Privacy Policy

careless™

last updated: October 2026

Who we are

careless™ is a trading name of Careless Technologies Limited (registered in England & Wales, company no. 14504628; registered office 71–75 Shelton Street, Covent Garden, London WC2H 9JQ). Careless Technologies Limited is an Appointed Representative of Stubben Edge (Risk) Limited (company no. 09073942), which is authorised and regulated by the Financial Conduct Authority (FRN 943286).

You may check this on the Financial Services Register at register.fca.org.uk or by contacting the FCA on 0800 111 6768. careless™ is an insurance intermediary for personal belongings and business cover, and is committed to the privacy, confidentiality and protection of personal data. This policy explains how we collect, use and store your personal information. For the purposes of UK data protection law, Careless Technologies Limited is the data controller for the information described below.

By using our site, app and services, you signify your acceptance of this policy. Your continued use following any changes will be deemed acceptance of those changes.

What we collect

We collect personal data when you access our website, interact with our services, or communicate with our team. This may include, but is not limited to:

  • Personal identifiers such as your name, email address, phone number, postal address and IP address

  • For business cover, details of your business (including information sourced from Companies House)

  • For business cover, the website you give us for your business, and what its public pages say the business does. If you do not give one, we may search the web for your business's website using its name, and for a limited company its company number and postcode (never your own name, and for a sole trader or partnership only its trading name), and ask you to confirm any site we find before we use it. We read the public pages of a website you give or confirm, respecting the site's own instructions to automated readers, and use an AI service to write a short summary that helps us match your business to the right type of cover. The summary only suggests; your own answers always decide. We keep it with your quote as the reason a business type was suggested, and delete it after 90 days if you do not go on to get a quote

  • Payment information, processed securely by third-party payment providers

  • Details of the items or business activities you ask us to cover, provided during your quote

  • Device and usage data collected via cookies and analytics tools

We collect this information to provide your insurance cover and meet our obligations, respond to queries and provide support, maintain and improve our services, and comply with our legal obligations.

The lawful bases we rely on to arrange, place and administer your cover are the performance of our contract with you (or taking steps at your request to enter into one), compliance with our legal and regulatory obligations, and our legitimate interests in operating and improving the platform. Some of what we ask for is information we need in order to do that; if you do not provide it, we may be unable to offer or continue cover.

Who we share it with

We may share your data with trusted third parties for the purposes set out above, including:

  • Insurers and managing general agents — 1Edge Insurance PCC Limited (personal belongings) and Kovrilo, backed by Mission, with cover underwritten by a panel of UK insurers including ARAG Legal Expenses Insurance Company Limited, Great American International Insurance (UK) Limited and HSB Engineering Insurance Limited (commercial business cover) — to assess, price and issue your policy

  • Claims handlers and claims platforms — Claims Consortium Group and the SynergyCloud claims platform for personal belongings, and Qlaims Limited (with HSB Engineering Insurance for cyber and equipment-breakdown claims, and ARAG plc for legal expenses claims) for business cover

  • Loss adjusters, private investigators, legal advisers, accountants, auditors and other professional service firms

  • Third parties who provide services relating to your product (for example, legal expenses cover)

  • Our regulators and law enforcement, as necessary for fraud prevention and detection

  • Financial crime detection agencies, sanction-checking providers, and third parties who maintain fraud-detection databases or assist with investigations where fraud is suspected

  • Insurance industry bodies, including the Employers' Liability Tracing Office (ELTO, where required for business Employers' Liability cover) and the Association of British Insurers

  • Credit reference agencies

  • Payment processors and service providers that host our platform, send our service emails and help us verify business and address details

We share only what is necessary to deliver your cover and our services, and we require these parties to protect your information and use it only for those purposes. We do not sell your personal information. Some of our analytics, session-replay and advertising providers (for example Google Analytics and Microsoft Clarity, which run only where you have consented to Analytics cookies, and the Meta Pixel, which runs only where you have consented to Marketing cookies) may process data outside the United Kingdom or European Economic Area; where they do, we rely on appropriate safeguards, and we will not otherwise transfer your personal data outside the UK or EEA without such safeguards in place.

