Privacy Statement

Your privacy is important to us and we know that you are concerned about how we use your personal information. Standard Bank Group Limited, its subsidiaries and their subsidiaries* (Group, we, us, our) collect and process your personal information according to the data protection principles set out below. Reference to personal information means any information which identifies you, and includes information such as your name/s, email address, telephone number, biometric information and password, as well as any other personal information collected. This Privacy Statement and our Cookie Notice applies when you use our Channels (this website, associated websites, mobile sites, mobile applications and other channels).

These principles are in line with our Code of Ethics and comply with applicable laws, rules and standards.

We maintain and continuously improve our data privacy culture by providing training and awareness sessions for all employees, and where relevant, for third-party service providers.
All employees are made aware of their responsibilities in terms of laws and internal rules that apply to protecting personal information.
We promote the protection of personal information by ensuring that we comply with applicable laws, rules and standards when processing your personal information.
We will be transparent in our dealings with you and will tell you how we collect and use your personal information. These practices can be found in our privacy statements and all our products and services agreements.
We rely on lawful grounds with respect to the collection, use, and sharing of personal information and collect personal information only for the purposes identified in our privacy statements and all our products and services agreements. Lawful grounds include consent (when needed we may ask for consent), contract (where processing is necessary for the performance of a contract with you for example, to deliver the products or services you have requested) and for the purposes of our legitimate interests (to manage corporate transactions, such as mergers or acquisitions) or your legitimate interests (to protect you or others from threats such as security threats or fraud) or for the legitimate interests of third parties.
When you use our Channels, we collect your personal information through cookies enabled on these channels. A “cookie” is a small text file that is stored on your computer, smartphone, tablet, or other device when you visit a website or use an app. They contain specific information relating to your use of our website or app, such as login credentials; your preference settings or tracking identifiers. Cookies make it easier for us to give you a better experience online. For all optional types of cookies, we will obtain your consent before these cookies can be used or stored on your device.

For this reason, we limit our use of cookies as explained below to:

provide products and services that you request;
deliver advertising via marketing communications;
provide you a better personalised online experience and track website performance; and
help us make our website more relevant to you.

Types of cookies used on our Channels

Mandatory cookies

Strictly necessary cookies – These cookies are required for the effective operation of our website on your system. These are necessary for the website to function and the collection of information through these cookies cannot be switched off.

Cookie name	Cookie description and purpose	Expiry
_cfduid	Used by third-party content network, Cloudflare, to identify trusted web traffic.	29 days
at_check	This cookie determines whether the browser accepts cookies.	Session
BIGipServer#	Used to distribute traffic to the website on several servers in order to optimise response times.	Session
com.adobe.reactor.data ElementCookiesMigrated	Used in context with the cache-function on the website, facilitating data transfer between Adobe DTM onto Adobe Launch.	Persistent
CookieConsent	Stores the user's cookie consent state for the current domain.	1 year
ddpr_status	Determines whether the visitor has accepted the cookie consent box. This ensures that the cookie consent box will not be presented again upon re-entry.	6 months
SERVERID	This cookie is used to assign the visitor to a specific server. This function is necessary for the functionality of the website.	1 day
test	Used to detect if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for GDPR-compliance of the website.	Session

Categories

Statistics

Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.

Cookie Name	Cookie description and purpose	Expiry
AMCV_#	Unique user ID that recognises the user on returning visits.	2 years
dextp	This cookie is set by the audience manager of the website to determine the time and frequencies of visitor data synchronisation - cookie data synchronisation is used to synchronise and gather visitor data from several websites.	179 days
gpv_pn	Registers statistical data on users' behaviour on the website. Used for internal analytics by the website operator.	1 day
s_cc	Used to check if the user's browser supports cookies.	Session
s_invisit	Collects statistics on the visitor’s visits to the website, like the number of visits, average time spent on the website and what pages have been read.	1 day
s_nr	Registers a unique ID that identifies the user's device for return visits	29 days
s_ppv	Saves information on what vertical percentage of a page has been displayed to the user.	Session
s_ppvl	This cookie is used to collect information on the visitor. This information will be stored for internal analytics at the website's operator. Internal analytics is used by websites to optimise their domains.	Session
s_vnum	Registers how the user has reached the website.	26 Days
visitor-id	This cookie is used to collect information on the visitor. This information will be stored for internal analytics at the website's operator. Internal analytics is used by websites to optimise their domains.	1 year

Marketing

Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third-party advertisers.

