Finding better ways to provide the materials the world needs
Purpose & Values
The drive for innovation and continuous improvement is at the heart of our purpose
Business Strategy
Climate change is at the heart of our business strategy
Innovation
Finding better ways to do things is in our DNA
We supply the metals and minerals used to help the world grow and decarbonise
Iron Ore
The primary raw material used to make steel, which is strong, long-lasting and cost-efficient
Lithium
The lightest of all metals, it is a key element needed for low-carbon technologies
Copper
Tough but malleable, corrosion-resistant and recyclable, and an excellent conductor of heat and transmitter of electricity
Bringing to market materials critical to urbanisation and the transition to a low-carbon economy
Oyu Tolgoi
One of the most modern, safe and sustainable operations in the world
Rincon Project
A long-life, low-cost and low-carbon lithium source
Simandou Project
The world’s largest untapped high-grade iron ore deposit
Providing materials the world needs in a responsible way
Climate Change
We’re targeting net zero emissions by 2050
Tailings
Details of our tailings facilities can be found on our interactive tailings disclosure map
Nature solutions
Our nature-based solutions projects complement the work we're doing to reduce our Scope 1 and 2 emissions
We aim to deliver superior returns to our shareholders while safeguarding the environment and meeting our obligations to wider society
Acquisition of Arcadium Lithium
Bringing our scale, development capabilities and financial strength to the Arcadium Lithium portfolio
Get the latest news, stories and updates
Things you can't live without
Our podcast discussing what needs to happen to create a sustainable future for the everyday items we have come to rely on
The 'f' word of innovation
How unlocking innovation requires a change of mindset
Reducing titanium oxide's carbon footprint
Our BlueSmelting technology could drastically reduce carbon emissions during ore processing
Discover more about life at Rio Tinto
Graduates and students
If you want to drive real change, we have just the place to do it
Empowering families with flexibility
Supporting new parents of any gender with equal access to parental leave
Available jobs
Join our team
This Privacy Statement provides you with information on how Rio Tinto Group of Companies (“Rio Tinto”, “we”, “us”, “our”) collects, uses, processes or discloses Personal Data and Sensitive Data that we may obtain from you. Rio Tinto values your trust and is committed to the responsible management, use and protection of your Personal Data.
The Rio Tinto company with whom you engage is the controller of your Personal Data.
“Affiliate” means an entity linked, or connected with, or controlled by Rio Tinto PLC or Rio Tinto Limited.
“Applicable Laws” means the applicable privacy and data protection legislation in your home jurisdiction.
“External stakeholders” means former, current, and prospective customers, suppliers of goods or services, government or public officials, or other stakeholders Rio Tinto interacts with, as part of its business activities.
“Personal Data” means any information relating to an identified or identifiable natural person, including sensitive data as defined under Applicable Laws. In this Privacy Statement, our use of the term “Personal Data” includes other similar terms under Applicable Laws, such as “Personal Information” and “Personally identifiable information. In South Africa only, Personal Data also includes information of companies.
“Privacy regulator” means the public authority that operates independently and is tasked with making sure local data protection laws are followed.
“Rio Tinto Group of Companies” means any affiliate or subsidiary of Rio Tinto PLC or Rio Tinto Limited.
“Sensitive Data” means Sensitive Data, that may include racial or ethnic origin, religious or philosophical beliefs, political opinions, genetic data, biometric data, health, sexual orientation, criminal convictions, and or other information that receives special protections under Applicable Laws. In this Privacy Statement, our use of the term “Sensitive Data” includes other similar terms under Applicable Laws, such as “Sensitive Information”.
“Subsidiary” means a company entirely or partially owned and managed by another company referred to as the parent company under Rio Tinto Group of Companies.
We may collect, use, process and disclose the following Personal Data from you, or others.
We may collect, use, process and disclose the following Personal Data from you.
Whilst our services are not directed to children, in some instances we may collect, use, process, and disclose Personal Data from children of all ages. For those that aged 13 years and over, in accordance with Applicable Laws, they will be afforded the same rights as an adult, including the right to access, update, and object to the processing of their Personal Data. We recognise our responsibility to provide suitable privacy protection to Personal Data we collect from children under 13 years, which will only be collected where they attend with a parent or guardian, for Rio Tinto organised social events, such as Family Days. We put in place several measures to protect that child’s Personal Data such as:
Please note in China, only children aged 14 years or over will be afforded the same rights as an adult.
