Privacy

Contact form

When you contact us, we collect your name, email address and message to respond to your enquiry. Your message is sent to our team through our email delivery provider. Please include only the information needed for your enquiry.

We also process your IP address, form timing and a hidden anti-spam field to limit spam and abusive submissions. These checks help protect the form and do not require analytics or advertising consent.

Keeping a quote on file

On the /go/<plan> page, you can choose to save your email address with the selected plan, insurer and displayed price. CiC Insurances stores this information to keep your quote on file and follow up on your enquiry. Saving a quote does not send you an email automatically. We use your IP address and a hidden anti-spam field to limit abuse of this form.

If you continue to an insurer, you leave our site. The insurer receives your visit and handles information you provide there under its own privacy notice.

Optional analytics and advertising cookies

We load the following tools only after you select Accept in our cookie banner. Rejecting them leaves the comparison tools and forms available.

• Matomo: our analytics service at analytics.safeandnotsorry.com collects page visits, referrers, link clicks (including insurer click-outs), device and browser information, IP address and cookie identifiers. We use it to understand site use and improve comparisons. CiC Insurances, as operator of this Matomo installation, receives the analytics data. Matomo is the analytics software provider.
• Piwik PRO: collects page and interaction events, referrers, device and browser information, IP address and cookie identifiers for site analytics and tag management. Piwik PRO, the service provider, receives this data to provide the service.
• Meta Pixel: sends page-view events, the page URL, browser and device information, IP address and cookie identifiers to Meta, the provider and recipient. We use it to measure advertising results. Meta may associate these events with your Meta account and use them for advertising under its own privacy policy.

These providers may process data in countries outside your country of residence. Analytics and advertising tools can recognise returning browsers through their cookies.

Change or withdraw consent

Use Cookie settings in the footer of any page to reopen the choice, then select Reject to withdraw consent. The page reloads to stop the loaded trackers, and they stay off on subsequent visits. Withdrawal does not undo processing that already occurred. You can also delete existing analytics and advertising cookies in your browser settings.

We remember Accept or Reject for 180 days in the first-party sans_tracking_consent cookie. This cookie stores only your choice and is needed to respect it. If you delete it, we ask again. In embedded mode, including partner frames, we load no trackers and show no consent banner, even if you previously accepted.

Importing booking emails

When available, this optional tool reads booking emails to pre-fill a comparison for one traveler. We extract travel dates, destination and transit countries, traveler count, and a birth date or age if stated. You can check and change the fields before using them. We do not send your booking to insurers or send a result email.

Files are parsed in server memory, without saving them to disk or a database. Extracted candidates stay in memory only and are deleted on confirmation, on request, or after 15 minutes. Failed imports are not retained. We do not put booking content in logs. The final quote link carries the confirmed comparison parameters, without trip dates or the candidate identifier.

If structured parsing finds nothing, we use AI only with your separate consent on the upload page. OpenCode Go, operated by Anomaly, processes this text using LongCat 2.5 Preview Free (longcat-2.5-preview-free), with MiMo-V2.6-Flash (mimo-v2.6-flash) as fallback. OpenCode lists both models as not used for training, with 0-day retention (Go documentation captured 2026-10-17). Before sending email body text, we remove email addresses and runs of seven or more digits, including groups joined by single spaces, tabs, hyphens or dots and any leading +, except date tokens (YYYY-MM-DD, DD.MM.YYYY, DD-MM-YYYY, YYYY.MM.DD, years 1900–2099, months 01–12, days 01–31). Dates delimit separator-joined number runs, so adjacent times such as 14:30 survive and adjacent runs of seven or more digits are still removed. Other personal details, including a stated age or birth date, may remain. This is not an EU-hosted service; processing may occur outside the EU. Our memory-only retention describes our application; it does not bind OpenCode or the model providers to deletion within 15 minutes.

Import pages use Matomo only after cookie consent, with the candidate identifier removed from the tracked URL. Other optional trackers are not loaded on these pages. Embedded mode loads no trackers.

Your data

We use form information to handle your request and protect the service, and optional tracking data on the basis of your consent. We keep enquiry and quote information for as long as needed to handle the enquiry and any applicable record-keeping obligations. Access is limited to our team and service providers helping us operate the site and respond to you.

You can ask to access, correct or delete your personal data, or ask about other rights available under applicable law, through our contact form. You may also contact the relevant data protection authority.