Privacy Policy

This privacy statement was last updated on 04 May 2026 and applies to citizens and legal permanent residents of the European Economic Area and Switzerland.

In this privacy statement, we explain what we do with the data we obtain about you via https://www.commercialproperty.eu. We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:

• we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
• we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
• we first request your explicit consent to process your personal data in cases requiring your consent;
• we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
• we respect your right to access your personal data or have it corrected or deleted, at your request.

If you have any questions, or want to know exactly what data we keep of you, please contact us.

1. Notice of Changes/ Amendments to Privacy Policy

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes.

We may update our Privacy Policy from time to time to reflect changes to our services, legal requirements, or business practices.

If we make changes, we will provide notice at least fifteen (15) days before the updated Privacy Policy becomes effective. Notice may be provided by posting the revised Privacy Policy on our website, displaying a notice on the website or within the services, or by sending you an email, where appropriate. The “Last Updated” date at the top of this Privacy Policy will also be revised.

Effective Date: Such changes will only affect the relationship with you 15 days, from the updated date above.

Your continued use of the website or services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised Privacy Policy, you must discontinue use of the website and services before the changes take effect.

2. Purpose, data and retention period

We may collect or receive personal information for a number of purposes connected with our business operations which may include the following:

For this purpose we use the following data:

• A first and last name
• Account name or alias
• A home or other physical address, including street name and name of a city or town
• An email address
• A telephone number
• Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement.

The basis on which we may process these data is:

Retention period

We retain this data until the service is terminated.

For this purpose we use the following data:

• A first and last name
• Account name or alias
• A home or other physical address, including street name and name of a city or town
• An email address
• A telephone number
• Geolocation data
• Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement

The basis on which we may process these data is:

Retention period

We retain this data until the service is terminated.

This website uses Stripe as its secure payment processor to ensure all online transactions are handled safely and in compliance with industry standards. We do not store or have direct access to your full payment card details, as all payment information is processed securely through Stripe’s encrypted systems. Stripe is certified to PCI DSS Level 1, the highest level of payment security certification, and uses advanced encryption, tokenization, and fraud prevention measures to protect your personal and financial information. By using this website, you can be assured that every payment is processed through a trusted, secure, and globally recognized payment platform.

For this purpose we use the following data:

• Account name or alias
• An email address

For this purpose we use the following data:

• A first and last name
• Account name or alias
• Company name
• A verifiable company email address (no generic email addresses will be accepted – .gmail etc.)
• Geolocation data
• Passport / Driver’s licence / National identification card or Residence card
• Facial Data – Selfie
• Mobile Number Verication
• VAT Number

The basis on which we may process these data is:

Retention period

We retain this data until the service is terminated.

For this purpose we use the following data:

• An email address

The basis on which we may process these data is:

Retention period

We retain this data until the service is terminated.

For this purpose we use the following data:

• A first and last name
• Account name or alias
• An email address
• A telephone number
• Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement

The basis on which we may process these data is:

Retention period

We retain this data until the service is terminated.

We use Zoho CRM to manage customer enquiries, communications, and business relationships.

Personal data submitted through our website, such as your name, email address, phone number, company details, and enquiry information, may be stored securely in Zoho CRM for the purposes of responding to enquiries, providing our services, managing customer relationships, and maintaining business records. Personal data is stored within the European Union (EU). We process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), and only where we have a lawful basis to do so, such as consent, contractual necessity, legitimate interests, or legal obligation. Zoho acts as our data processor and applies appropriate technical and organisational security measures to protect personal data. Where personal data is transferred outside the EU, appropriate safeguards are applied in accordance with GDPR requirements, including approved contractual protections. You have the right to request access to, correction of, or deletion of your personal data at any time by contacting us directly.

When you contact us through our support system powered by Zendesk.

We may collect information such as your name, email address, contact details, and any information you include in your message, as well as basic technical data like your IP address and browser information.

We use this information only to respond to your support requests, provide customer service, and improve our services. We use Zendesk as a trusted third-party provider to manage support tickets. Zendesk may process and store your data outside the European Economic Area, but appropriate safeguards are in place to protect your information in line with GDPR requirements.

We process your data under GDPR based on legitimate business needs, contractual necessity, legal obligations, or your consent where required. We keep your data only as long as necessary for support and legal purposes.