In accordance with our health and safety requirements and or Applicable Laws, in some circumstances, such as visiting certain Rio Tinto sites, or attending our events, we will ask for your consent for us to collect, use, process and disclose your Personal and/or Sensitive Data to be able to conduct medical assessments, or undertake drug and alcohol screenings, and or to manage and support your recovery from injury and illness. In some circumstances, we may ask you for your medical history before assisting us in undertaking heritage field work. This is so we can assess your fitness in health and wellbeing, to be able to travel and attend these locations.
Where we have obtained your consent to our collection, use, processing and disclosure of your Personal or Sensitive Data, you can withdraw your consent at any time, but the withdrawal of your consent may impact your ability to engage with us, or be able to visit our Rio Tinto sites, or attend our events, and/or our ability to help you recover from your injury or illness.
We may process your Personal Data for the following purposes:
Where we rely on consent as the legal bases for processing your Personal Data, you have the right to withdraw your consent at any time, by emailing aske&c@riotinto.com, or clicking on the opt out or unsubscribe button.
We may share your Personal Data with the following:
For details on Personal Data or Sensitive Data transfers for China, Mongolia or South Korea residents, please refer to table under section Additional Information for Mainland China, Mongolia, and South Korea Residents.
As defined under California privacy laws, we do not sell or share Personal Data with third parties.
We may transfer some of your Personal Data outside of your home jurisdiction. In these circumstances your Personal Data will only be transferred on one of the following bases:
Rio Tinto, at all times, maintains technical, security and organisational measures intended, as required under Applicable Laws, to protect your Personal Data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access.
If you do not provide your Personal or Sensitive Data where required, this may impact your ability to engage with us, or be able to visit our Rio Tinto sites, or attend our events. Where we have obtained your consent to our collection, use, processing, or disclosure of your Personal or Sensitive Data, you can withdraw your consent at any time, but the withdrawal of your consent may impact your ability to engage with us, or be able to visit our Rio Tinto sites or attend our events.
Depending on your country of residence, you may have a number of rights under Applicable Laws, such as; accessing, rectifying, deleting, objecting or restricting your Personal Data, as well as the right not to be discriminated against. You may also nominate an individual who would be able to exercise your rights. If you would like to exercise any of these rights, including a request for access to your Personal Health Information (PHI) under The Health Insurance Portability and Accountability Act 1996 (“HIPAA”) (for US only), please contact us at aske&c@riotinto.com. Please note, however, these rights are not absolute.
We will only retain your Personal Data for as long as necessary to fulfil the purpose for which it is processed or as required by Applicable Laws or any litigation hold, to which we are subject, including to meet any governance or reporting requirements.
This section applies to Personal Data, referred to in this section as “Personal Information” as defined in the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), whether collected offline or online. This section does not address or apply to our handling of Personal Information that is exempt under the CCPA, such as publicly available information or deidentified/aggregated information.
The table below, identifies the categories of Personal Information about California residents that we collect and have collected in the prior twelve (12) months, as well as the categories of third parties to whom we disclosed the information for a business or commercial purpose. In some cases (such as where required by law), we may ask for consent or give you certain choices prior to collecting or using certain Personal Information.
Disclosed to following recipients for operational business purposes
Identifiers, such as name, contact information, online identifiers, IP address, or email address
Categories of personal information described in Cal. Civ. Code § 1798.80, such as name, signature, photograph, contact information, financial information, health information.
Internet or other electronic network activity information, such as browsing history, search history, information regarding your interaction with our and other websites or online platforms.
Commercial information, transaction information, purchase history and financial details
Geolocation data, such as device location, your physical location, and IP location.
Audio, electronic, visual and similar information , such as images and audio, video or call recordings created in connection with our business activities.
Sensitive Information, such as health information, race or ethnicity, or information required for investigation of an incident or allegation (which may include Sensitive Information).
Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics.
We do not “sell” or “share” (as defined by the CCPA) Personal Information or Sensitive Information related to California residents.
