To give you the best possible web experience, this site uses cookies. By using this site you agree to our use of cookies. For information about cookies and how you can disable them, please visit our cookie policy page.

Funding Solutions for Your Business

time for a real change in the way you can do business

Independent Financial Specialists

secure the most appropriate funding available for you

Privacy Policy


How we use your personal Information

This privacy notice is to let you know how we look after your personal information.

This includes what you tell us about yourself, what we have learnt about you as a customer and any choices you have given us about any future contact.

This notice explains how we do this and informs you about your privacy rights and how the law protects you.


HCF Commercial Finance is a commercial mortgage broker and is not a Lender.

The company is registered with the Information Commissioner’s Office (ICO) and is the Data Controller of the information you provide.

You can contact us about any general data enquiry by email to, or by writing to the Data Protection Officer, 61 Marshfield Road, Castleton, Cardiff CF3 2UW.

How does the law protect you?

As well as our Privacy Policy, your privacy is also protected by law.

This section explains how it works.

Data Protection Law states that we are allowed to use personal information only if we have a proper reason to do so. This includes sharing your information with third parties. The law states we must have one or more of these reasons:

  1. To fulfil a contract we have with you
  2. When it is our legal duty
  3. When it is in our legitimate interest
  4. When you have consented to it

A legitimate interest is when we have a business or commercial reason to use your information. But even then, it must not unfairly go against what is right and best for you.

Your rights

Your personal data is protected by legal rights which include your rights to:

  • Object to our processing of your personal data
  • Request that your personal data is erased or corrected
  • Request access to your personal data

For more information, please contact us on the contact details above.

Under General Data Protection Regulations (GDPR) which became effective on 25th May 2018, you also have the right to complain to the ICO,, which regulates the processing of personal data.

How we use your personal information

We will use your personal information under our fair processing policy to manage our relationship with you and/or your business, develop new ways to provide service for our customers and to grow our business in an efficient and proper way, develop and carry out marketing activities and to study how our customers use our services.

We also use personal information to manage how we work with other companies that provide services to us and our customers. This will be to:

  • Detect, investigate, report and seek to prevent financial crime
  • Manage risk to us, our customers and any of our partnering businesses
  • Obey laws and regulations that apply to us
  • Respond to complaints and seek to resolve them
  • Exercise our rights set out in business agreements

When we may use your personal information

We will use your personal information for fulfilling contracts and business agreements we have with you and for what we consider to be our legitimate interests or our legal duty. Legitimate reasons when we may use your personal information include maintaining our records and managing our relationship with you, our customer, including advising you of new products or key events in the products that you already have. For anything else, we will only use your personal information with your consent.

What type of Personal Information will be collected?

In order that we can find the right solution for you, we need to collect personal information about you and any co-directors/partners should the borrowing be via a company or partnership. These will include (but not limited to) your name and address, occupation, date of birth, contact details and financial details.

Additional, we may need to collect sensitive personal data for some products or to comply with legislation. We will only collect and use these types of data if we are specifically required to:

  • Racial or ethnic origin
  • Religious or philosophical beliefs
  • Genetic and bio-metric data
  • Health data including gender
  • Criminal convictions and offences

We will only collect the information we require to progress your case and only collect and process sensitive personal data where it is essential fo finding the product you have requested. We will not explicitly request your consent to process this information as it is required by us to perform the service we have agreed to. If you do not want us to use and where necessary, share this information, we will be unable to help you.

Who provides the Personal Information?

The majority of your personal data will be collected directly from you, from information you enter into our website, details of telephone calls, email correspondence and completion of application forms. When required, we may collect personal information about you from external sources such as Companies House.

Who we share your Personal Information with?

We will share your personal information with Lenders to supply the services/products that have been recommended. We may also share your personal information with other organisation when required, such as:

  • Agents for the collection of amounts owed
  • HMRC, regulators and other authorities
  • UK Financial Services Compensation Scheme
  • Companies that we introduce you to
  • Companies that you ask us to share your data with

Credit Reference Agencies

We do not carry out credit checks with Credit Reference Agencies.

This is carried out by the Lenders that are approached on your behalf.

