Privacy policy
1. Introduction
Forge Commercial Finance Ltd (“Forge”, “we”, “us”, or “our”) is committed to protecting your privacy and handling personal data responsibly.
This Privacy Notice explains how we collect, use, store, and share personal data when you engage with us in connection with our commercial finance brokerage services.
Forge operates exclusively in the commercial finance market and does not provide regulated financial advice or consumer financial services.
2. Who We Are
Forge Commercial Finance Ltd is the data controller for the purposes of UK data protection law.
3. Data Controller
Forge Commercial Finance Ltd is the Data Controller for the purposes of UK GDPR.
4. Personal Data We Collect
We may collect and process the following types of personal data:
-
Names, job titles, and business contact details
-
Company and business information
-
Director and beneficial owner information
-
Identification information where required for AML purposes
-
Correspondence and communications
We do not knowingly collect data relating to children.
5. How We Collect Personal Data
Personal data is collected:
-
Directly from you
-
From professional advisers or introducers
-
From publicly available sources (such as Companies House)
-
From third-party data providers where appropriate
6. How We Use Personal Data
We use personal data to:
-
Arrange and introduce commercial finance solutions
-
Communicate with lenders and professional counterparties
-
Carry out due diligence and AML checks
-
Manage our relationship with you
-
Comply with legal and regulatory obligations
7. Lawful Basis for Processing
We process personal data under one or more of the following lawful bases:
-
Legitimate interests
-
Contractual necessity
-
Legal obligations
8. Data Sharing
We may share personal data with:
-
Commercial lenders
-
Professional advisers involved in a transaction
-
Third-party service providers where required to deliver our services
We do not sell personal data or use it for unrelated marketing purposes.
9. Data Storage & Security
Personal data is stored securely using appropriate technical and organisational measures, including cloud-based systems such as Google Workspace and DocuSign.
10. Data Retention
Personal data is retained only for as long as necessary to fulfil its purpose and to comply with legal and professional obligations. In most cases, records are retained for a minimum of 6 years.
11. Your Rights
You have rights under UK data protection law, including the right to:
-
Access your personal data
-
Request correction or deletion of your data
-
Object to processing where appropriate
Requests should be made in writing.
12. Contact Details
If you have any questions about this Privacy Notice or how your data is handled, please contact: privacy@forgecommercial.co.uk
13. Changes to This Privacy Notice
This Privacy Notice may be updated from time to time. The most recent version will always apply.