Important notice:  For up to date information about the pandemic visit www.who.int 
  • Products and Services
    • Transactional Products and Services
    • Global Markets
    • Investment Banking
  • Sectors
  • Insights
  • Country Presence
Corporate and Investment
Sign in

Privacy and security statement

Your privacy is important to us and we know that you are concerned about how we use your personal information. Standard Bank Group Limited, its subsidiaries and their subsidiaries* (Group, we, us, our) collect and process your personal information according to the data protection principles set out below. Reference to personal information means any information which identifies you, and includes information such as your name/s, email address, telephone number, biometric information and password, as well as any other personal information collected. This Privacy Statement and our Cookie Notice applies when you use our Channels (this website, associated websites, mobile sites, mobile applications and other channels).

These principles are in line with our Code of Ethics and comply with applicable laws, rules and standards.

  1. We maintain and continuously improve our data privacy culture by providing training and awareness sessions for all employees, and where relevant, for third-party service providers.
  2. All employees  are made aware of their responsibilities in terms of laws and internal rules that apply to protecting personal information.
  3. We promote the protection of personal information by ensuring that we comply with applicable laws, rules and standards when processing your personal information.  
  4. We will be transparent in our dealings with you and will tell you how we collect and use your personal information. These practices can be found in our privacy statements and all our products and services agreements.
  5. We  rely on lawful grounds with respect to the collection, use, and sharing of personal information and collect personal information only for the purposes identified in our privacy statements and all our products and services agreements. Lawful grounds include consent (when needed we may ask for consent), contract (where processing is necessary for the performance of a contract with you for example, to deliver the products or services you have requested) and for the purposes of our legitimate interests (to manage corporate transactions, such as mergers or acquisitions) or your legitimate interests (to protect you or others from threats such as security threats or fraud) or for the legitimate interests of third parties.
  6. When you use our Channels, we collect your personal information through cookies enabled on these channels. A “cookie” is a small text file that is stored on your computer, smartphone, tablet, or other device when you visit a website or use an app. They contain specific information relating to your use of our website or app, such as login credentials; your preference settings or tracking identifiers. Cookies make it easier for us to give you a better experience online. For all optional types of cookies, we will obtain your consent before these cookies can be used or stored on your device.

For this reason, we limit our use of cookies as explained below to: 

  • provide products and services that you request; 
  • deliver advertising via marketing communications;  
  • provide you a better personalised online experience and track website performance; and 
  • help us make our website more relevant to you. 

 

Types of cookies used on our channels

 Mandatory cookies

Strictly necessary cookies – These cookies are required for the effective operation of our website on your system. These are necessary for the website to function and the collection of information through these cookies cannot be switched off. Strictly necessary cookies – These cookies are required for the effective operation of our website on your system. These are necessary for the website to function and the collection of information through these cookies cannot be switched off. 

Cookie name                                        Cookie discription and purpose                                         Expiry      
cfduid

Used by third-party content network, Cloudflare, to identify trusted web traffic.

29 days
at_check

This cookie determines whether the browser accepts cookies. 

Session

BIGipServer#

Used to distribute traffic to the website on several servers in order to optimise response times. 

Session

com.adobe.reactor.data

ElementCookiesMigrated 

Used in context with the cache-function on the website, facilitating data transfer between Adobe DTM onto Adobe Launch.

Persistent

CookieConsent 

Stores the user's cookie consent state for the current domain.

1 year

ddpr_status 

Determines whether the visitor has accepted the cookie consent box. This ensures that the cookie consent box will not be presented again upon re-entry. 

6 months

SERVERID

This cookie is used to assign the visitor to a specific server. This function is necessary for the functionality of the website.This cookie is used to assign the visitor to a specific server. This function is necessary for the functionality of the website.

1 day
Test

Used to detect if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for GDPR-compliance of the website. 

Session
Category
Statistics

Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously. 

Cookie name Cookie description and purpose Expiry

AMCV_# 

Unique user ID that recognises the user on returning visits.

2 years

dextp

This cookie is set by the audience manager of the website to determine the time and frequencies of visitor data synchronisation - cookie data synchronisation is used to synchronise and gather visitor data from several websites.

179 days

gpv_pn

Registers statistical data on users' behaviour on the website. Used for internal analytics by the website operator.

1 day

s_cc

Used to check if the user's browser supports cookies.

Session

s_invisit

Collects statistics on the visitor’s visits to the website, like the number of visits, average time spent on the website and what pages have been read.

