstandardbanksa_kuid | Contains audience studio pseudonymous user ID. | Persistent |
_kxstandardbanksa_user | Contains audience studio pseudonymous user ID. | Persistent |
_kxstandardbanksa_visits | Contains audience studio pseudonymous visitor ID. | Persistent |
kxstandardbanksa_whistle | Signals if a user has an adblocker. | Persistent |
Optional cookies
Session cookies - These cookies are temporary and only exist while you browse our website. As soon as you close your browser or move to a different website, they are removed. They allow our website to link your actions during a browser session.
Persistent cookies - These are permanent cookies that are stored on your device until they reach a set expiry date or until you delete them. They remember your preferences or actions across our site (or in some cases across different websites). We may use them for various reasons, such as remembering your preferences and choices when using our site, or to display only relevant advertising messages to you.
First-party cookies – We own and create these cookies. Third-party cookies - These cookies are owned and created by another company that provides a service to us, such as social media sharing, website analytics or content marketing.
How to disable cookies
You can stop your browser from accepting cookies by changing the settings on your web browser. Please note that restricting cookies may impact the functionality of our websites. We recommend that you allow cookies, to enable the efficient and proper functioning of the website. Explore the settings and options on your browser to disable or enable them, or visit https://www.aboutcookies.org for detailed information about managing cookies on different browsers.
Links to other websites
Our website, related websites and mobile applications may have links to or from other websites. Although we try to link only to websites that also have high privacy standards, we are not responsible for their security, privacy practices or content. We recommend that you always read the privacy and security statements on these websites.
Monitoring of electronic communications
We communicate with you through different methods and Channels. Where permitted by law, we may record and monitor electronic communications to make sure that we comply with legal and regulatory responsibilities and internal policies.
Monitoring and analysis
We will monitor and analyse your account for credit, fraud, compliance and other risk-related purposes as required by law. However, you may not be subject to a decision which results in legal consequences for you or which affects you to a great degree, which is based only on the automated processing of personal information.
Social media
We operate and communicate through our designated profiles, pages and accounts on some social media sites (such as Facebook and Twitter) to inform, help and engage with our clients. We monitor and record comments and posts made about us on these channels so that we can improve our services.
The general public can access, read, share, and comment on any information posted on these sites. We are not responsible for any information posted on those sites, except for the information posted by our designated officials. We do not endorse the social media sites themselves nor any information posted on them by third parties or other users.
We do not give investment, tax or other professional advice on social media sites. You should always get independent advice before making any decisions.
When you engage with us through social media your personal information may be processed by the site owner. This process is outside our control and may be in a country outside South Africa that may have different privacy principles. For more information about the privacy practices of a social media site, please refer to and read the terms and conditions of that site.
Social media sites are not appropriate forums to discuss our clients' products or financial arrangements. We will not ask you to share personal, account or security information on social media sites in a public post. We may ask you to message us in private through one of our official accounts, profiles or pages on a social media site.
We regularly update and monitor our social media presence and welcome feedback and ideas sent to us through these channels. We try to join conversations whenever possible but cannot guarantee that we will read or reply to all messages sent to official Standard Bank social media accounts. Emerging themes and helpful suggestions will be given to the relevant people within the Standard Bank Group for consideration but we cannot guarantee that any themes or suggestions will be acted on.
Your Rights
We want to ensure that you are aware of your rights in relation to the personal information that we process about you.
- Right to access - You have a right to get access to the personal information that we hold about you. If you would like a record or description of the personal information that we hold about you, please request this through 1. our customer service channels. OR 2. the [email protected] We may, if allowed by law, charge a fee for this.
- Right to rectify/correct/ update - You have a right to correct inaccurate personal information and to update incomplete personal information. Please request this through 1. Our customer service channels. OR 2. the [email protected] to exercise your rights.
- Right to be notified – You have the right to be notified that your personal information is being collected by us or has been accessed or acquired by an unauthorised person.
- Right to object - You have a right to object to us processing your personal information where we have relied on one of the lawful grounds above for legitimate interest or where we perform a public law duty (and to request us to restrict processing). Please note that if you request us to restrict processing your personal information, we may have to stop or suspend the operation of your account or the products and services we provide to you. Please note that where the law permits us to process your personal information, we will have a legal obligation to do so. Please request this through 1. Our customer service channels. OR 2. the [email protected] to exercise your rights.
- Right to deletion - You have a right to request that we delete your personal information. Please request this through 1. Our customer service channels. OR 2. the [email protected]to exercise your rights.
- Right to object to the processing of personal information for the purposes of direct marketing - You have a right to object at any time to the processing of your personal information for direct marketing purposes, including profiling you for the purposes of direct marketing. Please request this through 1. our customer service channels. OR 2. the [email protected] to exercise your rights.
- Right not to be subject, under certain circumstances, to automated-decision-making processes. You have rights in relation to automated decision-making, including a right to appeal if your application is refused. You can exercise your right by submitting your request to [email protected]
- Right to lodge a complaint with the Regulator. If you wish to raise a complaint on how we have handled your personal information, you can contact our Deputy Information Officer who will investigate the matter. We hope that we can address any concerns you may have.
Queries and complaints
If you have any queries or complaints about data privacy, please contact the below:
Susan Moloisane
Deputy Information Officer
The Standard Bank of South Africa Limited
P O Box 1155
Johannesburg
2000
Physical address:
Standard Bank Centre
5 Simmonds Street
Johannesburg
2001
Telephone: +27 11 636 7675
Email: [email protected]
Right to change this privacy statement
We may change this privacy statement from time to time. We will publish all changes on our website. The latest version of our privacy statement will replace all earlier versions, unless it says differently.
* Standard Bank Group subsidiaries and their subsidiaries: Diners Club (S.A.) (Pty) Ltd, Standard Bank Financial Services Holdings (Pty) Ltd, Standard Offshore Finance Company (Pty) Ltd, Melville Douglas Investment Management (Pty) Ltd, FHPManagers (Pty) Ltd, Standard Trust Limited, Standard Insurance Limited, Stanhold Investments (Pty) Ltd, Greenfield Newgate (Pty) Ltd, The Unisec Group Limited, Standard Bank Properties (Pty) Ltd, Blue Waves Properties 78 (Pty) Ltd, SBG Securities (Pty) Ltd.
Regulatory
Version: 3
Date published: 17 June 2021
Standard Bank Group Privacy Statement