Cookie Name	Cookie description and purpose	Expiry
_cc_aud	Collects statistical data related to the user's website visits, like the number of visits, average time spent on the website and what pages have been loaded. The purpose is to split the website's users according to factors like demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups to enable customised online advertising.	269 days
_cc_cc	Collects statistical data related to the user's website visits, like the number of visits, average time spent on the website and what pages have been loaded. The purpose is to split the website's users according to factors like demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups to enable customised online advertising.	Session
_cc_dc	Collects statistical data related to the user's website visits, like the number of visits, average time spent on the website and what pages have been loaded. The purpose is to split the website's users according to factors like demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups to enable customised online advertising.	269 days
_cc_id	Collects statistical data related to the user's website visits, like the number of visits, average time spent on the website and what pages have been loaded. The purpose is to split the website's users according to factors like demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups to enable customised online advertising.	269 days
_fbp	Used by Facebook to deliver a series of advertisement products like real time bidding from third party advertisers.	3 months
_gcl_au	Used by Google AdSense for experimenting with advertisement efficiency across websites using their services.	3 months
_kg	Presents the user with relevant content and advertisements. The service is provided by third-party advertisement hubs, which facilitate real-time bidding for advertisers.	Persistent
_kuid_	Registers a unique ID that identifies a returning user's device. The ID is used for targeted ads.	179 days
A3	Collects information on user behaviour on multiple websites. This information is used in order to optimise the relevance of advertisement on the website.	1 year
anj	Registers a unique ID that identifies a returning user's device. The ID is used for targeted ads.	3 months
audience	Used to determine whether the video-ads have been displayed correctly on the website - This is done to make video-ads more effective and ensure that the visitor is not shown the same ads more times than intended. The cookie also detects whether the visitor has any Do not track preferences.	1 year
bkdc	Registers user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network.	179 days
bkpa	Presents the user with relevant content and advertisement. The service is provided by third-party advertisement hubs, which facilitate real-time bidding for advertisers.	179 days
bku	Registers anonymised user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network.	179 days
c	Regulates synchronisation of user identification and exchange of user data between various ad services.	1 year
CMID	Collects user data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.	1 year
CMPRO	Collects data on visitor behaviour from multiple websites, in order to present more relevant advertisement. This also allows the website to limit the number of times that they are shown the same advertisement.	3 months
CMPS	Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.	3 months
CMRUM3	Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.	1 year
CMST	Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.	1 day
data-rk	Collects data on visitor behaviour from multiple websites, in order to present more relevant advertisement. This also allows the website to limit the number of times that they are shown the same advertisement.	1 year
demdex	Via a unique ID that is used for semantic content analysis, the user's navigation on the website is registered and linked to offline data from surveys and similar registrations to display targeted ads.	179 days
dpm	Sets a unique ID for the visitor that allows third-party advertisers to target the visitor with relevant advertisement. This pairing service is provided by third-party advertisement hubs, which facilitates real-time bidding for advertisers.	179 days
eud	Registers user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network.	1 year
euds	Registers anonymised user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network.	Session
ev_sync_ax	Collects information on user preferences and/or interaction with web-campaign content. This is used on CRM-campaign-platform used by website owners for promoting events or products.	30 days
ev_sync_yh	This cookie is set by the audience manager of the website to determine the time and frequencies of visitor data synchronisation. Cookie data synchronisation is used to synchronise and gather visitor data from several websites.	30 days
everest_g_v2	Used for targeted ads and to document efficacy of each individual ad.	1 year
everest_session_v2	Used for targeted ads and to document efficacy of each ad.	Session
fr	Used by Facebook to deliver a series of advertisement products like real time bidding from third-party advertisers.	3 months