1 day

s_nr

Registers a unique ID that identifies the user's device for return visits

29 days

s_ppv

Saves information on what vertical percentage of a page has been displayed to the user. 

Session

s_ppvl

This cookie is used to collect information on the visitor. This information will be stored for internal analytics at the website's operator. Internal analytics is used by websites to optimise their domains.

Session

s_vnum

Registers how the user has reached the website.

26 days

visitor-id

This cookie is used to collect information on the visitor. This information will be stored for internal analytics at the website's operator. Internal analytics is used by websites to optimise their domains.

1 year
 

 

Marketing

Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third-party advertisers. 

Cookie name Cookie description and purpose Expiry

_cc_aud

Collects statistical data related to the user's website visits, like the number of visits, average time spent on the website and what pages have been loaded. The purpose is to split the website's users according to factors like demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups to enable customised online advertising.

269 days

_cc_cc

Collects statistical data related to the user's website visits, like the number of visits, average time spent on the website and what pages have been loaded. The purpose is to split the website's users according to factors like demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups to enable customised online advertising.

Session 

_cc_dc

Collects statistical data related to the user's website visits, like the number of visits, average time spent on the website and what pages have been loaded. The purpose is to split the website's users according to factors like demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups to enable customised online advertising.

269 days

_cc_id

Collects statistical data related to the user's website visits, like the number of visits, average time spent on the website and what pages have been loaded. The purpose is to split the website's users according to factors like demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups to enable customised online advertising. 

 

269 days 

_fbp

Used by Facebook to deliver a series of advertisement products like real time bidding from third party advertisers.

3 months

_gcl_au

Used by Google AdSense for experimenting with advertisement efficiency across websites using their services.

3 months

_kg

Presents the user with relevant content and advertisements. The service is provided by third-party advertisement hubs, which facilitate real-time bidding for advertisers. 

 

Persistent

_kuid_

Registers a unique ID that identifies a returning user's device. The ID is used for targeted ads.

179 days

A3

Collects information on user behaviour on multiple websites. This information is used in order to optimise the relevance of advertisement on the website.

1 year 

anj

Registers a unique ID that identifies a returning user's device. The ID is used for targeted ads.

3 months 

audience

Used to determine whether the video-ads have been displayed correctly on the website - This is done to make video-ads more effective and ensure that the visitor is not shown the same ads more times than intended. The cookie also detects whether the visitor has any Do not track preferences.

1 year

bkdc

Registers user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network.

179 days 

bkpa 

 

Presents the user with relevant content and advertisement. The service is provided by third-party advertisement hubs, which facilitate real-time bidding for advertisers.

179 days

bku

Registers anonymised user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. 

179 days

c

Regulates synchronisation of user identification and exchange of user data between various ad services.

1 year 

CMID

Collects user data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.

1 year 

CMPRO

Collects data on visitor behaviour from multiple websites, in order to present more relevant advertisement. This also allows the website to limit the number of times that they are shown the same advertisement.

3 months 

CMPS

Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.

3 months

CMRUM3

Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.

1 year

CMST

Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.

1 day

data-rk

Collects data on visitor behaviour from multiple websites, in order to present more relevant advertisement. This also allows the website to limit the number of times that they are shown the same advertisement.

1 year

demdex

Via a unique ID that is used for semantic content analysis, the user's navigation on the website is registered and linked to offline data from surveys and similar registrations to display targeted ads. 

 

179 days

dpm

Sets a unique ID for the visitor that allows third-party advertisers to target the visitor with relevant advertisement. This pairing service is provided by third-party advertisement hubs, which facilitates real-time bidding for advertisers. 

 

179 days

eud

Registers user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network.

1 year

euds

Registers anonymised user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. 

 

Session 

ev_sync_ax

Collects information on user preferences and/or interaction with web-campaign content. This is used on CRM-campaign-platform used by website owners for promoting events or products.

30 days

ev_sync_yh

This cookie is set by the audience manager of the website to determine the time and frequencies of visitor data synchronisation.  Cookie data synchronisation is used to synchronise and gather visitor data from several websites.

30 days

everest_g_v2

Used for targeted ads and to document efficacy of each individual ad. 

 

1 year

everest_session_v2

Used for targeted ads and to document efficacy of each ad.

Session

fr

Used by Facebook to deliver a series of advertisement products like real time bidding from third-party advertisers.

3 months

IDE

Used by Google DoubleClick to register and report the website user's actions after viewing or clicking one of the advertiser's ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user.

