Privacy Policy

careless™

last updated: August 2026

Who we are

careless™ is a trading name of Careless Technologies Limited (registered in England & Wales, company no. 14504628; registered office 71–75 Shelton Street, Covent Garden, London WC2H 9JQ). Careless Technologies Limited is an Appointed Representative of Stubben Edge (Risk) Limited (company no. 09073942), which is authorised and regulated by the Financial Conduct Authority (FRN 943286).

You may check this on the Financial Services Register at register.fca.org.uk or by contacting the FCA on 0800 111 6768. careless™ is an insurance intermediary for personal belongings and business cover, and is committed to the privacy, confidentiality and protection of personal data. This policy explains how we collect, use and store your personal information. For the purposes of UK data protection law, Careless Technologies Limited is the data controller for the information described below.

By using our site, app and services, you signify your acceptance of this policy. Your continued use following any changes will be deemed acceptance of those changes.

What we collect

We collect personal data when you access our website, interact with our services, or communicate with our team. This may include, but is not limited to:

  • Personal identifiers such as your name, email address, phone number, postal address and IP address

  • For business cover, details of your business (including information sourced from Companies House)

  • Payment information, processed securely by third-party payment providers

  • Details of the items or business activities you ask us to cover, provided during your quote

  • Device and usage data collected via cookies and analytics tools

We collect this information to provide your insurance cover and meet our obligations, respond to queries and provide support, maintain and improve our services, and comply with our legal obligations.

The lawful basis we rely on is the performance of our contract with you (or taking steps at your request to enter into one), compliance with our legal and regulatory obligations, and our legitimate interests in operating and improving the platform. You do not have to give consent, but if you do not, this may affect our ability to provide the cover from which you benefit.

Who we share it with

We may share your data with trusted third parties for the purposes set out above, including:

  • Insurers and managing general agents — 1Edge Insurance PCC Limited (personal belongings) and Kovrilo, backed by Mission, with cover underwritten by a panel of UK insurers including ARAG Legal Expenses Insurance Company Limited, Great American International Insurance (UK) Limited and HSB Engineering Insurance Limited (commercial business cover) — to assess, price and issue your policy

  • Claims handlers and claims platforms — Claims Consortium Group and the SynergyCloud claims platform for personal belongings, and Qlaims Limited (with HSB Engineering Insurance for cyber and equipment-breakdown claims) for business cover

  • Loss adjusters, private investigators, legal advisers, accountants, auditors and other professional service firms

  • Third parties who provide services relating to your product (for example, legal expenses cover)

  • Our regulators and law enforcement, as necessary for fraud prevention and detection

  • Financial crime detection agencies, sanction-checking providers, and third parties who maintain fraud-detection databases or assist with investigations where fraud is suspected

  • Insurance industry bodies, including the Employers' Liability Tracing Office (ELTO, where required for business Employers' Liability cover) and the Association of British Insurers

  • Credit reference agencies

  • Payment processors and service providers that host our platform, send our service emails and help us verify business and address details

We share only what is necessary to deliver your cover and our services, and we require these parties to protect your information and use it only for those purposes. We do not sell your personal information. Some of our analytics and session-replay providers (for example Google Analytics and Microsoft Clarity, which run only where you have consented to Analytics cookies) may process data outside the United Kingdom or European Economic Area; where they do, we rely on appropriate safeguards, and we will not otherwise transfer your personal data outside the UK or EEA without such safeguards in place.

Automated processing and profiling

To determine insurance limits and premiums, and to understand patterns, we may compile and analyse information across customers to model likelihoods, and use profiling to assess both the risk and the premium for you and others with similar exposures. Where a decision about your policy is made by automated means, the process considers the information you provide (for example, details of what you wish to insure) alongside other information such as postcode and analytics to determine whether cover can be accepted and at what premium. Where we make an automated decision about you, you may request that it be verified and reviewed by an individual.

Your privacy rights

Under the UK GDPR and the Data Protection Act 2018, you have the right to:

  • Be informed about the collection and use of your personal data

  • Access — request a copy of the personal information we hold about you

  • Rectification — ask us to correct inaccurate or incomplete information

  • Erasure — ask us to delete your personal information, subject to certain exceptions (for example, records we must keep for regulatory reasons)

  • Restriction & objection — limit or object to certain uses of your data, including direct marketing

  • Portability — receive the data you provided to us in a machine-readable format

  • Withdraw consent at any time

For more information on these rights, see the guidance from the Information Commissioner's Office (ICO). You are not required to pay a charge to exercise your rights, unless a request is repetitive or excessive, in which case we will tell you before proceeding. We have one month to respond to a request. To exercise any of these rights, contact us at support@wearecareless.com.

Our data protection principles

We handle personal data in line with the principles of the UK GDPR. That means we process it lawfully, fairly and transparently; collect it only for specified, explicit and legitimate purposes; limit it to what is necessary; keep it accurate and up to date; retain it no longer than needed; and process it in a way that ensures appropriate security. We only process personal data where we have a lawful basis to do so — such as performing our contract with you, complying with a legal obligation, protecting someone's vital interests, or pursuing a legitimate interest — and, where required, with your consent.

Data security

We employ robust technical and organisational measures to ensure the security of your personal data.

Data breaches

If we become aware of, or suspect, a personal data breach, we assess and contain it promptly. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify the Information Commissioner's Office without undue delay and, where feasible, within 72 hours, and will notify affected individuals directly and in plain language so they can take any necessary precautions. We document every breach and the remedial action taken.

How long we keep it

We retain personal data only for as long as necessary to fulfil the purposes set out in this policy and to comply with our legal obligations, resolve disputes and enforce our agreements — including to respond to questions, complaints or claims, and to keep records required by law or regulators. Different retention periods apply to different types of data under our data retention policy. When it is no longer necessary to retain your personal information, we delete or anonymise it.

Cookies

We use cookies to analyse site traffic and improve user experience. See our Cookie Policy for details. You can manage cookie preferences at any time via your browser settings.

Changes to this policy

We keep this policy under regular review and may occasionally update it. Any changes will be posted on this page with an updated effective date. Continued use of our platform following any changes constitutes acceptance of the revised policy.

How to contact us and complain

For any query about this policy or the information we hold about you, contact us at support@wearecareless.com, via the app, or via www.wearecareless.com. If you have concerns about our use of your personal information, you can complain to us using those details. You may also contact our principal, Stubben Edge (Risk) Limited, at complaints@stubbenedge.com. If you remain unhappy with how we have used your data, you can complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; helpline 0303 123 1113; ico.org.uk.