Privacy Statement
Your privacy is important to us and we know that you are concerned about how we use your personal information. Standard Bank Group Limited, its subsidiaries and their subsidiaries* (Group, we, us, our) collect and process your personal information according to the data protection principles set out below. Reference to personal information means any information which identifies you, and includes information such as your name/s, email address, telephone number, biometric information and password, as well as any other personal information collected. This Privacy Statement and our Cookie Notice applies when you use our Channels (this website, associated websites, mobile sites, mobile applications and other channels).
These principles are in line with our Code of Ethics and comply with applicable laws, rules and standards.
- We maintain and continuously improve our data privacy culture by providing training and awareness sessions for all employees, and where relevant, for third-party service providers.
- All employees are made aware of their responsibilities in terms of laws and internal rules that apply to protecting personal information.
- We promote the protection of personal information by ensuring that we comply with applicable laws, rules and standards when processing your personal information.
- We will be transparent in our dealings with you and will tell you how we collect and use your personal information. These practices can be found in our privacy statements and all our products and services agreements.
- We rely on lawful grounds with respect to the collection, use, and sharing of personal information and collect personal information only for the purposes identified in our privacy statements and all our products and services agreements. Lawful grounds include consent (when needed we may ask for consent), contract (where processing is necessary for the performance of a contract with you for example, to deliver the products or services you have requested) and for the purposes of our legitimate interests (to manage corporate transactions, such as mergers or acquisitions) or your legitimate interests (to protect you or others from threats such as security threats or fraud) or for the legitimate interests of third parties.
- When you use our Channels, we collect your personal information through cookies enabled on these channels. A “cookie” is a small text file that is stored on your computer, smartphone, tablet, or other device when you visit a website or use an app. They contain specific information relating to your use of our website or app, such as login credentials; your preference settings or tracking identifiers. Cookies make it easier for us to give you a better experience online. For all optional types of cookies, we will obtain your consent before these cookies can be used or stored on your device.
For this reason, we limit our use of cookies as explained below to:
- provide products and services that you request;
- deliver advertising via marketing communications;
- provide you a better personalised online experience and track website performance; and
- help us make our website more relevant to you.
Types of cookies used on our Channels
Mandatory cookies
Strictly necessary cookies – These cookies are required for the effective operation of our website on your system. These are necessary for the website to function and the collection of information through these cookies cannot be switched off.
Cookie name | Cookie description and purpose | Expiry |
---|---|---|
_cfduid | Used by third-party content network, Cloudflare, to identify trusted web traffic. | 29 days |
at_check |
This cookie determines whether the browser accepts cookies. |
Session |
BIGipServer# | Used to distribute traffic to the website on several servers in order to optimise response times. | Session |
com.adobe.reactor.data ElementCookiesMigrated |
Used in context with the cache-function on the website, facilitating data transfer between Adobe DTM onto Adobe Launch. | Persistent |
CookieConsent | Stores the user's cookie consent state for the current domain. | 1 year |
ddpr_status | Determines whether the visitor has accepted the cookie consent box. This ensures that the cookie consent box will not be presented again upon re-entry. | 6 months |
SERVERID | This cookie is used to assign the visitor to a specific server. This function is necessary for the functionality of the website. | 1 day |
test | Used to detect if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for GDPR-compliance of the website. | Session |
Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.
Cookie Name |
Cookie description and purpose |
Expiry |
AMCV_#
|
Unique user ID that recognises the user on returning visits.
|
2 years
|
dextp |
This cookie is set by the audience manager of the website to determine the time and frequencies of visitor data synchronisation - cookie data synchronisation is used to synchronise and gather visitor data from several websites. |
179 days |
gpv_pn |
Registers statistical data on users' behaviour on the website. Used for internal analytics by the website operator. |
1 day |
s_cc |
Used to check if the user's browser supports cookies. |
Session |
s_invisit |
Collects statistics on the visitor’s visits to the website, like the number of visits, average time spent on the website and what pages have been read. |
1 day |
s_nr |
Registers a unique ID that identifies the user's device for return visits |
29 days |
s_ppv |
Saves information on what vertical percentage of a page has been displayed to the user.
|
Session
|
s_ppvl |
This cookie is used to collect information on the visitor. This information will be stored for internal analytics at the website's operator. Internal analytics is used by websites to optimise their domains. |
Session |
s_vnum |
Registers how the user has reached the website. |
26 Days |
visitor-id |
This cookie is used to collect information on the visitor. This information will be stored for internal analytics at the website's operator. Internal analytics is used by websites to optimise their domains. |
1 year |
Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third-party advertisers.
