Jump to content

This notice explains how Fortescue handles personal information for the audience described below. It supplements the Fortescue General Privacy Policy.

For individuals who work for or represent our suppliers, contractors, joint‑venture partners and other business contacts.

Last reviewed and updated 9 October 2025.

At a glance

  • What we collect

    Work contact details, role and authority, communications and meeting records, due diligence/KYC information (where required), and contract/payment details.

  • Why

    To source or provide goods and services, manage contracts, maintain relationships, and meet legal and compliance obligations.

  • Sharing

    Related bodies corporate, contractors/suppliers/customers, payment processors, and professional advisers.

What we collect

  • Contract, ordering and payment details.
  • Communications and meeting records; due diligence/KYC information (where required by law).
  • Work identity and contact details; role, authority and signature specimens (where relevant).

 

Why we use it

UK/EU/EEA lawful bases:

  • For our legitimate interests, including —
    • Onboard and manage suppliers, customers and partners.
    • Negotiate and perform contracts.
    • Conduct due diligence and meet legal/compliance obligations (including sanctions, modern slavery and anti‑bribery laws).
    • Maintain records and manage disputes.
    • Protect people, premises and data (including IT/network monitoring and fraud prevention).
       
  • Legal obligation — to meet legal and regulatory requirements.
  • Contract — to enter into or perform a contract with you.
  • Consent — for example, where you opt in to receive updates or allow publication of images.
  • Maintain records and manage disputes.
  • Conduct due diligence and meet legal/compliance obligations (including sanctions and anti‑bribery laws).

If we can’t get certain information needed for onboarding, delivery or payment, we may be unable to engage or continue our relationship.

 

Where we get it 

  • Internal systems that record interactions and contracts.
  • Public registers and sanction screening lists (where required by law).
  • Direct — from you and your employer.

 

Who we share it with

  • Professional advisers and regulators where required.
  • Sanctions and screening providers (where required by law).
  • Payment processors and banks (for transactions).

For international transfers and safeguards, see the General Privacy Policy. We do not sell your personal information.

 

How long we keep it

We keep supplier, customer and partner records for as long as needed to manage the relationship, contracts and compliance obligations, and to meet accounting and reporting requirements.

© Fortescue — 2025

Looking for another Privacy Notice?

Visit our Privacy Hub to find the notice that applies to you. 

Visit our Privacy Hub