Privacy Policy

This privacy statement was last updated on 04 July 2026 and applies to citizens and legal permanent residents of the European Economic Area and Switzerland.

In this privacy statement, we explain what we do with the data we obtain about you via https://www.commercialproperty.eu. We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:

• we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
• we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
• we first request your explicit consent to process your personal data in cases requiring your consent;
• we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
• we respect your right to access your personal data or have it corrected or deleted, at your request.

If you have any questions, or want to know exactly what data we keep of you, please contact us.

1. Notice of Changes/ Amendments to Privacy Policy

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes.

We may update our Privacy Policy from time to time to reflect changes to our services, legal requirements, or business practices.

If we make changes, we will provide notice at least fifteen (15) days before the updated Privacy Policy becomes effective. Notice may be provided by posting the revised Privacy Policy on our website, displaying a notice on the website or within the services, or by sending you an email, where appropriate. The “Last Updated” date at the top of this Privacy Policy will also be revised.

Effective Date: Such changes will only affect the relationship with you 15 days, from the updated date above.

Your continued use of the website or services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised Privacy Policy, you must discontinue use of the website and services before the changes take effect.

2. Purpose, data and retention period

We may collect or receive personal information for a number of purposes connected with our business operations which may include the following:

For this purpose we use the following data:

• A first and last name
• Account name or alias
• A home or other physical address, including street name and name of a city or town
• An email address
• A telephone number
• Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement.

The basis on which we may process these data is:

Retention period

We retain this data until the service is terminated.

For this purpose we use the following data:

• A first and last name
• Account name or alias
• A home or other physical address, including street name and name of a city or town
• An email address
• A telephone number
• Geolocation data
• Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement

The basis on which we may process these data is:

Retention period

We retain this data until the service is terminated.

For this purpose we use the following data:

• Account name or alias
• An email address

For this purpose we use the following data:

• A first and last name
• Account name or alias
• Company name
• A verifiable company email address (no generic email addresses will be accepted – .gmail etc.)
• Geolocation data
• Passport / Driver’s licence / National identification card or Residence card
• Facial Data – Selfie
• Mobile Number Verication
• VAT Number

The basis on which we may process these data is:

Retention period

We retain this data until the service is terminated.

For this purpose we use the following data:

• An email address

The basis on which we may process these data is:

Retention period

We retain this data until the service is terminated.

For this purpose we use the following data:

• A first and last name
• Account name or alias
• An email address
• A telephone number
• Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement

The basis on which we may process these data is:

Retention period

We retain this data until the service is terminated.

When you contact us through our support system powered by Zendesk.

We may collect information such as your name, email address, contact details, and any information you include in your message, as well as basic technical data like your IP address and browser information.

We use this information only to respond to your support requests, provide customer service, and improve our services. We use Zendesk as a trusted third-party provider to manage support tickets. Zendesk may process and store your data outside the European Economic Area, but appropriate safeguards are in place to protect your information in line with GDPR requirements.

We process your data under GDPR based on legitimate business needs, contractual necessity, legal obligations, or your consent where required. We keep your data only as long as necessary for support and legal purposes.

If you are in the EU, you have rights under GDPR including access to your data, correction, deletion, restriction of use, and the right to object to processing. You may also withdraw consent at any time and contact your local data protection authority if needed.

We take reasonable steps to protect your personal data from loss, misuse, or unauthorized access. If you have any questions about your data or your rights, you can contact us using the details provided on our website.

For this purpose we use the following data:

• A first and last name
• Account name or alias
• A home or other physical address, including street name and name of a city or town
• An email address
• Passport / Driver’s licence / National identification card or Residence card
• Facial Data – Selfie
• Mobile Number Verication
• VAT Number

The basis on which we may process these data is:

Retention period

We retain this data until the service is terminated.

For this purpose we use the following data:

• Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement

The basis on which we may process these data is:

Retention period

We retain this data until the service is terminated.

3. Cookies

Our website uses cookies. For more information about cookies, please refer to our Cookie Policy.

4. Disclosure practices

We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.

If our website or organisation is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.

5. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorised access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

6. Third-party websites

This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.

7. Content Delivery Network (CDN), DNS, Security and Edge Services

We use Bunny.net to provide our website’s global DNS, content delivery network (CDN), image optimization, web application firewall (WAF), DDoS protection, and edge computing services. These services help ensure that our website remains fast, secure, reliable, and available to users worldwide.

What information is processed
When you visit our website, Bunny.net may process technical information necessary to deliver and protect the website, including:

* IP address
* Browser type and version
* Operating system
* Device type
* Requested URLs and files
* Date and time of requests
* HTTP headers
* Referrer information (where available)
* Cache and performance diagnostics
* Security event information, including requests identified as malicious or suspicious

This information is processed automatically as part of delivering website content and maintaining the security and integrity of our services.