If you are in the EU, you have rights under GDPR including access to your data, correction, deletion, restriction of use, and the right to object to processing. You may also withdraw consent at any time and contact your local data protection authority if needed.

We take reasonable steps to protect your personal data from loss, misuse, or unauthorized access. If you have any questions about your data or your rights, you can contact us using the details provided on our website.

For this purpose we use the following data:

• A first and last name
• Account name or alias
• A home or other physical address, including street name and name of a city or town
• An email address
• Passport / Driver’s licence / National identification card or Residence card
• Facial Data – Selfie
• Mobile Number Verication
• VAT Number

The basis on which we may process these data is:

Retention period

We retain this data until the service is terminated.

For this purpose we use the following data:

• Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement

The basis on which we may process these data is:

Retention period

We retain this data until the service is terminated.

3. Cookies

Our website uses cookies. For more information about cookies, please refer to our Cookie Policy.

4. Disclosure practices

We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.

If our website or organisation is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.

5. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorised access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

6. Third-party websites

This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.

7. Content Reporting Tool

We collect and process your IP address or Username (if logged in) when you use our website content reporting tool in order to maintain the safety, integrity, and proper functioning of our services. In particular, IP addresses or Usernames are used to detect, prevent, and respond to Duplicate Content, Inappropriate Content, Misleading Information, Fradulent Information, or Copyright Violation, to enforce our terms of use and community guidelines, and to protect our platform, users, and systems from misuse or security threats. This processing is carried out on the basis of our legitimate interests pursuant to Article 6(1)(f) of the General Data Protection Regulation (GDPR), namely to ensure the security and reliability of our services. We retain IP address data only for as long as necessary to fulfil these purposes usually (50 days), unless a longer retention period is required or permitted by law. We do not share this data with third parties except where necessary to comply with legal obligations, respond to lawful requests from public authorities, or protect our legal rights. You have the right to request access to, rectification or erasure of your personal data, as well as to object to or restrict its processing, and to lodge a complaint with a supervisory authority.

8. Google Ads Compliance Statement (EU – GDPR & ePrivacy)

We use Google Ads, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to display advertisements to users who may be interested in our products or services.

• Google Ads uses cookies and similar technologies (such as tracking pixels) to:
• Display non-personalised advertisements
• Measure the effectiveness of advertising campaigns
• Enable remarketing to users who have previously visited our website

The information collected may include online identifiers such as IP address, cookie IDs, device information, browser data, and interactions with our website. This data may be processed by Google in accordance with its own privacy policies and may be transferred outside the European Economic Area using appropriate safeguards.

8.1 Legal Basis

The use of Google Ads cookies and similar technologies that are not strictly necessary is based on user consent in accordance with Article 6(1)(a) GDPR and the ePrivacy Directive.

• User Rights and Controls
• Consent can be withdrawn at any time via our cookie settings
• Users can manage or disable personalised advertising through Google Ad Settings:
  https://adssettings.google.com
• Users may opt out of third-party vendor advertising via:
  https://www.youronlinechoices.eu

8.2 Data Protection

We have implemented appropriate technical and organisational measures to ensure the protection of personal data. Where required, a Data Processing Agreement (DPA) has been concluded with Google.

For further information on how Google processes personal data, please refer to Google’s Privacy Policy:
https://policies.google.com/privacy

9. Identity Verification – Agent/ Broker & Agency/ Brokerage Accounts

We use Didit.me as a third-party identity verification provider to help verify user identities and prevent fraud. When you complete verification, certain personal data (such as identification documents, facial images, mobile number and related metadata) may be collected and processed by Didit.me on our behalf.

This information is used solely for identity verification, compliance, and security purposes. Didit.me processes personal data in accordance with applicable data protection laws and its own privacy policy. We do not store your identity documents ourselves unless required by law, and we do not use your verification data for marketing purposes.

Didit.me acts as a data processor, and we act as the data controller for verification data. Processing is based on legal obligations and our legitimate interest in preventing fraud and ensuring platform security.

For more information on how Didit.me handles personal data, please review the Didit.me privacy policy.

10. Content Delivery Network

This website uses bunny.net, a content delivery network (CDN) service provided by BunnyWay d.o.o., to deliver website content efficiently and securely.

