This Privacy Notice explains how the Stonehage Fleming Companies operating in South Africa (collectively "us", "we", "our") collect, use and disclose your personal data, and your rights in relation to the personal data held by us. This privacy notice specifically concerns our processing of personal data which relates to suppliers of services and goods to us.
The Company is the data controller/Responsible Party of personal data and is subject to the Protection of Personal Information Act No 4 of 2013 (“POPIA”). The contact details of our Information Officer are: email - sainformationofficer@stonehagefleming.com - tel. +27 21 301 0800.
We may amend this Privacy Notice from time to time, to reflect any changes in the way that we process your personal data. This Privacy Notice supersedes any previous version of it.
The following Companies form part of the Stonehage Fleming Group in South Africa:
You have the following rights:
Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply.
If you have any questions about how we use your personal data, or you wish to exercise any of the rights set out above, please contact our Information Officer using the following:
By post: 54 Glenhove Road, Melrose, Johannesburg, 2196, South Africa, or
First Floor, North Block, Waterway House, 3 Dock Road, V&A Waterfront, Cape Town, 8001, South Africa
By email: sainformationofficer@stonehagefleming.com
By telephone: +27 21 301 0800
If you are not satisfied with how we are processing your personal data, you can make a complaint to the Information Regulator in South Africa or relevant supervisory authority, in your jurisdiction.
We may collect your personal data in a number of ways, for example:
We may collect the following categories of personal data about you:
We may process personal data because it is necessary for the performance of a contract to which you are a party or to enter into a contract with you. In this respect, we use your personal data for the following:
In this respect, we may share your personal data with the following:
We may also process your personal data because it is necessary for our legitimate interests. In this respect, we may use your personal data for the following:
In this respect we may share your personal data with the following:
We may also process your data to comply with a legal obligation. In this respect, we may use your personal data to meet our compliance and regulatory obligations, such as compliance with anti-money laundering laws. In this respect, we may share your personal data with the following:
We may process your data for the following reasons, provided that you have given your explicit consent at the time you provide your data to us. Where you supply your services at our premises and we need to make reasonable adjustments to our working environment to cater for your medical conditions. We may obtain or record your consent in writing, but please note that where you volunteer more sensitive personal data to us for a particular purpose, your provision of that data may itself indicate your consent for us to process it for that purpose.
Please note that if you do not agree to this or you withdraw your consent then we may not be able to make special arrangements to accommodate your condition(s).
We may need to transfer your personal data for the reasons set out elsewhere in this Privacy Notice to other Group companies located in Switzerland, the United Kingdom, Israel, Guernsey, Canada, Jersey, Liechtenstein, Luxembourg, the Isle of Man and Malta. These countries provide an adequate level of protection for your personal data.
Where we need to share your personal data with a Group company in Mauritius, Monaco or the United States, which are countries which do not provide an adequate level of protection for your personal data, we will do so using either a data sharing agreement, another available safeguard or with your explicit consent.
We will retain your personal information for as long as necessary and permitted for legal, regulatory, and legitimate business purposes. After this period, your personal data will be deleted and / or destroyed.
Version date: October 2024