Site Visitors
This notice explains how Fortescue handles personal information for the audience described below. It supplements the Fortescue General Privacy Policy.
For visitors to Fortescue sites, offices and facilities.
Last reviewed and updated 9 October 2025.
What we collect
- Incident details and reports (where applicable).
- Access control records and CCTV footage for safety and security.
- Identity and contact details; visit details (host, purpose, time of entry/exit).
Why we use it
UK/EU/EEA lawful bases:
For our legitimate interests, including —
- Manage access to sites and facilities and keep people safe.
- Prevent, detect and investigate security incidents.
- Investigate incidents and manage insurance/claims.
- Contract — to enter into or perform a contract with you.
- Consent — for example, where you allow publication of images captured at our sites.
- Meet legal and regulatory obligations (e.g., health and safety).
If we can’t get certain access or safety information, we may be unable to grant site access.
Where we get it
- Security providers/building operators.
- Access control systems and CCTV.
Direct — from you (registration forms or reception).
Who we share it with
- Regulators and law enforcement where required by law.
- Insurers and loss adjusters (for incident management).
- Security providers and building/facility operators.
For international transfers and safeguards, see the General Privacy Policy. We do not sell your personal information.
How long we keep it
We keep visitor and security records for as long as necessary to meet safety, security and legal requirements.
© Fortescue — 2025
