Privacy statement

Standard Bank Group of Companies (Standard Bank Group)

Privacy Statement (Statement)

The Standard Bank Group is an Africa-focused, client-led and digitally enabled financial services organisation. We provide comprehensive and integrated financial and finance-related solutions to our clients and operate across the African continent and internationally through our subsidiaries.

Due to the integrated nature of the Standard Bank Group business, clients whose primary business is with one entity of the Standard Bank Group are viewed as clients of the Standard Bank Group as a whole for client-centricity, information quality and risk management purposes.

The Standard Bank Group’s simplified legal structure highlights the major subsidiaries and businesses and can be viewed on its website at standardbank.com/ourstructure.

In this statement any reference to the Standard Bank Group, we, us or our includes all legal entities within the Standard Bank Group structure and clients, you or your refers to clients of a legal entity within the Standard Bank Group.

Regulation of data privacy and protection

As we operate in various countries and through various legal entities, we comply with the applicable data protection and privacy laws in each of these countries. Accordingly, the specific Standard Bank Group legal entity that is responsible for determining the purpose and means of processing your personal information (responsible party or controller), in other words the legal entity who holds the business relationship with you will not always be the same. It will be made clear to you when you use a banking channel (branch or digital) to take up a product or service, who the responsible party or data controller is. The applicable data protection legislation for Standard Bank Group entities can be found under the “Data Protection Legislation in the Group” section below.

The purpose of this statement is to inform you about how we collect, use, store, make available, disclose, update, safeguard, destroy or otherwise deal with (process) your personal information (also referred to as personal data in some countries) and also to explain your rights relating to the privacy of your personal information and how the law protects you.

We may combine your personal information, available across the Group, and use the combined information for any of the purposes set out in this statement where we have lawful grounds for doing so. Your personal information may be processed in another country that does not provide you with the same data protection that the country of origin does, but we will only process in and transfer personal information to countries that we are satisfied will provide adequate data protection.

Protecting the privacy, confidentiality and security of your personal information is very important to us as it is critical for us to maintain your trust and act in the right way to meet your needs. We have therefore implemented Group-wide policies and procedures to ensure that your personal information is protected.