Privacy Policy
We are committed to protecting your privacy and ensuring your personal information is handled safely.
Last Updated: 6 January 2026
About Us and Contact Us
Commercial Mortgage Compare is owned and operated by Finspace Group Limited ('we', 'us' and 'our'). We are a limited company registered in England and wales.
www.commercialmortgagecompare.com is responsible for processing the personal information you provide to us and is registered with the Information Commissioners Office in the UK under the UK Data Protection Act 1998 (registration number ZA447275).
Need to contact us?
Visit ico.org.uk for more info about the Data Protection Act, or email us at enquiries@finspace.co.uk.
What Information We Collect
To give you the best service possible, we will need to ask you for certain personal information. We will use this information for security, identification and verification purposes.
When you access our website, we will also collect information about the devices you're using - through web analytics providers. As this involves using technologies such as cookies, please read our Cookies policy.
Rest assured, we only ever collect information that helps us provide our services to you. We will keep your information for as long as is needed and only for the following purposes:
- Legitimate business activities
- Statutory or legal obligations
- Auditing & regulatory purposes
We sometimes need to pass your information on to third parties who provide services to us. We do this on the understanding that they care for your information as carefully as we do, keep it confidential and use it only for the service you have enquired about.
So that we can offer you the best service throughout your relationship with us (either now or in the future), we will hold your personal information securely in our systems. This will include any information provided by you or others (for example, if you're making a joint application) in various ways, including (but not limited to):
Direct Interactions: In applications, emails, letters, phone calls, conversations, registrations, surveys, competitions, and website usage.
Analysis & Security: From analysis used to uniquely identify you to help combat fraud and illegal activity.
Third Parties: From credit reference agencies, mortgage lenders, insurance companies, comparison websites, social networks, and fraud prevention agencies.
Contact Information
When you make an enquiry with us about any of the services we offer, we will ask you to provide some contact information. This may include some or all of the following:
- Full name
- Address
- Contact phone number
- Contact email address
- Requirements
Sensitive Personal Data
For products such as insurance, we will need to collect and process information that the Data Protection Act defines as “sensitive”. This includes details about your health and any criminal convictions you have. If we need to ask for anything like this, we will always explain what information we require and why. Rest assured, we will always process and store this information securely.
Website Usage
When you visit our website or use our online services, we collect certain data automatically. This may include (but isn't limited to) the following:
- how you connect to the internet (including your IP address)
- how you use our site, for example your screen resolution and browser data stored on your device (such as cookies)
- information about the device software you use, such as your internet browser
- location data such as the city or region of the IP address you used when accessing our online services.
Phone Calls
So that we can offer you the best possible customer service, we may monitor or record our phone calls with you. This helps us check we've done what you asked us to do correctly, resolve any queries or issues and train our staff to provide a quality service. We also monitor phone calls for regulatory purposes and to help detect and prevent fraud and other crimes.
Updating your details
If you tell us about changes to your personal details, we will update your records in our database for you. But if you've opened an account or policy with another organisation that we introduced you to, you'll need to contact them personally to make updates.
How We Use Your Information
Storing your personal information helps us improve our products, services and the ways in which we offer them to you - in lots of different ways.
Access & Services
We will need to use your information to accept you as a new or returning customer.
Updates & Changes
We'll let you know about significant changes to our products, terms or privacy policy via email, text or website.
Improving Support
We use your info to provide context so we don't have to start from scratch every time you contact us.
Recommendations
We may identify other products you might like, but only tell you if you give us consent.
If you no longer wish to receive such information from us, you can update your preferences by contacting us.
Fraud Prevention
We may use your information for fraud investigation, detection and prevention measures and in order to provide suitable security for your account and your information that we hold.
Staff Training
To ensure you have the best possible experience when you contact us, we will use your information to ensure our team has the knowledge and expertise to meet your needs.
Reporting and Analytics
Knowing more about who our customers are can help us improve the products we offer. So we will use your data for reporting and analytical purposes.
Your data together with that of other users may be aggregated for the building of statistical and analytical tables. At no time will your data be individually identifiable in such tables.
Improve Service
Collecting data on how you use our websites helps us to better understand your interests. It can also help us detect if someone else is trying to access your account or use the services that we're providing you.
Statutory Records
Like any business, we need to make sure we keep comprehensive and up to date records of the ways we process your information - along with the day-to-day administrative tasks that go into running our business.
Resolving Complaints
Our goal is to make sure all our customers are happy with our service. But we're only human. So if you do make a complaint, we will use the information we have about you to help us resolve things for you.
Regulatory Compliance
As you might expect, the law requires us to comply with lots of regulations - including ones about processing customer information. Where necessary, we use your personal data to allow us to fulfil our legal requirements.
Improve Communication
We want to make all our communications as useful to you as possible. To achieve this, we may use performance tracking technology within our emails to capture information including (but not limited to) the time and date you open our emails and the type of device you used to open them.
Uses Not Described
If we ever have to use your personal information for any purposes that we have not described in this policy, you'll hear from us. We will let you know exactly what we will use it for before we go any further and, where appropriate, obtain your consent.
Legal Grounds for Handling Personal Information
Data protection laws require that, to process your personal data, we must meet at least one prescribed condition for it. We rely on the following conditions for the activities we carry out.
Necessary for performance of a contract or to comply with the law
In most cases, you will provide the information because you want to use our services. This means that our use of your information is governed by contract terms.
- Enabling access to our website and services
- Notifying of changes to products, terms or policy
- Identity verification
- Customer support & communications
- Managing offers & promotions
- Financial reviews & risk assessment
Consent
Where we collect other information from you - or when third parties do so for us - we always ask for your consent first.
Our “Legitimate Interests”
In the United Kingdom, organisations can use personal information where the benefits of doing so are not outweighed by the interests or fundamental rights or freedoms of individuals. The law calls this the “Legitimate Interests” condition for processing.
Preventing crime: Helping to prevent and detect crime such as fraud and money laundering.
Legal compliance: Complying with legal and regulatory requirements (e.g. FCA).
Staff training: Using information to train our staff to meet your needs.
Marketing services: Processing information to help us run our business while safeguarding data.
Reporting & Analytics: Analyzing service to provide improvements.
Tracking activity: Understanding usage to improve services.
International Data Sharing
www.commercialmortgagecompare.com is based in the UK. We apply strict safeguards when transferring data overseas, ensuring high-quality data protection standards (e.g. EC approved countries).
Your Rights
To exercise these rights, contact us at enquiries@finspace.co.uk.
Complaints
Information Storage & Disposal
We store your data securely on systems with limited access and regular security reviews. We keep data only as long as needed for services, legal obligations, or dispute resolution. When no longer needed, it is securely disposed of.
Changes to Policy
We can update this Privacy Policy at any time. Please check regularly.
Social Media
Like every business, we want to understand our customers even better. To do this, we may research what people are saying about us in public comments made on social networking sites such as Twitter and Facebook.