Purpose of processing
We use Bunny.net for the following purposes:

* Delivering website content efficiently through a global CDN
* Providing authoritative DNS resolution
* Optimising and compressing images using Bunny Optimizer
* Protecting the website against distributed denial-of-service (DDoS) attacks using Bunny Shield
* Detecting and blocking malicious traffic through the Web Application Firewall (WAF)
* Applying Edge Rules to improve website performance, routing, caching, redirects and security
* Monitoring service availability, diagnosing technical issues and preventing abuse
* Improving the speed, reliability and security of our website

Legal basis
The processing of this information is based on our legitimate interests (Article 6(1)(f) of the UK GDPR and EU GDPR) in operating a secure, reliable and high-performance website and protecting our systems against misuse and cyber threats.

International data transfers
Bunny.net operates a global network of edge locations. Depending on your location and the services used, technical data may be processed in countries outside the European Economic Area (EEA).

Where personal data is transferred internationally, appropriate safeguards are implemented in accordance with applicable data protection laws, including the European Commission’s Standard Contractual Clauses (SCCs) or other approved transfer mechanisms where required.

Data processor
Bunny.net acts as our data processor for the services described above. We have entered into an appropriate Data Processing Agreement (DPA) where required under applicable data protection legislation.

Data retention
Technical logs and security information are retained only for as long as necessary to provide the services, investigate security incidents, prevent abuse, comply with legal obligations, and maintain the integrity and security of our website. Retention periods vary depending on the nature of the information collected and the applicable service configuration.

For further information about Bunny.net’s processing of personal data, please refer to Bunny.net’s Privacy Policy and Data Processing Agreement.

8. We use Verifone (formerly 2Checkout) as our Merchant of Record to securely process payments for purchases made through our website.

When you place an order, certain personal information necessary to complete your purchase may be shared with Verifone, including:

Name
Billing address
Email address
Phone number (where provided)
Payment information
Purchase details
IP address and fraud prevention information

Verifone processes this information for the purposes of:

Processing and completing your payment
Fraud detection and prevention
Tax calculation and compliance
Issuing invoices and receipts
Managing refunds, chargebacks, and payment disputes
Complying with legal and regulatory obligations

We do not receive or store your complete payment card details. Payment information is collected and processed directly by Verifone using secure payment systems.

Legal Basis for Processing

Where the General Data Protection Regulation (GDPR) applies, we process your personal data on the following legal bases:

Performance of a contract (to provide the products or services you have purchased)
Compliance with legal obligations (including accounting and tax requirements)
Legitimate interests (such as fraud prevention and service security)
International Transfers

Your personal data may be processed in countries outside the European Economic Area (EEA). Where applicable, appropriate safeguards are used to protect your personal data in accordance with applicable data protection laws.

Data Retention

We retain personal data only for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Verifone retains payment-related information in accordance with its own legal and regulatory requirements.

Third-Party Privacy Information

For more information about how Verifone processes personal data, please refer to the Verifone Privacy Notice.

Your Rights

If you are located in the European Economic Area, you have the right to:

Access your personal data
Correct inaccurate personal data
Request deletion of your personal data where applicable
Restrict or object to certain processing
Request data portability
Lodge a complaint with your local data protection authority

Requests relating to purchases and payment processing may also involve Verifone where it acts as Merchant of Record.

9. Content Reporting Tool

We collect and process your IP address or Username (if logged in) when you use our website content reporting tool in order to maintain the safety, integrity, and proper functioning of our services. In particular, IP addresses or Usernames are used to detect, prevent, and respond to Duplicate Content, Inappropriate Content, Misleading Information, Fradulent Information, or Copyright Violation, to enforce our terms of use and community guidelines, and to protect our platform, users, and systems from misuse or security threats. This processing is carried out on the basis of our legitimate interests pursuant to Article 6(1)(f) of the General Data Protection Regulation (GDPR), namely to ensure the security and reliability of our services. We retain IP address data only for as long as necessary to fulfil these purposes usually (50 days), unless a longer retention period is required or permitted by law. We do not share this data with third parties except where necessary to comply with legal obligations, respond to lawful requests from public authorities, or protect our legal rights. You have the right to request access to, rectification or erasure of your personal data, as well as to object to or restrict its processing, and to lodge a complaint with a supervisory authority.

10. Google Ads Compliance Statement (EU – GDPR & ePrivacy)

We use Google Ads, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to display advertisements to users who may be interested in our products or services.

• Google Ads uses cookies and similar technologies (such as tracking pixels) to:
• Display non-personalised advertisements
• Measure the effectiveness of advertising campaigns
• Enable remarketing to users who have previously visited our website

The information collected may include online identifiers such as IP address, cookie IDs, device information, browser data, and interactions with our website. This data may be processed by Google in accordance with its own privacy policies and may be transferred outside the European Economic Area using appropriate safeguards.

9.1 Legal Basis

The use of Google Ads cookies and similar technologies that are not strictly necessary is based on user consent in accordance with Article 6(1)(a) GDPR and the ePrivacy Directive.