When you visit this website, your browser may establish a direct connection to bunny.net servers in order to load content (such as images, videos, scripts, or other website assets). In the process, bunny.net may process certain technical information, including:

• IP address
• Browser type and version
• Operating system
• Referrer URL
• Date and time of access
• Requested content

This data is processed for the purpose of website delivery, performance optimization, and protection against abuse (e.g., DDoS attacks).

According to bunny.net, the service does not use cookies for tracking or advertising purposes and processes data in accordance with applicable data protection laws, including the GDPR.

The use of bunny.net is based on our legitimate interest in ensuring fast, secure, and reliable delivery of our website (Article 6(1)(f) GDPR).

For more information about how bunny.net processes personal data, please refer to their privacy policy:
https://bunny.net/privacy

11. Use of Cloudflare Turnstile

We use Cloudflare Turnstile, a service provided by Cloudflare, to protect our website from spam, automated abuse, and malicious activity.

Turnstile is designed to verify that interactions on our website are made by humans and not automated bots.

How Turnstile Works

When you interact with forms or certain areas of our website:

• Turnstile may analyze technical information such as your IP address, browser characteristics, and device data.
• This information is processed to determine whether the request is legitimate.
• The service is designed to minimize data collection and avoid tracking users across sites for advertising purposes.

Cloudflare processes this data on our behalf to provide bot protection and website security.

For more information about how Cloudflare handles personal data, please refer to Cloudflare’s official Privacy Policy.

11.1. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), the legal basis for processing data via Cloudflare Turnstile is:

• Legitimate interests (Article 6(1)(f) GDPR), namely protecting our website from abuse and ensuring its security and availability.

Where required, we may rely on your consent.

12. WooCommerce

We collect information about you during the checkout process on our store.

What we collect and store

While you visit our site, we’ll track:

• Products you’ve viewed: we’ll use this to, for example, show you products you’ve recently viewed
• Location, IP address and browser type: we’ll use this for purposes like estimating taxes and shipping
• Shipping address: we’ll ask you to enter this so we can, for instance, estimate shipping before you place an order, and send you the order!

We’ll also use cookies to keep track of basket contents while you’re browsing our site.

Note: you may want to further detail your cookie policy, and link to that section from here.

When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, credit card/payment details and optional account information like username and password. We’ll use this information for purposes, such as, to:

• Send you information about your account and order
• Respond to your requests, including refunds and complaints
• Process payments and prevent fraud
• Set up your account for our store
• Comply with any legal obligations we have, such as calculating taxes
• Improve our store offerings
• Send you marketing messages, if you choose to receive them

If you create an account, we will store your name, address, email and phone number, which will be used to populate the checkout for future orders.

We generally store information about you for as long as we need the information for the purposes for which we collect and use it, and we are not legally required to continue to keep it. For example, we will store order information for 7 years for tax and accounting purposes. This includes your name, email address and billing and shipping addresses.

We will also store comments or reviews, if you choose to leave them.

Who on our team has access

Members of our team have access to the information you provide us. For example, both Administrators and Shop Managers can access:

• Order information like what was purchased, when it was purchased and where it should be sent, and
• Customer information like your name, email address, and billing and shipping information.

Our team members have access to this information to help fulfill orders, process refunds and support you.

What we share with others

We share information with third parties who help us provide our orders and store services to you; for example —

Payments

We accept payments through Stripe. When processing payments, some of your data will be passed to Stripe, including information required to process or support the payment, such as the purchase total and billing information.

Please see the Stripe Privacy Policy for more details.

13. Accessing and modifying your data

If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information below. You have the following rights:

• You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
• Right of access: You have the right to access your personal data that is known to us.
• Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.
• If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.
• Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller.
• Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.

Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.

14. Submitting a complaint

If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Data Protection Authority.

15. Contact details

This website is owned and operated by Final Frontier Limited.

For questions and/or comments about our Privacy Policy and this statement, please contact us by using the following contact details:

Final Frontier Limited
6 Fern Road, Sandyford, Dublin, D18 FP98 – Ireland

Website: https://www.commercialproperty.eu
Email: privacy@commercialproperty.eu

You may contact us regarding these Privacy Policies through our contact page.