Privacy Policy

1. Introduction & Data Controller

commercialmortgagedealer.com is a website operated by Hello Leads Ltd ("we", "our", "us"), a private limited company registered in England & Wales under Company Registration Number 10286382, with its registered office situated at 1 Llandegfedd Close, Cardiff, Wales CF14 9HD. Learn more about our company structure and management on our About Us page.

commercialmortgagedealer.com is a trading style of Hello Leads Ltd. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Hello Leads Ltd acts as the Data Controller in respect of information submitted through this website. We are registered with the Information Commissioner's Office (ICO) under registration number ZB924628.

Hello Leads Ltd operates as an independent commercial debt origination, lead generation, and introducer platform. We specialise in collecting commercial borrowing requirements from UK corporate entities and matching those enquiries with appropriate lenders across our commercial finance services, including commercial mortgages, bridging loans, and development finance.

2. Information We Collect

When you submit a quote request or finance enquiry via our corporate contact forms, calculators, or direct communication channels, we collect the specific criteria necessary to evaluate your commercial borrowing requirements and identify suitable lending partners:

A. Corporate & Entity Data

• Company Name and registered business address
• Companies House Registration Number (CRN)
• Corporate Structure (e.g. Trading Limited Company, Special Purpose Vehicle (SPV), Limited Liability Partnership (LLP), or Holding Company)
• Trading history, sector, and general commercial profile

B. Director & Contact Person Data

• Full Name of the authorised officer, company director, or finance manager submitting the enquiry
• Business Email Address
• Direct Telephone Number (mobile or landline)

C. Commercial Borrowing Criteria & Project Specifics

• Finance Category Required (e.g. Commercial Mortgage, Bridging Loan, Property Development Finance, Commercial Buy-to-Let)
• Requested Loan Amount (e.g. £250,000 to £50,000,000+)
• Estimated Property or Asset Valuation and anticipated Loan-to-Value (LTV) requirement
• Target Completion Timeframe (e.g. immediate, within 1 month, 1–3 months, or exploratory)
• Property / Project Notes provided by you (such as asset type, location, lease details, current occupancy, or planned works)

D. Technical & Analytical Information

• IP address, browser type and version, and operating system
• Time and date of visit, referral URL, and interaction logs
• Essential cookies necessary for security and session integrity

3. How We Use Your Information (The Matching Process)

We collect and process your enquiry criteria for specific, transparent commercial purposes:

• Criteria Assessment & Lender Matching: We evaluate the commercial parameters supplied in your enquiry (including loan quantum, property sector, LTV, corporate structure, and timeframe) against the active underwriting criteria of our panel of over 100 UK commercial lenders, challenger banks, and specialist finance partners to identify the most competitive and suitable funding options.
• Introductions to Matched Lenders: Where appropriate, we transmit your borrowing requirements and contact details to matched commercial lenders or specialist debt advisory partners so they can issue indicative terms, heads of terms, or formal quotation proposals directly to your company.
• Direct Communication & Follow-up: Our corporate finance team contacts you by telephone or email to verify submitted criteria, clarify property specifics, discuss indicative terms, and assist your company throughout the introduction.
• Corporate Verification & Anti-Fraud Checks: We cross-reference company details with public registers (such as Companies House) to confirm corporate existence, officer authority, and prevent fraudulent submissions.
• Introducer Administration: We track enquiry progression to administer referral agreements and commission reconciliation with our panel lenders.
• Platform Improvement: We analyse aggregated, anonymised enquiry trends to improve our matching algorithms, website functionality, and service standards.

4. Lawful Basis for Processing (UK GDPR)

Under Article 6 of the UK GDPR, we rely on the following lawful bases to process your corporate and personal data:

5. Sharing Your Information & Third Parties

In order to fulfil our lead generation and introducer matching service, your information may be shared with the following categories of recipients:

• Matched Commercial Lenders & Finance Partners: UK commercial mortgage lenders, specialist bridging funds, development finance providers, and corporate debt advisory partners who match the borrowing parameters you submitted.
• Infrastructure & Technology Providers: Cloud database and hosting infrastructure (Google Firebase / Firestore operating within UK/EU secure data centres), transactional email dispatch services (Resend), and SSL security monitoring tools.
• Professional Advisers & Authorities: External accountants, legal counsel, or statutory law enforcement bodies where strictly required by UK law or court order.

6. Data Retention Policy

We retain corporate and director information only for as long as necessary to fulfil the purposes for which it was gathered:

• Progressed & Introduced Enquiries: Retained for the duration of the commercial relationship plus 6 to 7 years to satisfy the Limitation Act 1980 statutory limitation period and HMRC corporate accounting rules.
• Unmatched or Non-Progressed Leads: Retained for up to 36 months to verify duplicate submissions, support internal audit trails, and maintain quality assurance, after which records are permanently deleted or securely anonymised.
• Technical Logs & Analytics: Retained for up to 26 months before automated purging.

7. Security & Data Storage

We implement robust technical and organisational security measures to safeguard all submitted data against unauthorised access, loss, alteration, or disclosure. All data transmissions across our platform are secured with industry-standard 256-bit SSL/TLS encryption. Data is hosted in secure, ISO 27001-compliant enterprise data centres located in the UK and European Economic Area (EEA).

8. Your Rights Under UK GDPR

As an individual director or representative whose personal data is processed by us, you have comprehensive statutory rights under the UK GDPR:

• Right to be Informed: Transparent information about how your data is collected, matched, and processed (as set out in this policy).
• Right of Access: You may request confirmation of whether we process your data and receive a copy of your records (Subject Access Request).
• Right to Rectification: You may request the prompt correction of inaccurate or incomplete corporate or director details.
• Right to Erasure: You may request the deletion of your personal data where there is no overriding legal or regulatory reason for us to retain it.
• Right to Restrict Processing: You may request that we suspend processing your data under certain circumstances.
• Right to Data Portability: You may request the transfer of your structured data to another provider where technically feasible.
• Right to Object: You may object to data processing carried out under our legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time by contacting us.

9. Cookies & Tracking Technologies

Under the Privacy and Electronic Communications Regulations (PECR) and UK GDPR, we maintain full transparency regarding cookies and telemetry technologies operating across commercialmortgagedealer.com:

10. Contact Details & ICO Supervisory Authority

If you have questions regarding this Privacy Policy, wish to exercise any of your data protection rights, or have an enquiry regarding how your information is matched with our panel of lenders, please contact our Data Protection Officer:

11. Updates to This Policy

We may revise this Privacy Policy periodically to reflect enhancements in our matching technology, changes in our lender panel, or evolving UK legal requirements. Any modifications will be posted to this page with an updated revision date.