IDE	Used by Google DoubleClick to register and report the website user's actions after viewing or clicking one of the advertiser's ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user.	1 year
kg	Presents the user with relevant content and advertisement. The service is provided by third-party advertisement hubs, which facilitate real-time bidding	Persistent
krux_views	Used to track visitors on multiple websites to present relevant advertisements based on the visitor's preferences.	Session
mako_uid	Collects data on user visits to the website, like what pages have been accessed. The registered data is used to categorise the user's interest and demographic profiles in terms of resales for targeted marketing.	1 year
mbox	This cookie is used to collect non-personal information on the visitor's behaviour and non-personal visitor statistics, which can be used by a third-party ad-targeting agency.	1 day
pxrc	This cookie registers data on the visitor. The information is used to optimise advertisement relevance.	2 months
r1	Collects data related to the user's navigation visits to webpages in order to assess the efficacy of ads that are displayed on the website.	Session
rlas3	Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.	1 year
rud	Registers user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network.	1 year
ruds	Registers user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network.	Session
RUL	Used by DoubleClick to determine whether website advertisement has been properly displayed. This is done to make their marketing efforts more efficient.	1 year
sd-session-id	Registers data on visitors from multiple visits and on multiple websites. This information is used to measure the efficiency of advertisement on websites.	179 days
smd	Presents the user with relevant content and advertisement. The service is provided by third-party advertisement hubs, which facilitate real-time bidding for advertisers.	1 year
t1	Collects information on user behaviour on multiple websites. This information is used in order to optimise the relevance of advertisement on the website.	3 months
test_cookie	Used to check if the user's browser supports cookies.	1 day
tuuid	Registers whether or not the user has consented to the use of cookies.	1 year
tuuid_lu	Contains a unique visitor ID, which allows Bidswitch.com to track the visitor across multiple websites. This allows Bidswitch to optimise advertisement relevance and ensure that the visitor does not see the same ads multiple times.	1 year
u2	Collects data related to the user's navigation visits to webpages in order to assess the efficacy of ads that are displayed on the website.	3 months
uid	Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.	1 year
UID	Collects information of the user and his/her movement, like timestamp for visits, most recently loaded pages and IP address. The data is used by the marketing research network, Scorecard Research, to analyse traffic patterns and carry out surveys to help their clients better understand the customers’ preferences.	2 years
um2	Sets a unique ID for the visitor, that allows third party advertisers to target the visitor with relevant advertisement. This pairing service is provided by third-party advertisement hubs, which facilitates real-time bidding for advertisers.	3 months
uuid2	Registers a unique ID that identifies a returning user's device. The ID is used for targeted ads.	3 months
VISITOR_INFO1_LIVE	Tries to estimate the user’s bandwidth on pages with integrated YouTube videos.	179 days
YSC	Registers a unique ID to keep statistics of what videos from YouTube the user has seen.	Session
yt-remote-cast-installed	Stores the user's video player preferences using embedded YouTube video.	Session
yt-remote-connected-devices	Stores the user's video player preferences using embedded YouTube video.	Persistent
yt-remote-device-id	Stores the user's video player preferences using embedded YouTube video.	Persistent
yt-remote-fast-check-period	Stores the user's video player preferences using embedded YouTube video.	Session
yt-remote-session-app	Stores the user's video player preferences using embedded YouTube video.	Session
yt-remote-session-name	Stores the user's video player preferences using embedded YouTube video.	Session
zync-uuid	Sets a unique ID for the visitor, that allows third-party advertisers to target the visitor with relevant advertisement. This pairing service is provided by third-party advertisement hubs, which facilitates real-time bidding for advertisers.	179 days
_kxstandardbanksa_e_L8nae7l9	Relates to a given marketing event (like: form submit).	Persistent
_kxstandardbanksa_event3p	Relates to a given marketing event (like: form submit).	Persistent
_kxstandardbanksa_geo	Contains geographic data of the browser.	Persistent
_kxstandardbanksa_kuid	Contains audience studio pseudonymous user ID.	Persistent
_kxstandardbanksa_user	Contains audience studio pseudonymous user ID.	Persistent
_kxstandardbanksa_visits	Contains audience studio pseudonymous user ID.	Persistent
kxstandardbanksa_whistle	Signals if a user has an adblocker.	Persistent