Cookie Name |
Cookie description and purpose |
Expiry |
---|---|---|
_cc_aud |
Collects statistical data related to the user's website visits, like the number of visits, average time spent on the website and what pages have been loaded. The purpose is to split the website's users according to factors like demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups to enable customised online advertising. |
269 days |
_cc_cc |
Collects statistical data related to the user's website visits, like the number of visits, average time spent on the website and what pages have been loaded. The purpose is to split the website's users according to factors like demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups to enable customised online advertising. |
Session |
_cc_dc |
Collects statistical data related to the user's website visits, like the number of visits, average time spent on the website and what pages have been loaded. The purpose is to split the website's users according to factors like demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups to enable customised online advertising. |
269 days |
_cc_id |
Collects statistical data related to the user's website visits, like the number of visits, average time spent on the website and what pages have been loaded. The purpose is to split the website's users according to factors like demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups to enable customised online advertising.
|
269 days |
_fbp |
Used by Facebook to deliver a series of advertisement products like real time bidding from third party advertisers. |
3 months |
_gcl_au |
Used by Google AdSense for experimenting with advertisement efficiency across websites using their services. |
3 months |
_kg |
Presents the user with relevant content and advertisements. The service is provided by third-party advertisement hubs, which facilitate real-time bidding for advertisers.
|
Persistent |
_kuid_ |
Registers a unique ID that identifies a returning user's device. The ID is used for targeted ads. |
179 days |
A3 |
Collects information on user behaviour on multiple websites. This information is used in order to optimise the relevance of advertisement on the website. |
1 year |
anj |
Registers a unique ID that identifies a returning user's device. The ID is used for targeted ads. |
3 months |
audience |
Used to determine whether the video-ads have been displayed correctly on the website - This is done to make video-ads more effective and ensure that the visitor is not shown the same ads more times than intended. The cookie also detects whether the visitor has any Do not track preferences. |
1 year |
bkdc |
Registers user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. |
179 days |
bkpa
|
Presents the user with relevant content and advertisement. The service is provided by third-party advertisement hubs, which facilitate real-time bidding for advertisers. |
179 days |
bku |
Registers anonymised user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. |
179 days |
c |
Regulates synchronisation of user identification and exchange of user data between various ad services. |
1 year |
CMID |
Collects user data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads. |
1 year |
CMPRO |
Collects data on visitor behaviour from multiple websites, in order to present more relevant advertisement. This also allows the website to limit the number of times that they are shown the same advertisement. |
3 months |
CMPS |
Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads. |
3 months |
CMRUM3 |
Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads. |
1 year |
CMST |
Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads. |
1 day |
data-rk |
Collects data on visitor behaviour from multiple websites, in order to present more relevant advertisement. This also allows the website to limit the number of times that they are shown the same advertisement. |
1 year |
demdex |
Via a unique ID that is used for semantic content analysis, the user's navigation on the website is registered and linked to offline data from surveys and similar registrations to display targeted ads.
|
179 days |
dpm |
Sets a unique ID for the visitor that allows third-party advertisers to target the visitor with relevant advertisement. This pairing service is provided by third-party advertisement hubs, which facilitates real-time bidding for advertisers.
|
179 days |
eud |
Registers user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. |
1 year |
euds |
Registers anonymised user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network.
|
Session |
ev_sync_ax |
Collects information on user preferences and/or interaction with web-campaign content. This is used on CRM-campaign-platform used by website owners for promoting events or products. |
30 days |
ev_sync_yh |
This cookie is set by the audience manager of the website to determine the time and frequencies of visitor data synchronisation. Cookie data synchronisation is used to synchronise and gather visitor data from several websites. |
30 days |
everest_g_v2 |
Used for targeted ads and to document efficacy of each individual ad.
