Legal - Privacy Policy

Effective August 6, 2026

First Financial Capital ("we", "us", "our") is a commercial bridge lender operating under CA DRE No. 01523939. This policy explains what information we collect through this website and our financing process, why we collect it, who we share it with, and the choices you have.

1. Information we collect

Information you provide

When you submit our contact, loan application, or careers form, or sign up for updates, we collect your name, email address, phone number, company name, the financing amount range you select, and anything you choose to write in the message field.

If we go on to evaluate a transaction, we collect the information needed to underwrite it. Depending on the deal that can include property details, financial statements, rent rolls, purchase and sale agreements, entity and organisational documents, credit information, and information about the principals and guarantors involved. Some of this is information about people other than you, and by providing it you confirm you are permitted to share it.

Information collected automatically

Like most websites, we collect anonymised interaction data through cookies and similar technologies: IP address, browser and device type, pages visited, time spent on pages, and referring and exit URLs. We use Google Analytics, loaded through Google Tag Manager, for this. Our hosting provider also keeps standard server logs. Our forms use Cloudflare Turnstile to distinguish people from automated traffic, which involves a check against your browser and network signals.

2. How we use your information

We use the information we collect to:

• respond to your enquiries
• evaluate, underwrite, close, and service financing requests and loans
• verify identity and meet anti-money-laundering, licensing, and other legal obligations
• send you updates and newsletters, where you have asked to receive them
• improve website functionality and the user experience
• monitor and analyse website performance
• protect our forms and systems from fraud and automated abuse

3. Cookies and tracking technologies

We use cookies to understand how the site is used, remember preferences, and improve our content and design. You can control cookies through your browser settings, though disabling them may limit certain site features. To opt out of Google Analytics across all websites, you can install the Google Analytics Opt-out Browser Add-on. Where our systems receive a Global Privacy Control signal, we honour it.

4. Sharing your information

We do not sell, rent, or trade personal information, and we do not share it with third parties for their own advertising purposes. We share it only where it is needed to do the work you have asked us to do, or where the law requires it.

Recipients fall into four groups:

• Service providers acting on our instructions, including our CRM and contact database providers, our email and analytics providers, our bot-protection provider, and our website hosting and content management providers. All are required to keep the information secure and confidential and to use it only for the services they provide to us.
• Transaction participants, where you have asked us to arrange or provide financing. This can include capital partners, loan participants, correspondent lenders and investors, and the appraisers, title companies, escrow agents, environmental consultants, brokers, attorneys, and accountants involved in closing a deal.
• Regulators, auditors, and law enforcement, where we are legally required to respond or need to establish or defend a legal claim.
• A counterparty or acquirer, in connection with a merger, financing, or sale of assets, subject to equivalent protections.

5. Your rights and choices

You can unsubscribe from our emails using the link in the footer of any message. To request access to, correction of, or deletion of your personal information, contact us at info@firstfincap.com or at the address below.

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, also gives you the right to know what personal information we collect and how we use and disclose it, the right to a copy of it, the right to correct it, the right to request deletion, and the right not to be treated differently for exercising any of these rights. You may use an authorised agent to make a request for you.

We will verify your identity before we act on a request, and we will respond within the timeframes the law requires. Some of the information we hold is financial information governed by the Gramm-Leach-Bliley Act, which is handled under that framework rather than the CCPA, and some records we are required to retain even after a deletion request.

6. Data security

We use appropriate technical and organisational safeguards to protect personal information, including encryption in transit and access controls that limit who can see transaction files. No method of transmission or storage over the internet is completely secure, so we cannot guarantee absolute security. Please do not send sensitive financial documents by unencrypted email; ask us for a secure upload link instead.

7. How long we keep information

We keep loan and application records for as long as we need them to service a loan and to meet our legal, tax, licensing, and audit obligations, which for lending records is generally several years after a loan closes or an application is declined or withdrawn. Enquiries that do not lead to a transaction, and website analytics data, are kept on a shorter schedule.

8. Third-party links

This site links to websites we do not control. We are not responsible for the content or the privacy practices of those sites, and we encourage you to read the privacy policy of any third-party site you visit.

9. Children

Our services are directed at businesses and commercial borrowers. We do not knowingly collect personal information from anyone under 16.

10. Changes to this policy

We may update this policy as our practices or the law change. The effective date at the top of this page tells you when the current version took effect, and we encourage you to review it periodically.