Privacy Policy

Last updated: 3/3/2026

1. Introduction

CAREFUL Systems Ltd ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Information We Collect

2.1 Information You Provide

  • Contact information (name, email, phone number, organization)
  • Account credentials for our services
  • Communications you send to us
  • Information provided through forms on our website

2.2 Information Collected Automatically

  • IP address and device information
  • Browser type and version
  • Pages visited and time spent on our website
  • Referring website addresses
  • Technical error logs

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain our services
  • Respond to your inquiries and support requests
  • Send you updates about our services (with your consent)
  • Improve our website and services
  • Ensure security and prevent fraud
  • Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

  • With your explicit consent
  • To comply with legal obligations or court orders
  • To protect our rights, privacy, safety, or property
  • With service providers who assist in operating our website (under strict confidentiality agreements)
  • In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication measures
  • Employee training on data protection
  • Incident response procedures

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Our typical retention periods are:

  • Contact form submissions: 2 years
  • Account information: Duration of account plus 1 year
  • Technical logs: 90 days
  • Marketing communications: Until you unsubscribe

7. Your Rights

Under applicable data protection laws, you have the following rights:

  • Access: Request a copy of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your data
  • Portability: Request transfer of your data
  • Objection: Object to certain processing activities
  • Restriction: Request limitation of processing

To exercise these rights, please contact us at privacy@careful.online

8. Cookies and Tracking

We use cookies and similar technologies to enhance your experience on our website. For detailed information, please see our Cookie Policy.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses approved by relevant authorities.

10. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

CAREFUL Systems Ltd

Email: privacy@careful.online

Phone: +44 (0)20 8050 3251

Address: 123 Healthcare Street, London, EC1A 1AA, United Kingdom

13. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our data protection practices. You can contact our DPO at dpo@careful.online.

14. Supervisory Authority

If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority. In the UK, this is the Information Commissioner's Office (ICO).