Privacy Policy

This Privacy Policy applies to the processing of personal data by all Rio Tinto staff and all the companies in the Rio Tinto Group (which may be described as "Rio Tinto", "Group businesses", "we" or "us" in this Privacy Policy also).

Structure

This Privacy Policy is in two parts. It contains:

  • Part 1: Rio Tinto's Data Privacy Standard which includes 12 Data Privacy Principles that apply whenever and wherever Rio Tinto collects and processes personal data (including but not limited to any personal data processing that occurs through this website). The Data Privacy Standard is Rio Tinto’s organisation-wide privacy policy; and
  • Part 2: Online privacy statement and cookies privacy statement, which sets out additional information about your privacy if you use this website.

A Glossary has been included at the end of the Standard which defines key terms (in bold).

Questions and contact information

If you have any questions or complaints about your privacy or wish to exercise your rights as a data subject, please refer to Data Privacy Principle 8 in the Data Privacy Standard (below) and:

  • if you are a Rio Tinto staff member, contact the Data Privacy Lead for your region; or
  • otherwise, contact your local Rio Tinto office; or
  • email us at AskE&C@riotinto.com. Your correspondence will be forwarded to the Rio Tinto Data Privacy Lead for the relevant region to consider.

This Privacy Policy may be updated from time to time. This Privacy Policy was last updated in June 2022.