1 year 

kg

Presents the user with relevant content and advertisement. The service is provided by third-party advertisement hubs, which facilitate real-time bidding

Persistent

krux_views

Used to track visitors on multiple websites to present relevant advertisements based on the visitor's preferences.

Session

mako_uid

Collects data on user visits to the website, like what pages have been accessed. The registered data is used to categorise the user's interest and demographic profiles in terms of resales for targeted marketing.

1 year

mbox

This cookie is used to collect non-personal information on the visitor's behaviour and non-personal visitor statistics, which can be used by a third-party ad-targeting agency. 

 

1 day

pxrc

This cookie registers data on the visitor. The information is used to optimise advertisement relevance. 

 

2 months

r1

Collects data related to the user's navigation visits to webpages in order to assess the efficacy of ads that are displayed on the website.

Session 

rlas3

Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.

1 year

rud

Registers user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network.

1 year 

ruds

Registers user data, like IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network.

Session

RUL

Used by DoubleClick to determine whether website advertisement has been properly displayed. This is done to  make their marketing efforts more efficient. 

 

1 year

sd-session-id

Registers data on visitors from multiple visits and on multiple websites. This information is used to measure the efficiency of advertisement on websites. 

 

179 days

smd

Presents the user with relevant content and advertisement. The service is provided by third-party advertisement hubs, which facilitate real-time bidding for advertisers. 

 

1 year

t1

Collects information on user behaviour on multiple websites. This information is used in order to optimise the relevance of advertisement on the website. 

 

3 months

test_cookie

Used to check if the user's browser supports cookies. 

 

1 day

tuuid

Registers whether or not the user has consented to the use of cookies. 

 

1 year 

tuuid_lu 

 

Contains a unique visitor ID, which allows Bidswitch.com to track the visitor across multiple websites. This allows Bidswitch to optimise advertisement relevance and ensure that the visitor does not see the same ads multiple times.

1 year

u2

Collects data related to the user's navigation visits to webpages in order to assess the efficacy of ads that are displayed on the website.

3 months

uid 

 

Collects visitor data related to the user's visits to the website, like the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.

1 year 

UID

Collects information of the user and his/her movement, like timestamp for visits, most recently loaded pages and IP address. The data is used by the marketing research network, Scorecard Research, to analyse traffic patterns and carry out surveys to help their clients better understand the customers’ preferences. 

 

2 years

um2

Sets a unique ID for the visitor, that allows third party advertisers to target the visitor with relevant advertisement. This pairing service is provided by third-party advertisement hubs, which facilitates real-time bidding for advertisers.

3 months 

uuid2

Registers a unique ID that identifies a returning user's device. The ID is used for targeted ads.

3 months

VISITOR_INFO1_LIVE

Tries to estimate the user’s bandwidth on pages with integrated YouTube videos.

179 days

YSC

Registers a unique ID to keep statistics of what videos from YouTube the user has seen.

Session

yt-remote-cast-installed 

 

Stores the user's video player preferences using embedded YouTube video. 

 

Session

yt-remote-connected-devices 

 

Stores the user's video player preferences using embedded YouTube video. 

 

Persistent

yt-remote-device-id 

 

Stores the user's video player preferences using embedded YouTube video. 

 

Persistent

yt-remote-fast-check-period 

 

Stores the user's video player preferences using embedded YouTube video. 

 

Session

yt-remote-session-app

Stores the user's video player preferences using embedded YouTube video. 

Session

yt-remote-session-name

Stores the user's video player preferences using embedded YouTube video. 

 

Session

zync-uuid

Sets a unique ID for the visitor, that allows third-party advertisers to target the visitor with relevant advertisement. This pairing service is provided by third-party advertisement hubs, which facilitates real-time bidding for advertisers.

179 days

 

_kxstandardbanksa_e_L8nae7l9 

Relates to a given marketing event (like: form submit). 

 

Persistent 

_kxstandardbanksa_event3p 

Relates to a given marketing event (like: form submit). 

 

Persistent 

_kxstandardbanksa_geo 

Contains geographic data of the browser. 

Persistent 

_kxstandardbanksa_kuid 

Contains audience studio pseudonymous user ID. 

 

Persistent  

 

_kxstandardbanksa_user 

Contains audience studio pseudonymous user ID. 

 

Persistent 

_kxstandardbanksa_visits 

Contains audience studio pseudonymous user ID. 

 

Persistent 

kxstandardbanksa_whistle 

Signals if a user has an adblocker. 