California residents have the following rights under the CCPA:
You may exercise your rights under Applicable Laws or raise any concerns by emailing aske&c@riotinto.com or by phoning our free toll number +1 800 872 6729. Please note, however, these rights are not absolute.
We do not disclose Personal Information to third parties for their direct marketing purposes.
If you want to make a request as an authorized agent on behalf of a California resident, you may use the submission methods noted above. As part of our verification process, we may request that you provide, as applicable, proof concerning your status as an authorized agent, in addition, we may require the individual on whose behalf you are making the request to verify their own identity.
In China, your Personal Data will be collected by one or more of the following entities:
In Mongolia, your Personal Data will be collected by one or more of the following entities:
We collect a range of Personal Data about you as described above in this Privacy Statement. Reference to Personal Data shall, unless the context otherwise requires, be deemed to include Sensitive Data (as defined by Applicable Laws in your jurisdiction). For such purposes, in China, bank account numbers, credit checks, and government issued ID would be considered Sensitive Data, whereas “race” and “gender” is not considered Sensitive Data (in China). For more information, please contact aske&c@riotinto.com.
Rio Tinto delegates processing of your Personal Data as follows:
Recipient
Purpose
Personal Data
Retention
Rio Tinto Group of Companies
Business reasons, on a need-to-know basis
Name, Job title, Company name and contact details, telephone number, email address
In accordance with Applicable Law and Rio Tinto’s Retention Policy
Rio Tinto Group of Companies (managed corporate and operational sites)
Access control
Name, job title, company name and contact details, telephone number, email address
As above
Microsoft Office 365 (US)
Communication and collaboration, SharePoint, Emails,
RTBS Server (Australia)
Supplier and customer information database
Global Website (Australia, US)
Website management
Name, telephone number, email address, usage data, such as your interaction with our Websites or microsites, Geolocation data: such as precise geographic location information from your use of our Websites or microsites. Visitors to Rio Tinto Websites, or microsites have the option into opting into Cookies via their cookies preferences.
Enablon (US)
Environment, Health and Safety software
Limited contact information of inputter of incident
Navex (EU)
Incident Management and Reporting Software (whistleblowing hotline)
Limited Personal Data of reporter (if provided - usually anonymous), including Personal Data (including Sensitive Data dependent on the report or conduct alleged) of individual that is the subject of the report, and others that may be involved
In some cases, and depending on your home jurisdiction, we may provide you with additional notices about our information collection practices (“Supplementary Privacy Notices”). These Supplementary Privacy Notices apply in addition to this Privacy Statement. Where a Supplementary Privacy Notice conflicts with this Privacy Statement, the Supplementary Privacy Notice shall prevail.
Where Rio Tinto provides you with electricity supply services, please refer to the Supplementary Privacy Notice for Electricity Supply Services.
We may use Cookies and similar technologies that aim to collect and store information when you visit our Websites or microsites. You can control and manage your Cookie preferences by changing the settings on your browser. However, if you disable Cookies and similar technologies, some features may not work as intended. For more detailed information about the specific Cookies and similar technologies we use and your choices, please see below. For a list of the different types of Cookies and similar technologies used on our Websites, visit the preference/settings in the Cookie banner of the Website you are viewing.
Cookies are a standard feature of websites that allow us to store small amounts of data on your computer about your visit to and use of the Services. Cookies help us learn which areas of the Services are useful and which areas need improvement. For this purpose, we also use technologies similar to Cookies, such as Flash Local Shared Objects (also known as Flash Cookies) or pixel tags, as further detailed below.
Strictly Necessary Cookies: These enable you to navigate our Websites. Without these absolutely necessary Cookies, our Websites will not perform as smoothly for you as we would like it to.
Functional Cookies: These collect information about your choices and preferences, and allow us to remember language or other local settings and customize for you accordingly.
Performance Cookies: These are analytics Cookies which collect information about your use of our Website and enable us to improve the way it works. They can show us which are the most frequently visited pages on our Websites.
Targeting and Social Media Cookies: These Cookies collect information about your activities on our Websites (or other Sites) to provide you with targeted advertising. Social media Cookies collect information about social media usage.