Fraud Prevention

Before we recommend any service/product, checks are undertaken for the purpose of preventing fraud and money laundering including verifying your identity.

When we process your personal data, we do so on the basis that we have a legitimate interest in preventing fraud and money laundering in order to protect our business and to comply with laws.

How we will keep your personal information secure

We have strict procedures for how and where we store and share your personal data, that comply with industry practices for both electronic and paper formats.

Sending data outside of the EEA

We will only send your data outside of the European Economic Area (“EEA”) to comply with a legal duty.


We can only use your personal information to send you marketing messages if we have either your consent or a “legitimate interest”. A legitimate interest is when we have a business or commercial reason to use your information in a way that is fair and potentially beneficial to you.

How long we keep your Personal Information?

We will keep your personal information whilst you are a customer.

After you stop being a customer, we may keep your data for up to seven years so that we can:

  • Respond to any questions or complaints
  • Show we treated you fairly
  • Maintain records according to rules and regulations that apply to us

We may keep your data for longer than seven years if we cannot delete if for legal, regulatory or technical reasons.

How to get a copy of your personal information

You can access your personal information that we hold by emailing us at

Or you can write to us at HCF Commercial Finance, 61 Marshfield Road, Castleton, Cardiff CF3 2UW.

If your Personal Information is incorrect

You have the right to review any information we have about you and to ask us to correct anything that you think is wrong or incomplete. Please contact us (as above) if you want to do this. We will take reasonable steps to check its accuracy and correct it if it was wrong. We will also ensure that if your information has been shared with any third party that they are made aware of the correct information.

What if you want us to stop using your Personal Information

You have the right to object to our use of your personal or to ask us to delete it if there is no need for us to keep it. This is known as the “right to object” and “right to erasure” or the “right to be forgotten”.

Please contact us as above if you wish us to delete your personal information.

There may be a legal or other official reason why we are not able to, but we may be able to restrict its use. This means that it can only be used for certain things, such as legal claims or to exercise legal rights. We would not use or share your information in other ways whilst it is restricted.

You can ask us to restrict the use of your personal information if:

  •  it is not accurate
  • it has been used unlawfully but you don’t want us to delete it
  • it is not relevant any more but you want us to keep it for use in legal claims
  • you have already asked us to stop using your data but are waiting for us to tell you if we are allowed to keep using it

How to withdraw your consent

You can withdraw your consent for us to use your personal data at any time. Please contact us at any time if you want this. This action will restrict us in providing any service/product to you. If this is the case, we will tell.

How to Complain

Please let us know if you are unhappy with how we have used your personal information.

You can contact us by:


General Browsing

Generally, you can browse through our web-site without giving us any information about yourself. This means that, unless you voluntarily and knowingly provide us with personal data, we will not know your name, your e-mail address, or any other information identifiable to you.

Providing us with your Personal Data and Protecting your Personal Data
Certain features on our website require that you provide us with personal data. For example, you might be asked to provide email addresses in order to receive or be placed on our mailing list. Providing us with this information is voluntary, and is only recommended if you wish to have access to those features. We treats any data that you voluntarily provide us with as confidential.

Preventing Third-Party Access to your Personal Data
In most cases, we do not allow third parties to access any of your personal data that we have on store without your consent. See Legal Issues, below, for exceptions.

Technical Information

IP Addresses
Computers, which browse the Internet, are given an IP Address that identifies them throughout their browsing session. When you browse our web-site, our servers log an entry for each page you visit with your IP Address. We use IP Addresses to gather anonymous information about which pages of our site are most popular, most frequently visited, etc. However, we do not use IP Addresses to attempt to gather any personal information about our visitors.

For certain areas of this web-site we may use "cookie" technology to identify browsers throughout a visit. The following guidelines dictate our use of cookies:

  • We only use cookies to enable functional elements of our web-site, such as login sessions to restricted areas,
  • The cookies we send to your browser will only be active for the duration of the browsing session which includes your visit to our website
  • We do not attempt to gather information about your personal browsing activity outside of this site with cookies.

Legal Issues
This is a United Kingdom website and is subject to United Kingdom law. We may disclose personal information without your permission when required by law, or in the good faith belief that such action is necessary to protect against harmful activities to our visitors, associates, or property (including this website).