Persistent 

Optional Cookies


Session cookies - These cookies are temporary and only exist while you browse our website. As soon as you close your browser or move to a different website, they are removed. They allow our website to link your actions during a browser session. 

Persistent cookies - These are permanent cookies that are stored on your device until they reach a set expiry date or until you delete them. They remember your preferences or actions across our site (or in some cases across different websites). We may use them for various reasons, like remembering your preferences and choices when using our site, or to display only relevant advertising messages to you. 

First-party cookies – We own and create these cookies. 
 
Third-party cookies - These cookies are owned and created by another company that provides a service to us, like social media sharing, website analytics or content marketing. 

How to disable cookies 

You can stop your browser from accepting cookies by changing the settings on your web browser. Please note that restricting cookies may impact the functionality of our websites. We recommend that you allow cookies, to enable the efficient and proper functioning of the website. Explore the settings and options on your browser to disable or enable them, or visit  https://www.aboutcookies.org  for detailed information about managing cookies on different browsers. 

How we use your Personal Information

  1. We process your personal information in a lawful and reasonable manner that does not infringe your privacy. 
  2. We will take reasonably practicable steps to ensure that the personal information is complete, accurate, not misleading and updated where necessary. 
  3. We limit the use of personal information to the purposes identified in our privacy statements and all our products and services agreements and for which the individual has provided consent. We store your personal information securely and retain or keep your personal information for only as long as necessary to fulfil the stated purposes or as required by law or regulations and thereafter appropriately dispose or anonymise of such personal information.
  4. We will take note of the rights you have under applicable privacy and data protection laws and will make sure that we respond to and manage data subject rights requests as soon as reasonably possible and as prescribed by law.
  5. In terms of our operating model, we may share your personal information with our subsidiaries* and affiliates and third parties only for the purposes identified in the privacy statement and with your explicit consent, where required to provide the services to you. Standard Bank Group ensures that our subsidiaries and affiliates, including third parties, receiving your personal information have appropriate, reasonable technical and organisational measures in place which adhere to our privacy principles and practices.
  6. We comply with data protection laws and other related laws and codes of conduct that apply in the countries where we operate.  
  7. We protect personal information against unlawful and/or unauthorised access (both physical and logical), use, sharing, loss and damage.
  8. We will take reasonable actions to make sure that adequate privacy and security measures are in place before we transfer your personal information to other countries if the transfer is necessary to provide services to you. Data and personal information we collect may be transferred to, stored and processed in any country or territory where one or more of our group companies or service providers are based or have facilities. While other countries or territories may not have the same standards of data protection as those in your home country, we will continue to protect personal information that we transfer in line with our privacy principles and practices.  We only transfer data and personal information to places where we are satisfied that adequate protection can be provided and we use due diligence and appropriate contractual clauses to make sure that adequate and appropriate levels of data protection are used.
  9. We process the personal information of minors (minors defined under applicable laws within the jurisdictions we operate), only when a competent person consents to the processing or as allowed by law.
  10. We respect your data protection rights although rights vary depending on the relevant data protection laws.  However, at a minimum we include:
  • Your right of access - You have the right to ask us for copies of your personal information. 
  • Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 
  • Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances. 
  • Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. 
  • Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
  • Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

11. We monitor compliance with data privacy-related policies and procedures and have procedures to address data privacy related complaints and disputes.

12. We may update this privacy statement from time to time. We will publish all changes on our website. The latest version of our privacy statement will replace all earlier versions, unless otherwise indicated. If you have any questions or complaints about privacy, please contact the Group Privacy Officer:

Melindie Esterhuyse – Deputy Information Officer 
The Standard Bank of South Africa Limited
P O Box 1155
Johannesburg 
2000 

Physical Address 
Standard Bank Centre 
5 Simmonds street 
Johannesburg 
2001

Telephone: 011 636 7385
Email: [email protected]

Regulatory
Version: 3

Date published: 28 June 2021
Standard Bank Group Limited 

* Subsidiaries and their subsidiaries

Diners Club (S.A.) (Pty) Ltd, Standard Bank Financial Services Holdings (Pty) Ltd, Standard Offshore Finance Company (Pty) Ltd, Melville Douglas Investment Management (Pty) Ltd, FHPManagers (Pty) Ltd, Standard Trust Limited, Standard Insurance Limited, Stanhold Investments (Pty) Ltd, Greenfield Newgate (Pty) Ltd, The Unisec Group Limited, Standard Bank Properties (Pty) Ltd, Blue Waves Properties 78 (Pty) Ltd, SBG Securities (Pty) Ltd