Optional Cookies
Session cookies - These cookies are temporary and only exist while you browse our website. As soon as you close your browser or move to a different website, they are removed. They allow our website to link your actions during a browser session.
 

Persistent cookies - These are permanent cookies that are stored on your device until they reach a set expiry date or until you delete them. They remember your preferences or actions across our site (or in some cases across different websites). We may use them for various reasons, like remembering your preferences and choices when using our site, or to display only relevant advertising messages to you.

First-party cookies – We own and create these cookies.

Third-party cookies - These cookies are owned and created by another company that provides a service to us, like social media sharing, website analytics or content marketing.

How to disable cookies

You can stop your browser from accepting cookies by changing the settings on your web browser. Please note that restricting cookies may impact the functionality of our websites. We recommend that you allow cookies, to enable the efficient and proper functioning of the website. Explore the settings and options on your browser to disable or enable them or visit  https://www.aboutcookies.org  for detailed information about managing cookies on different browsers.

How we use your Personal Information

We process your personal information in a lawful and reasonable manner that does not infringe your privacy.
We will take reasonably practicable steps to ensure that the personal information is complete, accurate, not misleading and updated where necessary.
We limit the use of personal information to the purposes identified in our privacy statements and all our products and services agreements and for which the individual has provided consent. We store your personal information securely and retain or keep your personal information for only as long as necessary to fulfil the stated purposes or as required by law or regulations and thereafter appropriately dispose or anonymise of such personal information.
We will take note of the rights you have under applicable privacy and data protection laws and will make sure that we respond to and manage data subject rights requests as soon as reasonably possible and as prescribed by law.
In terms of our operating model, we may share your personal information with our subsidiaries* and affiliates and third parties only for the purposes identified in the privacy statement and with your explicit consent, where required to provide the services to you. Standard Bank Group ensures that our subsidiaries and affiliates, including third parties, receiving your personal information have appropriate, reasonable technical and organisational measures in place which adhere to our privacy principles and practices.
We comply with data protection laws and other related laws and codes of conduct that apply in the countries where we operate.
We protect personal information against unlawful and/or unauthorised access (both physical and logical), use, sharing, loss and damage.
We will take reasonable actions to make sure that adequate privacy and security measures are in place before we transfer your personal information to other countries if the transfer is necessary to provide services to you. Data and personal information we collect may be transferred to, stored and processed in any country or territory where one or more of our group companies or service providers are based or have facilities. While other countries or territories may not have the same standards of data protection as those in your home country, we will continue to protect personal information that we transfer in line with our privacy principles and practices. We only transfer data and personal information to places where we are satisfied that adequate protection can be provided and we use due diligence and appropriate contractual clauses to make sure that adequate and appropriate levels of data protection are used.
We process the personal information of minors (minors defined under applicable laws within the jurisdictions we operate), only when a competent person consents to the processing or as allowed by law.
We respect your data protection rights although rights vary depending on the relevant data protection laws. However, at a minimum we include:
1. Your right of access - You have the right to ask us for copies of your personal information.
2. Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
3. Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
4. Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
5. Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
6. Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
We monitor compliance with data privacy-related policies and procedures and have procedures to address data privacy related complaints and disputes.
We may update this privacy statement from time to time. We will publish all changes on our website. The latest version of our privacy statement will replace all earlier versions, unless otherwise indicated. If you have any questions or complaints about privacy, please contact the Group Privacy Officer:

Melindie Esterhuyse – Deputy Information Officer
The Standard Bank of South Africa Limited
P O Box 1155
Johannesburg
2000

Physical Address
Standard Bank Centre
5 Simmonds street
Johannesburg
2001

Telephone: 011 636 7385
Email: [email protected]

Regulatory
Version: 3

Date published: 14 June 2021
Standard Bank Group Limited

* Subsidiaries and their subsidiaries

Diners Club (S.A.) (Pty) Ltd, Standard Bank Financial Services Holdings (Pty) Ltd, Standard Offshore Finance Company (Pty) Ltd, Melville Douglas Investment Management (Pty) Ltd, FHPManagers (Pty) Ltd, Standard Trust Limited, Standard Insurance Limited, Stanhold Investments (Pty) Ltd, Greenfield Newgate (Pty) Ltd, The Unisec Group Limited, Standard Bank Properties (Pty) Ltd, Blue Waves Properties 78 (Pty) Ltd, SBG Securities (Pty) Ltd.