The group will only process cookies which identify users for lawful purposes:
The group may use cookies for reasons including but not limited to:
First- and third-party cookies refer to the website or domain using the cookie. Cookies are set by the website that the user is visiting.
First-party cookies
First-party cookies are directly stored by the website (or domain) visited by a user. These cookies allow website owners to collect analytics, data, remember language settings or perform other useful functions that provide a good user experience.
Third-party cookies
Third-party cookies are created by domains separate/different from the website (or domain) that the user is visiting. These cookies are usually used for online advertising, cross-site tracking; and are accessible on any website that loads the third party's server code, e.g. when a user visits a site and clicks a "like" button, this could be stored in a cookie and, upon visiting the third-party site, the cookie will be used to action the request.
For example, a user browses online for a specific product, finds an advert of interest, clicks the advert and thereafter closes their browser. Several hours later, the user notices advertising of the same product that they were browsing for earlier.
When a user visits a group website, the group may include any of the cookies listed in the table below. The table explains what the cookies are used for and the time period for which the cookie could remain valid. Where cookies are only valid for a single session, the cookie will be erased when the user closes their browser. Where cookies persist, the cookie will be stored by the user's browser until deleted by the user.
| Origin | Use | Service | Duration |
|---|---|---|---|
| First-party cookies | Browser/device identification | Enable the group to identify the device/browser. | Persist beyond a single session. |
| Authentication | Upon logging into a web server, a cookie will be returned that identifies the user has been successfully logged in. | Only valid for the single session. | |
| First- and third-party cookies | Analytics | To collect information about how visitors, use group websites. This can provide the group with insight on website performance and metrics. | Persist beyond a single session. |
| Third-party cookies | Marketing and other | Used for tracking and online advertising purposes. | Persist beyond a single session. |
| Option | Description |
|---|---|
| HTTPS | Makes a cookie secure by ensuring it is only sent over HTTPS protocol. This prevents attackers from secretly extracting it. |
| Same-site cookie | Makes the cookie secure by limiting the sites to which the cookie is allowed to be sent. |
| Expiry | Sets the duration a cookie will last for before it expires. |
| Secure | Makes a cookie secure by ensuring it is only sent over a securely encrypted channel. |
| Path | Helps to protect a cookie by restricting the location where it is allowed to be sent. |
A cookie is a small piece of data that is sent (usually in the form of a text file) from a website to the user's device, such as a computer, smartphone or tablet. The purpose of a cookie is to provide a reliable mechanism to "remember" user behaviour (keeping track of previous actions), e.g. remembering the contents of an online shopping cart, and actions the user performed whilst browsing when not signed up or logged into their online account.
The group does not necessarily know the identity of the user of the device but does see the behaviour recorded on the device. Multiple users of the same device would not necessarily be distinguishable from one another.
Cookies could, however, be used to identify the device and, if the device is linked to a specific user, the user would also be identifiable. For example, a device registered to an app (FNB, WesBank, RMB, etc.).
All browsers allow users to refuse to accept cookies and to remove current cookies. The methods for doing so vary between different browsers and versions. Users can block cookies on group websites, if desired. Blocking certain cookies may have a negative impact upon the usability of group websites. For example, the group requires cookies to allow users to log in. By removing first-party cookies, a user's banking experience may be affected.
The Privacy Notice governs the manner in which the bank treats your personal information collected electronically when you use our website.
Changes to this Privacy Notice
We reserve the right, in our sole discretion to amend (including without limitation, by the addition of new terms and conditions) this Privacy Notice from time to time. You agree to review the Privacy Notice whenever you visit this website for any such amendments. Save as expressly provided to the contrary in this Privacy Notice, the amended version of the Privacy Notice shall supersede and replace all previous versions thereof.
Which laws apply?
This Privacy Notice will be governed by and construed and interpreted in accordance with the laws of South Africa and Guernsey. To the extent that a court has jurisdiction over any dispute which may arise out of or in connection with this Privacy Notice, we both submit to the jurisdiction of the South African or Guernsey courts.