|
1 year |
everest_session_v2 |
Used for targeted ads and to document efficacy of each ad. |
Session |
fr |
Used by Facebook to deliver a series of advertisement products like real time bidding from third-party advertisers. |
3 months |
IDE |
Used by Google DoubleClick to register and report the website user's actions after viewing or clicking one of the advertiser's ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user. |
1 year |
kg |
Presents the user with relevant content and advertisement. The service is provided by third-party advertisement hubs, which facilitate real-time bidding |
Persistent |
krux_views |
Used to track visitors on multiple websites to present relevant advertisements based on the visitor's preferences. |
Session |
mako_uid |
Collects data on user visits to the website, like what pages have been accessed. The registered data is used to categorise the user's interest and demographic profiles in terms of resales for targeted marketing. |
1 year |
mbox |
This cookie is used to collect non-personal information on the visitor's behaviour and non-personal visitor statistics, which can be used by a third-party ad-targeting agency.
|
1 day |
pxrc |
This cookie registers data on the visitor. The information is used to optimise advertisement relevance.
|
2 months |
r1 |
Collects data related to the user's navigation visits to webpages in order to assess the efficacy of ads that are displayed on the website. |
Session |
rlas3 |
Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads. |
1 year |
rud |
Registers user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. |
1 year |
ruds |
Registers user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. |
Session |
RUL |
Used by DoubleClick to determine whether website advertisement has been properly displayed. This is done to make their marketing efforts more efficient.
|
1 year |
sd-session-id |
Registers data on visitors from multiple visits and on multiple websites. This information is used to measure the efficiency of advertisement on websites.
|
179 days |
smd |
Presents the user with relevant content and advertisement. The service is provided by third-party advertisement hubs, which facilitate real-time bidding for advertisers.
|
1 year |
t1 |
Collects information on user behaviour on multiple websites. This information is used in order to optimise the relevance of advertisement on the website.
|
3 months |
test_cookie |
Used to check if the user's browser supports cookies.
|
1 day |
tuuid |
Registers whether or not the user has consented to the use of cookies.
|
1 year |
tuuid_lu
|
Contains a unique visitor ID, which allows Bidswitch.com to track the visitor across multiple websites. This allows Bidswitch to optimise advertisement relevance and ensure that the visitor does not see the same ads multiple times. |
1 year |
u2 |
Collects data related to the user's navigation visits to webpages in order to assess the efficacy of ads that are displayed on the website. |
3 months |
uid
|
Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads. |
1 year |
UID |
Collects information of the user and his/her movement, like timestamp for visits, most recently loaded pages and IP address. The data is used by the marketing research network, Scorecard Research, to analyse traffic patterns and carry out surveys to help their clients better understand the customers’ preferences.
|
2 years |
um2 |
Sets a unique ID for the visitor, that allows third party advertisers to target the visitor with relevant advertisement. This pairing service is provided by third-party advertisement hubs, which facilitates real-time bidding for advertisers. |
3 months |
uuid2 |
Registers a unique ID that identifies a returning user's device. The ID is used for targeted ads. |
3 months |
VISITOR_INFO1_LIVE |
Tries to estimate the user’s bandwidth on pages with integrated YouTube videos. |
179 days |
YSC |
Registers a unique ID to keep statistics of what videos from YouTube the user has seen. |
Session |
yt-remote-cast-installed
|
Stores the user's video player preferences using embedded YouTube video.
|
Session |
yt-remote-connected-devices
|
Stores the user's video player preferences using embedded YouTube video.
|
Persistent |
yt-remote-device-id
|
Stores the user's video player preferences using embedded YouTube video.
|
Persistent |
yt-remote-fast-check-period
|
Stores the user's video player preferences using embedded YouTube video.
|
Session |
yt-remote-session-app |
Stores the user's video player preferences using embedded YouTube video. |
Session |
yt-remote-session-name |
Stores the user's video player preferences using embedded YouTube video.
|
Session |
zync-uuid |
Sets a unique ID for the visitor, that allows third-party advertisers to target the visitor with relevant advertisement. This pairing service is provided by third-party advertisement hubs, which facilitates real-time bidding for advertisers. |
179 days
|
_kxstandardbanksa_e_L8nae7l9 |
Relates to a given marketing event (like: form submit).
|
Persistent |
_kxstandardbanksa_event3p |
Relates to a given marketing event (like: form submit).
|
Persistent |
_kxstandardbanksa_geo |
Contains geographic data of the browser. |
Persistent |
_kxstandardbanksa_kuid |
Contains audience studio pseudonymous user ID.
|
Persistent
|
_kxstandardbanksa_user |
Contains audience studio pseudonymous user ID. |
Persistent |
_kxstandardbanksa_visits |
Contains audience studio pseudonymous user ID. |
Persistent |
kxstandardbanksa_whistle |
Signals if a user has an adblocker. |
Persistent |
Optional Cookies
Session cookies - These cookies are temporary and only exist while you browse our website. As soon as you close your browser or move to a different website, they are removed. They allow our website to link your actions during a browser session.
