Compliance & regulation
HelloSafe is an independent marketplace: we compare policies from FCA-authorised insurers and brokers, and we never sell or underwrite a policy ourselves. The advice, the regulatory documents, claims and complaints sit with our insurer partners. You keep the client relationship and the commission.
The distribution model
Three roles, three sets of responsibilities. The regulated activity never sits with you, and it never sits with HelloSafe either.
You recommend and route: tracked links, widget, white-label or API. You follow the marketing rules and keep your client relationship.
HelloSafe compares policies and connects travellers to FCA-authorised insurers and brokers. We never sell or underwrite a policy ourselves; the regulated sale happens with our insurer partners.
FCA-authorised insurers such as Aviva, Zurich and Europ Assistance, and their appointed brands, underwrite the policies compared on HelloSafe. We distribute independently, with no exclusive agreements.
Authorisation by integration mode
Whatever the integration depth, the regulated insurance distribution stays with our FCA-authorised insurer partners. The only thing that changes is how the journey is embedded.
Tracked links and the comparison widget route to HelloSafe's journey. You never collect insurance data, so no FCA registration is required on your side.
Quote and checkout run on HelloSafe's marketplace, in your colours. The FCA-authorised insurers, the policy documents and the support remain theirs.
Even with quotes rendered in your interface, binding happens with the FCA-authorised insurer, with the regulatory documents issued by them. Your product stays a product, not a brokerage.
Insurance distribution rules apply across the UK. Every partner is reviewed at signup: we flag anything specific to your setup before you go live.
Data & privacy
The programme keeps personal data where it belongs: with the traveller and the insurer, not scattered across your systems. We follow UK GDPR and the Data Protection Act 2018, under the Information Commissioner's Office (ICO).
Consent-first analytics, minimal collection and documented processing, from the click to the certificate.
Payment runs on HelloSafe's hosted checkout. Card numbers never touch your stack: your PCI surface stays at zero.
Your dashboard works on clicks, quotes, sales and Sub-IDs. You receive neither identity documents nor insurance policy files.
API keys are scoped per caller and revocable one by one. Access to conversion data follows the same boundaries.
Fraud & integrity
Commissions only move on signed, verified events. The controls that protect HelloSafe protect your revenue too.
Every conversion is signed with a per-caller HMAC-SHA256 key and rejected outside a 5 minute replay window.
A ref must match the link's real owner. Forged or mismatched refs are refused, never silently accepted.
pending, validated, cancelled: forbidden transitions return an error instead of overwriting the ledger.
Per-conversion amount ceilings, FX rates frozen at ingest and an auditable trail on every state change.
Marketing rules
The programme protects travellers and partners alike. The rules fit in two lists.
What partners check before they sign.
No. HelloSafe is an independent marketplace and never sells or underwrites insurance itself. Our FCA-authorised insurer and broker partners carry the regulated distribution. You recommend and route; the regulated sale happens on their side.
The insurer, alongside HelloSafe as the marketplace. The traveller gets a dedicated support path and a formal complaints process with the insurer. Your role ends at the recommendation, and your dashboard keeps the commission visible.
No. Payment runs on HelloSafe's hosted checkout. Your stack never sees a card number, which keeps your PCI exposure at zero.
Practically none. Reporting is built on clicks, quotes, sales and the Sub-IDs you define. Identity documents and policy files stay between the traveller, HelloSafe and the insurer.
Yes. White-label changes the brand on the journey, not who carries the regulated activity. Regulatory documents, advice obligations and support remain the FCA-authorised insurer's responsibility.
Brand bidding on HelloSafe in paid search, misleading claims, spam, cashback mechanics and unsolicited extensions. The full list ships with the programme terms; accounts that cross it are closed.
Cover spans 190+ destinations, and one link routes each visitor to the journey localised for their market. At signup we review your audience and flag anything specific to your setup.
A compliance question we didn't cover? Contact us
No FCA authorisation needed, full speed
Tell us where your audience is and how you want to integrate. We confirm the compliant path for your setup within 24 hours.
