LEGAL
Privacy Notice
This Privacy Notice explains how Commercial Desk handles personal information when you use this website and its resources. It applies to the current Commercial Desk website.
Last updated: 5 October 2026
Who we are
Commercial Desk is operated by Lau Fung Ngan, a sole trader based in the United Kingdom. Commercial Desk is the trading name.
For privacy enquiries, contact privacy@commercialdesktools.co.uk.
Information we process
Website and technical information
When you access the website, our hosting and service providers may process technical information needed to deliver and secure it, such as request information, the pages requested and technical or device information.
Analytics information
If you accept analytics, Google Analytics may process information about how the website is used, including page and path information, analytics identifiers and a small number of Commercial Desk analytics events.
Your analytics choice
We store whether you accepted or rejected analytics in your browser's local storage.
NEC4 tools
Information you enter into the interactive NEC4 tools is processed in your browser to produce the tool result. Our current implementation does not save these answers or deliberately send them to our servers.
Interest buttons
When you select "I'm interested" for the planned Pack or a future topic, the page shows a confirmation. If you have accepted analytics, that selection may also be sent to Google Analytics as an event. These buttons do not collect your email address.
Accounts
The website includes account functionality, but it is not currently set up for normal use and you are not required to create an account. If account functionality becomes available, signing in may involve processing your email address, sign-in credentials, session information and account identifiers through our authentication provider.
Payments
Payments are not currently available. If paid sales are introduced, this Privacy Notice will be updated.
Information entered into our tools
- Answers you enter into the current compensation event tools are processed in your browser.
- They are used only to calculate and display the result you asked for.
- Commercial Desk does not currently save those answers in a database.
- Optional free-text answers are not sent to Google Analytics as an analytics event.
- Please avoid entering unnecessary personal or confidential project information.
The tools are a practical reference and do not provide legal advice.
How we use information
- Providing and operating the website.
- Providing browser-based tools and resources.
- Maintaining website security and diagnosing technical problems.
- Remembering your analytics choice.
- Understanding how the website is used, where you have consented to analytics.
- Operating account functionality, if and when it becomes available.
- Responding to privacy enquiries.
We do not use your information for targeted advertising, and we do not sell it.
Our lawful bases
Under UK data protection law, the lawful basis we rely on depends on the processing activity:
- Consent: for optional Google Analytics. You can withdraw consent at any time through Cookie settings.
- Legitimate interests: for operating, maintaining, securing and improving the website, where this is necessary and does not override your rights and interests.
- Contract or steps at your request: for account functionality you request, if it becomes available.
- Legal obligation: where we must process information to comply with legal requirements or respond to valid data protection requests.
Google Analytics
- Commercial Desk uses Google Analytics 4 ("GA4"). It is optional.
- Commercial Desk does not load analytics before you give consent.
- You can accept or reject analytics, and change your choice later through Cookie settings.
- Microsoft Clarity is not currently in use.
- We do not currently use Google Analytics for advertising or remarketing.
To understand which resources are useful, we send a small number of events, which record when a visitor:
- views a case study;
- views free teaching preview content;
- views details of the planned Pack;
- expresses interest in the planned Pack;
- expresses interest in a future topic.
The details we send with these events do not deliberately include email addresses, account IDs, free-text tool answers, query strings, URL fragments, authentication tokens or payment tokens.
Google may process additional technical and analytics information as part of operating its service, in line with its own policies.
Cookies and browser storage
Commercial Desk uses browser storage technologies.
| Name | Purpose | Expiry |
|---|---|---|
| cd_analytics_consent | Remembers whether you accepted or rejected optional analytics. | 180 days |
When your saved choice is next checked after it has expired, we treat it as if no current analytics choice has been saved and may ask you to choose again.
If you accept analytics, Google Analytics may create its own cookies or storage. How long these last depends on Google's configuration and services.
If account functionality becomes available, our authentication provider may use browser storage to keep you signed in.
Changing your analytics choice
You can reopen Cookie settings from the footer of any page, or using the button below, and change your choice.
If you reject or withdraw analytics:
- Commercial Desk stops its analytics;
- analytics storage consent is set to denied;
- the website attempts to remove analytics cookies and storage it can access. Some identifiers that the provider manages, or that are set for a different scope, may not be removable by the website.
Service providers
- Website hosting: we use service providers, including Lovable, to host and deliver the website.
- Google Analytics: provides optional analytics, only after you consent.
- Google Fonts: provides website typography. Requests to Google's font services may involve technical request information.
- Supabase: Supabase infrastructure is implemented for account and authentication functionality. Account features are not currently set up for normal production use. Where an existing account session is present or account functionality is used, related session or authentication information may be processed through Supabase. We do not use Supabase to store the answers you enter into the current NEC4 tools.
- Payments: payments are not currently available. If paid sales are introduced, we may use a payment provider and will update this notice.
- Microsoft Clarity: not currently in use, and not loaded even if you accept analytics.
International data transfers
Some service providers may process information outside the United Kingdom. Where this happens, we will rely on the safeguards required by UK data protection law, where they are required. We will update this notice with provider-specific details once they are verified.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose it was processed for, including legal, security and operational requirements.
- Your analytics choice: 180 days.
- Analytics information held by the provider: depends on the provider's configuration.
Retention periods or criteria may be updated as Commercial Desk's services develop.
Your data protection rights
Depending on the circumstances, you may have the right to:
- access your personal information;
- have inaccurate information corrected;
- have information deleted;
- restrict processing;
- object to certain processing;
- data portability, where applicable;
- withdraw consent, where processing relies on consent.
Not every right applies in every circumstance. To make a request, email privacy@commercialdesktools.co.uk.
Complaints
If you have a concern, please contact us first at privacy@commercialdesktools.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ICO) about how your personal information is used.
Children
Commercial Desk is a professional resource for commercial and construction professionals and is not directed at children.
Security
We use reasonable technical and organisational measures intended to protect information. No method of transmission or storage can be guaranteed to be secure.
Contact us
Commercial Desk
Operated by Lau Fung Ngan, a sole trader based in the United Kingdom
Privacy email: privacy@commercialdesktools.co.uk
Changes to this Privacy Notice
We may update this notice when the website, our providers, analytics, account functionality or sales change. We will update the "Last updated" date for material changes and, where appropriate, give additional notice.