• User Rights and Controls
• Consent can be withdrawn at any time via our cookie settings
• Users can manage or disable personalised advertising through Google Ad Settings:
  https://adssettings.google.com
• Users may opt out of third-party vendor advertising via:
  https://www.youronlinechoices.eu

9.2 Data Protection

We have implemented appropriate technical and organisational measures to ensure the protection of personal data. Where required, a Data Processing Agreement (DPA) has been concluded with Google.

For further information on how Google processes personal data, please refer to Google’s Privacy Policy:
https://policies.google.com/privacy

11. Identity Verification – Agent/ Broker & Agency/ Brokerage Accounts

We use Didit.me as a third-party identity verification provider to help verify user identities and prevent fraud. When you complete verification, certain personal data (such as identification documents, facial images, mobile number and related metadata) may be collected and processed by Didit.me on our behalf.

This information is used solely for identity verification, compliance, and security purposes. Didit.me processes personal data in accordance with applicable data protection laws and its own privacy policy. We do not store your identity documents ourselves unless required by law, and we do not use your verification data for marketing purposes.

Didit.me acts as a data processor, and we act as the data controller for verification data. Processing is based on legal obligations and our legitimate interest in preventing fraud and ensuring platform security.

For more information on how Didit.me handles personal data, please review the Didit.me privacy policy.

12. We use Goggle Recaptcha

We use Google reCAPTCHA to help protect our website from spam, abuse, and automated access. reCAPTCHA analyzes various information provided by users and their devices to determine whether interactions on our site are made by humans or automated systems.

The use of reCAPTCHA is subject to Google’s processing of personal data. Information collected may include IP addresses, browser and device information, mouse movements, keystroke patterns, and other data necessary for security and fraud prevention purposes.

This service is provided by Google. The data collected through reCAPTCHA is subject to Google’s:

Privacy Policy
Terms of Service

We use reCAPTCHA based on our legitimate interest in protecting our website, services, and users from fraudulent and abusive activity

13. Use of Cloudflare Turnstile

We use Cloudflare Turnstile, a service provided by Cloudflare, to protect our website from spam, automated abuse, and malicious activity.

Turnstile is designed to verify that interactions on our website are made by humans and not automated bots.

How Turnstile Works

When you interact with forms or certain areas of our website:

• Turnstile may analyze technical information such as your IP address, browser characteristics, and device data.
• This information is processed to determine whether the request is legitimate.
• The service is designed to minimize data collection and avoid tracking users across sites for advertising purposes.

Cloudflare processes this data on our behalf to provide bot protection and website security.

For more information about how Cloudflare handles personal data, please refer to Cloudflare’s official Privacy Policy.

13.1. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), the legal basis for processing data via Cloudflare Turnstile is:

• Legitimate interests (Article 6(1)(f) GDPR), namely protecting our website from abuse and ensuring its security and availability.

Where required, we may rely on your consent.

14. WooCommerce

We collect information about you during the checkout process on our store.

What we collect and store

While you visit our site, we’ll track:

• Products you’ve viewed: we’ll use this to, for example, show you products you’ve recently viewed
• Location, IP address and browser type: we’ll use this for purposes like estimating taxes and shipping
• Shipping address: we’ll ask you to enter this so we can, for instance, estimate shipping before you place an order, and send you the order!

We’ll also use cookies to keep track of basket contents while you’re browsing our site.

Note: you may want to further detail your cookie policy, and link to that section from here.

When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, credit card/payment details and optional account information like username and password. We’ll use this information for purposes, such as, to:

• Send you information about your account and order
• Respond to your requests, including refunds and complaints
• Process payments and prevent fraud
• Set up your account for our store
• Comply with any legal obligations we have, such as calculating taxes
• Improve our store offerings
• Send you marketing messages, if you choose to receive them

If you create an account, we will store your name, address, email and phone number, which will be used to populate the checkout for future orders.

We generally store information about you for as long as we need the information for the purposes for which we collect and use it, and we are not legally required to continue to keep it. For example, we will store order information for 7 years for tax and accounting purposes. This includes your name, email address and billing and shipping addresses.

We will also store comments or reviews, if you choose to leave them.

Who on our team has access

Members of our team have access to the information you provide us. For example, both Administrators and Shop Managers can access:

• Order information like what was purchased, when it was purchased and where it should be sent, and
• Customer information like your name, email address, and billing and shipping information.

Our team members have access to this information to help fulfill orders, process refunds and support you.

What we share with others

We share information with third parties who help us provide our orders and store services to you; for example —

15. Accessing and modifying your data

If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information below. You have the following rights:

• You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
• Right of access: You have the right to access your personal data that is known to us.
• Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.
• If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.
• Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller.
• Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.

Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.

16. Submitting a complaint

If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Data Protection Authority.

17. Contact details

This website is owned and operated by Final Frontier Limited.

For questions and/or comments about our Privacy Policy and this statement, please contact us by using the following contact details:

Final Frontier Limited
6 Fern Road, Sandyford, Dublin, D18 FP98 – Ireland

Website: https://www.commercialproperty.eu
Email: privacy@commercialproperty.eu

You may contact us regarding these Privacy Policies through our contact page.