Community Stakeholders and Land Access

This notice explains how Fortescue handles personal information for the audience described below. It supplements the Fortescue General Privacy Policy.

For Traditional Owners, community members and representatives we engage with in relation to land access, cultural heritage, approvals and community relations.

Last reviewed and updated 9 October 2025.

What we collect

• Images, audio/video captured at events or on-site; site access logs and CCTV (where applicable).
• Community investment/grant applications (contact details, eligibility evidence, and payment details where required for approved payments).
• Community feedback and complaints, investigations and outcomes.
• Land access and cultural heritage information (permits, consents, survey results), collected and used in accordance with law and agreed protocols.
• Engagement and consultation records (attendance, notes, agreed actions, correspondence).
• Identity & contact details; role/affiliation (e.g., Traditional Owner group, representative body, community organisation).

Why we use it

UK/EU/EEA lawful bases:

• For our legitimate interests, including — 

  • Engage and consult with communities and representative bodies.
  • Respond to enquiries and complaints.
  • Manage incidents and claims; ensure safety and site security.
  • Plan, deliver and report on community programs and social performance (using de‑identified or aggregated data where possible).
  • Assess and administer land access agreements, heritage surveys/permits and related obligations.
  • Manage relationships and conduct our business.

   

• Contract — to enter into or perform a contract with you.
• Assess and administer community and innovation grants, including eligibility and due‑diligence checks (for example, ABN/incorporation or sanctions/beneficial‑ownership checks) and payments.
• Consent — for example, where you opt in to receive updates or allow the publication of identifiable images captured at events.
• Meet legal and regulatory obligations and conditions of approvals.

If we can’t get certain information required by law or agreement (for example, to verify land access or process community grant payments), we may be unable to progress further.
 

Where we get it

• Service providers supporting engagement, heritage, translation, events and security.
• Government registers and other publicly available sources (where relevant).
• Representative bodies (e.g., land councils or prescribed bodies corporate) where appropriate.
• Community engagement and feedback channels (for example, community meetings, surveys/interviews, event registrations, and public submissions to regulatory processes).
• Direct — from you and your authorised representatives.

Who we share it with

• Security providers and building/facility operators (for site access and safety).
• Regulators, government agencies and representative bodies (e.g., land councils/PBCs) as required by law or agreements.
• Professional advisers (lawyers, auditors, insurers) and mediators/arbitrators (if applicable).
• Cultural heritage and environmental consultants and laboratories (if needed).
• Engagement, translation and event providers; land access agents.

For international transfers and safeguards, see the General Privacy Policy. We do not sell your personal information.

How long we keep it

We keep community and land access records for as long as necessary to manage relationships, agreements and approvals, and to meet legal, cultural heritage and reporting obligations. Certain heritage records may require longer-term archiving where required by law or agreed protocols.

Your rights & how to contact us

Your privacy rights and how to contact us: see the General Privacy Policy.

© Fortescue — 2025