Google Analytics: Some of our Websites, may use Google Analytics services, as provided by Google, Inc. (“Google”), which uses Cookies and similar technologies to collect and analyse information and report on activities and trends. This service may also collect information regarding the use of other Websites, applications and online resources. You can learn about Google’s practices by going to google.com/technologies/partner-sites, and you can opt out by downloading the Google Analytics opt-out browser add-on, available at tools.google.com/dlpage/gaoptout.
Your Choices About Our Use of Cookies and Similar Technologies: Depending on the applicable law of your jurisdiction (such as the EU/EEA, or the UK), we may ask for your Consent for placing Cookies on your device, with the exception of strictly necessary Cookies. You can change your settings for Cookies and similar technologies by visiting the preference/settings in the Cookie banner of the Website you are viewing.
In addition, you can also avoid Cookies being placed on your device, by configuring your browser settings. Please refer to allaboutcookies.org for information on commonly used browsers. Please note, however, if some Cookies are disabled, not all features of our Websites function as intended.
If you have any questions or concerns regarding our use of your Personal Data, or if you wish to exercise any of your rights described in this Privacy Statement, please contact us by emailing aske&c@riotinto.com, or by contacting the data protection officer responsible for your country or region, if applicable. You also have the right to lodge any complaints you may have regarding Rio Tinto’s processing of your Personal Data to us or the privacy regulator for your country or region.
If you have any questions or concerns regarding our use of your Personal Information, or if you wish to exercise any of your rights under CCPA, please contact us by emailing aske&c@riotinto.com, or by phoning our free toll number +18008726729.
This Privacy Statement may be changed over time. Please visit this page regularly for possible changes.
Our Websites and microsites may contain links to Websites or applications we do not own or control. Our Privacy Statement does not apply to those. Please read the privacy statements on those Websites or applications if you would like to find out how they collect, use, process, and disclose your Personal Data.
Any translation is for reference only, and in the event of any conflict, the English version will prevail.
How we process personal data provided or obtained through this website.
With the exception of the use of cookies, Rio Tinto generally does not seek to collect personal data through this website. However if you choose to provide personal data to Rio Tinto through this website (for example, by sending us an email), we will process that personal data to answer your query and if relevant, to manage our business relationship with you or your company. We won't process that personal data for other purposes except where required to meet our legal obligations or otherwise as authorised by law and notified to you.
If you choose to subscribe to our media releases or other communications, you can unsubscribe at any time (by following the instructions in the email or by contacting us).
With your consent, our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.
As some data privacy laws regulate IP addresses and other information collected through the use of cookies as personal data, Rio Tinto’s processing of such personal data needs to comply with its Data Privacy Standard (see Part 1 of our Privacy Policy), and also applicable data privacy laws.
With the exception of the use of cookies (explained below), Rio Tinto generally does not seek to collect personal data through this website. However if you choose to provide personal data to Rio Tinto through this website (for example, by sending us an email), we will process that personal data to answer your query and if relevant, to manage our business relationship with you or your company. We won't process that personal data for other purposes except where required to meet our legal obligations or otherwise as authorised by law and notified to you.
Part 1 of this Privacy Policy contains the Rio Tinto Data Privacy Standard, which provides an overview of Rio Tinto’s approach to personal data processing. There is additional information in the appendices to the Data Privacy Standard, including information about disclosures, trans-border data transfers, the exercise of data subject rights and how to make complaints or obtain further information relating to Rio Tinto’s processing of your personal data.
If you choose to subscribe to our media releases or other communications, you can unsubscribe at any time (by following the instructions in the email or by contacting us at digital.comms@riotinto.com).
With your consent, our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.
A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.
As some data privacy laws regulate IP addresses and other information collected through the use of cookies as personal data, Rio Tinto’s processing of such personal data needs to comply with its Data Privacy Standard (see Part 1 of this Privacy Policy), and also applicable data privacy laws.
These Cookies are used to provide a better user experience on the site, such as by measuring interactions with particular content or remembering your settings such as language or video playback preferences.
These Cookies allow us to analyse site usage in order to evaluate and improve its performance. They help us know how often you come to our site and when, how long you stay and any performance issues you experience whilst you are on our site.
These Cookies are used by advertising companies to inform and serve personalised ads to your devices based on your interests. These Cookies also facilitate sharing information with social networks or recording your interactions with particular ads.