If you get a quote through an AI assistant. You can ask for a careless™ business quote inside an AI assistant you choose to use, such as Claude or ChatGPT. The answers you give there — which can include names, dates of birth and addresses — pass through that assistant's provider before they reach us, and that provider handles them under its own privacy policy, not ours. We receive only what the assistant sends to get your quote, and we use it as described in this policy. We record which assistant the request came from. You check and confirm every answer on careless.insure before you pay.

Automated processing and profiling

To determine insurance limits and premiums, and to understand patterns, we may compile and analyse information across customers to model likelihoods, and use profiling to assess both the risk and the premium for you and others with similar exposures. Where a decision about your policy is made by automated means, the process considers the information you provide (for example, details of what you wish to insure) alongside other information such as postcode and analytics to determine whether cover can be accepted and at what premium. Where we make an automated decision about you, you may request that it be verified and reviewed by an individual.

Your privacy rights

Under the UK GDPR and the Data Protection Act 2018, you have the right to:

  • Be informed about the collection and use of your personal data

  • Access — request a copy of the personal information we hold about you

  • Rectification — ask us to correct inaccurate or incomplete information

  • Erasure — ask us to delete your personal information, subject to certain exceptions (for example, records we must keep for regulatory reasons)

  • Restriction & objection — limit or object to certain uses of your data, including direct marketing

  • Portability — receive the data you provided to us in a machine-readable format

  • Withdraw consent at any time

For more information on these rights, see the guidance from the Information Commissioner's Office (ICO). You are not required to pay a charge to exercise your rights, unless a request is repetitive or excessive, in which case we will tell you before proceeding. We have one month to respond to a request. To exercise any of these rights, contact us at support@wearecareless.com.

Our data protection principles

We handle personal data in line with the principles of the UK GDPR. That means we process it lawfully, fairly and transparently; collect it only for specified, explicit and legitimate purposes; limit it to what is necessary; keep it accurate and up to date; retain it no longer than needed; and process it in a way that ensures appropriate security. We only process personal data where we have a lawful basis to do so — such as performing our contract with you, complying with a legal obligation, protecting someone's vital interests, or pursuing a legitimate interest — and, where required, with your consent.

Data security

We employ robust technical and organisational measures to ensure the security of your personal data.

Data breaches

If we become aware of, or suspect, a personal data breach, we assess and contain it promptly. Unless the breach is unlikely to result in a risk to individuals' rights and freedoms, we report it to the Information Commissioner's Office without undue delay and, where feasible, within 72 hours of becoming aware of it. Where a breach is likely to result in a high risk to your rights and freedoms, we also tell you directly and in plain language, without undue delay, so you can take any necessary precautions. We document every breach and the remedial action taken, whether or not it has to be reported.

How long we keep it

We retain personal data only for as long as necessary to fulfil the purposes set out in this policy and to comply with our legal obligations, resolve disputes and enforce our agreements — including to respond to questions, complaints or claims, and to keep records required by law or regulators. How long that is differs by record, and some are kept for longer because the FCA's rules require us to keep them. When it is no longer necessary to retain your personal information, we delete or anonymise it.

Cookies

We use cookies to analyse site traffic and improve user experience. See our Cookie Policy for details. You can change or withdraw your cookie preferences at any time using the Manage cookies link in the footer of our website pages and at the bottom of your account dashboard, or through your browser settings.

Changes to this policy

We keep this policy under regular review and may occasionally update it. Any changes will be posted on this page with an updated effective date. Continued use of our platform following any changes constitutes acceptance of the revised policy.

How to contact us and complain

For any query about this policy or the information we hold about you, contact us at support@wearecareless.com, via the app, or via careless.insure. If you have concerns about our use of your personal information, you can complain to us using those details. You may also contact our principal, Stubben Edge (Risk) Limited, at complaints@stubbenedge.com. If you remain unhappy with how we have used your data, you can complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; helpline 0303 123 1113; ico.org.uk.