Persistent cookies - These are permanent cookies that are stored on your device until they reach a set expiry date or until you delete them. They remember your preferences or actions across our site (or in some cases across different websites). We may use them for various reasons, like remembering your preferences and choices when using our site, or to display only relevant advertising messages to you.
First-party cookies – We own and create these cookies.
Third-party cookies - These cookies are owned and created by another company that provides a service to us, like social media sharing, website analytics or content marketing.
How to disable cookies
You can stop your browser from accepting cookies by changing the settings on your web browser. Please note that restricting cookies may impact the functionality of our websites. We recommend that you allow cookies, to enable the efficient and proper functioning of the website. Explore the settings and options on your browser to disable or enable them or visit https://www.aboutcookies.org for detailed information about managing cookies on different browsers.
How we use your Personal Information
- We process your personal information in a lawful and reasonable manner that does not infringe your privacy.
- We will take reasonably practicable steps to ensure that the personal information is complete, accurate, not misleading and updated where necessary.
- We limit the use of personal information to the purposes identified in our privacy statements and all our products and services agreements and for which the individual has provided consent. We store your personal information securely and retain or keep your personal information for only as long as necessary to fulfil the stated purposes or as required by law or regulations and thereafter appropriately dispose or anonymise of such personal information.
- We will take note of the rights you have under applicable privacy and data protection laws and will make sure that we respond to and manage data subject rights requests as soon as reasonably possible and as prescribed by law.
- In terms of our operating model, we may share your personal information with our subsidiaries* and affiliates and third parties only for the purposes identified in the privacy statement and with your explicit consent, where required to provide the services to you. Standard Bank Group ensures that our subsidiaries and affiliates, including third parties, receiving your personal information have appropriate, reasonable technical and organisational measures in place which adhere to our privacy principles and practices.
- We comply with data protection laws and other related laws and codes of conduct that apply in the countries where we operate.
- We protect personal information against unlawful and/or unauthorised access (both physical and logical), use, sharing, loss and damage.
- We will take reasonable actions to make sure that adequate privacy and security measures are in place before we transfer your personal information to other countries if the transfer is necessary to provide services to you. Data and personal information we collect may be transferred to, stored and processed in any country or territory where one or more of our group companies or service providers are based or have facilities. While other countries or territories may not have the same standards of data protection as those in your home country, we will continue to protect personal information that we transfer in line with our privacy principles and practices. We only transfer data and personal information to places where we are satisfied that adequate protection can be provided and we use due diligence and appropriate contractual clauses to make sure that adequate and appropriate levels of data protection are used.
- We process the personal information of minors (minors defined under applicable laws within the jurisdictions we operate), only when a competent person consents to the processing or as allowed by law.
- We respect your data protection rights although rights vary depending on the relevant data protection laws. However, at a minimum we include:
- Your right of access - You have the right to ask us for copies of your personal information.
- Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
- Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
- Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
- We monitor compliance with data privacy-related policies and procedures and have procedures to address data privacy related complaints and disputes.
- We may update this privacy statement from time to time. We will publish all changes on our website. The latest version of our privacy statement will replace all earlier versions, unless otherwise indicated. If you have any questions or complaints about privacy, please contact the Group Privacy Officer:
Melindie Esterhuyse – Deputy Information Officer
The Standard Bank of South Africa Limited
P O Box 1155
Johannesburg
2000
Physical Address
Standard Bank Centre
5 Simmonds street
Johannesburg
2001
Telephone: 011 636 7385
Email: [email protected]
Regulatory
Version: 3
Date published: 14 June 2021
Standard Bank Group Limited
* Subsidiaries and their subsidiaries
Diners Club (S.A.) (Pty) Ltd, Standard Bank Financial Services Holdings (Pty) Ltd, Standard Offshore Finance Company (Pty) Ltd, Melville Douglas Investment Management (Pty) Ltd, FHPManagers (Pty) Ltd, Standard Trust Limited, Standard Insurance Limited, Stanhold Investments (Pty) Ltd, Greenfield Newgate (Pty) Ltd, The Unisec Group Limited, Standard Bank Properties (Pty) Ltd, Blue Waves Properties 78 (Pty) Ltd, SBG Securities (Pty) Ltd.