Introduction

By providing us with any information you will be agreeing to the provisions set out below, together with any other terms you have agreed with us where relevant. Please ensure you have read and understood these terms before you send us any information. They will apply to any information you have already provided.

If you are a customer or client of the Investec Group, details of the information we collect and how we use it will also be set out in the terms and conditions of the relevant product or service. In the event of a conflict between this Data Protection Policy and the terms and conditions of your specific product or service, the terms and conditions of your specific product or service will take precedence.

We reserve the right to revise or supplement this Data Protection Policy from time to time at our sole discretion, and you agree to revisit this policy regularly at www.investec.com (UK site) to ensure you are familiar with the most current version. By continuing to deal with us you will be agreeing to any such changes.

You must not send us personal information about someone else without first getting his or her consent for it to be used and disclosed in the ways set out in this policy. This is because we will assume he or she has consented – although we may still ask for confirmation from them. Where you do give us information about someone else, or someone else discloses a connection with you, that information may be taken into account with your other personal information.

We treat your privacy very seriously and we understand that you will wish to know how we will use the information we collect from or about you. We use your personal information in accordance with this Data Protection Policy and will fully comply with all applicable UK data protection legislation (including the Data Protection Act 1998). It is important that you take all necessary and appropriate steps to protect your data yourself (for example, by ensuring that all passwords and access codes are kept secure).

Use of information collected

We may process, transfer and disclose your information for the purposes of:

• providing you with services, managing your accounts and complying with the your instructions;
• verifying your identity;
• taking credit decisions;
• detecting and preventing fraud;
• compliance with laws and public duties;
• monitoring and/or recording your telephone calls and electronic transactions in order to accurately carry out your instructions;
• to assist in improving the Bank's services and in the interests of security and crime prevention
• market research and providing you with information via mail, telephone or other means about the Investec Group's products or services from time to time; and
• analysis in order to assess and improve the Bank's business or the business of the Investec Group and the services the Investec Group offers.

The processing, transferring or disclosing of your information as set out above will be undertaken strictly in accordance with the Data Protection Act 1998.

We may use credit scoring or other check mechanisms and search files of credit reference agencies when carrying out identity and anti-fraud checks, when considering any application you may make and in the course of providing any products or services to you. We may also carry out other identity and anti-fraud checks. Credit reference agencies may keep a record of any search. Further checks and searches may be carried out from time to time for the purposes of fraud prevention and credit control.

We may contact you about products and services available from the Investec Group which we believe may interest you from time to time. We may do this by post or by phone unless you have told us in writing not to; and by e-mail, text or other electronic means if you have told us in writing that we can. You may tell us in writing at any time if you change your mind. We will respect any election by you, through signing up to a preference service or otherwise, not to be contacted by a certain method of communication unless and until you notify us in writing that you wish to be contacted by such method again.

Your personal information may be passed to and used by companies within the Investec Group of companies and the Bank's agents and sub-contractors who administer or process the information on our behalf. Please contact the Company Secretary at our address for an up-to-date list of the current members of the Investec Group.

International transfer

We may transfer your personal information outside the European Economic Area (EEA) to such countries, which may not offer the same level of data protection as the United Kingdom.

In particular, your information may be sent to USA and South Africa. If the Bank does this, the Bank will ensure that anyone to whom the Bank passes your information agrees to treat your information with the same level of protection as if the Bank were dealing with it.

Access rights

You have a right to access the personal data that is held about you. To obtain a copy of the personal information the Bank holds, you should write to the Data Protection Officer at our address. We will respond to you within forty days of receipt of the request and the Bank will charge the statutory rate for this service, which at present is £10. If there are any inaccuracies in the information we hold about you, please notify us of this in order that we may correct the information we hold about you.

If you have any comments or questions about the Bank's Data Protection Policy please contact the Data Protection Officer at the Bank's address.

Glossary:

"Bank", "us" or "we" means Investec Bank plc.

"Investec Group" means the Bank, Investec plc and Investec Limited (a company registered in South Africa) together with the holding companies (and other subsidiaries thereof) and any direct or indirect subsidiaries of those three companies.

"our address" means 2 Gresham St, London, EC2V 7QP.

"you" means a person or entity of any kind including any partnership or charity (along with its directors, officers, connected persons and relevant parties) and "your" is to be interpreted similarly.