Global Privacy Statement
Redpath Group is committed to protecting your privacy. This Privacy Statement explains how Redpath Group collects, uses, processes, manages and discloses individuals' personal data and provides information about individuals' rights in relation to their personal data.
This Statement applies to personal data collected through our website and other external interactions, including communications with applicants, customers, suppliers and other business contacts. It does not cover personal data of Redpath's employees, contractors and internal users, which is addressed in Redpath's Employee Privacy Policy and related internal notices, where applicable.
By submitting your personal data to us, using our website or otherwise interacting with Redpath Group, you acknowledge that your personal data may be processed as described in this Statement and our Global Privacy Policy, subject to applicable law. Where consent is legally required, Redpath will obtain it through an appropriate process.
What kind of Personal Data does Redpath collect?
We collect personal data, such as your name, contact information, email address, recruitment information and other information you provide when communicating with us by phone, mail, email or through our website.
We may also collect technical and device information, such as IP addresses, browser information and the date and time of website visits.
Where applicable, we may process authentication information, access records, acknowledgements, communications metadata and cybersecurity-related information associated with the use of our website, systems or communications services.
What are the purposes for the collection, use and disclosure of your personal data?
Redpath Group may process your personal data for the following purposes:
- Applying for employment or requesting products or services.
- Recruitment and related administrative activities.
- Providing services, responding to inquiries and managing business relationships.
- Communicating information regarding Redpath's products, services and business activities, including promotional communications where permitted by applicable law.
- Monitoring and enhancing the security of our website, information systems, physical premises and assets.
- Authenticating users, controlling access to digital services and maintaining records of authorizations, acknowledgements and preferences.
- Detecting, preventing, investigating and responding to cybersecurity risks, including phishing, malware, fraud, unauthorized access and other security incidents, using automated or AI-assisted cybersecurity and email security technologies where applicable.
- Supporting data protection, regulatory compliance, audit activities, records management, information governance and lawful business operations.
- Other purposes for which we have obtained your consent or which are permitted or required by applicable law.
Where applicable, Redpath relies on appropriate legal grounds for processing, including consent, contractual necessity, compliance with legal obligations and legitimate interests, subject to applicable law.
With whom do we share your personal data?
Redpath Group may share personal data with authorized service providers, professional advisers, auditors and other third parties where necessary for legitimate business activities or as permitted or required by applicable law.
These may include providers of website hosting, infrastructure, communications, identity and access management, data governance, compliance, analytics and cybersecurity services.
Certain automated or AI-assisted cybersecurity tools may analyze communications and related technical information for the limited purpose of detecting, preventing, investigating and responding to cybersecurity threats. These tools are not intended for general surveillance of communications unrelated to cybersecurity.
Redpath Group does not sell personal data. We require service providers processing personal data on our behalf to maintain appropriate confidentiality, security and data protection safeguards.
Personal data may also be disclosed in connection with a lawful corporate reorganization, merger, sale, assignment or other transfer of business assets, subject to applicable legal requirements.
Where is your personal data located?
Your personal data may be stored or processed in countries where Redpath Group operates or where our service providers maintain facilities, including Canada, the United States, South Africa and the European Union.
Information processed outside your jurisdiction may be subject to applicable foreign laws and lawful requests from governmental, judicial or regulatory authorities.
Redpath Group applies appropriate contractual, technical and organizational safeguards to international processing and transfers of personal data in accordance with applicable legal requirements.
Does Redpath Group use cookies?
Redpath Group uses cookies and similar technologies to support website functionality, manage preferences and analyze website usage. Where applicable, third-party technologies may also support analytics or advertising activities.
Redpath will provide information about the use of cookies and obtain consent where required by applicable law. Visitors may manage applicable cookie preferences through available website controls or browser settings.
For further information, please refer to our Cookies Policy.
How long does Redpath Group retain your data?
Redpath Group retains personal data for as long as reasonably necessary for the purposes for which it was collected, to meet applicable legal or contractual obligations, or for other legitimate purposes permitted by law.
Security, access, authentication, acknowledgement, audit and cybersecurity records may be retained for additional periods where reasonably necessary for investigations, compliance, legal protection or security requirements.
Personal data is securely disposed of in accordance with applicable retention policies and legal requirements.
Data subject rights
Subject to applicable law and relevant conditions, you may have the right to:
- Request access to and correction of your personal data.
- Withdraw consent where processing is based on consent.
- Object to certain processing activities.
- Request deletion or restriction of processing.
- Request data portability.
- Object to certain decisions made exclusively through automated processing that significantly affect you.
- Lodge a complaint with an appropriate data protection authority.
Requests may be submitted using the contact details below.
How does Redpath Group protect your personal data?
Redpath Group maintains appropriate technical and organizational measures to safeguard personal data against unauthorized access, disclosure, alteration or loss.
These measures may include access controls, authentication, encryption, security monitoring, audit logging, data protection technologies, cybersecurity threat detection and incident response procedures.
Access to personal data is restricted to authorized personnel and service providers with a legitimate business need, subject to applicable confidentiality, security and privacy obligations.
Contacting us about your privacy
For questions, concerns or requests regarding the processing of your personal data, please contact:
Chief Compliance Officer and Privacy Officer
privacy@redpathmining.com
Redpath Group may update this Privacy Statement to reflect changes in applicable legal requirements, technology or data processing practices.
For further information, please consult Redpath Group's Global Privacy Policy, Version 3.0, available on our website.
Policy History/Revision Dates:
Origination Date: June 2021
Last Amended Date: June 2023
Current Version Date: June 2026