How we safeguard the data that moves through our work.
Optillium embeds access control, review trails, and transparency into every automation and AI engagement. This policy explains how we collect, use, store, and protect information across the work we deliver.
Last updated: December 15, 2024
Information we collect
Business and contact details
- Names, work emails, phone numbers, and company information supplied through forms or discovery workshops.
- Role, team, and industry details used to tailor delivery squads and communications.
- Engagement metadata such as project history, meeting notes, and support conversations.
Usage and telemetry
- Cookie-free page-performance information from Cloudflare Web Analytics, used to understand how the public website is delivered.
- Basic technical request, error, and security records processed by website infrastructure to deliver and protect the site.
- Information you deliberately submit through forms, chat, demonstrations, or calculators.
How we use your information
Deliver services
- Scope, design, and operate automation, copilot, finance, and computer vision engagements.
- Provide proposals, statements of work, delivery plans, and review artefacts.
- Send operational updates, support responses, and engagement analytics.
Improve and secure
- Improve our playbooks, benchmarks, and ROI models using aggregated insights.
- Operate, maintain, and secure our infrastructure with monitoring and testing.
- Share Optillium news, resources, or events when you opt in, with unsubscribe available at any time.
When we share data
No sale of personal data
- We never sell or rent personal information. Sharing occurs only to deliver contracted services or meet legal obligations.
Limited sharing scenarios
- Service providers used for hosting, security, email delivery, and selected website features, limited to the information needed for those functions.
- Professional advisors and auditors bound by confidentiality.
- Legal or regulatory authorities when required to comply with applicable law.
- Business transfers with advance notice if Optillium is involved in a merger or acquisition.
Security measures
Technical safeguards
- Technical and access safeguards are selected for the systems and information involved in each engagement.
- Project agreements can document relevant identity, access, logging, retention, and incident-handling responsibilities.
- Security requirements and any third-party platform controls should be confirmed before sensitive information is introduced.
Organisational controls
- Optillium does not use this policy to claim a security certification or a single deployment profile for every project.
- Applicable vendor, confidentiality, notification, and review responsibilities are defined through the relevant engagement documents.
- Questions about a proposed system's controls can be addressed during project scoping and security review.
Your privacy rights
Data subject requests
- Access a copy of the personal data we hold about you.
- Request correction or deletion subject to legal retention requirements.
- Export data in a machine-readable format.
- Object to or restrict certain processing activities.
Communication choices
- Update marketing preferences or unsubscribe at any time.
- Work with your Optillium delivery lead to configure project telemetry and data retention where relevant.
International transfers
Project-specific processing locations
- Processing and storage locations depend on the website service, project, and platforms selected.
- Any required cross-border transfer terms or data-processing agreements should be confirmed in the applicable engagement documents.
- Contact Optillium before sharing sensitive information if location or residency requirements apply.
What matters most
The short version is simple: we do not sell personal data, we minimise what we collect, and we design delivery work around security, access control, and defensible audit trails.
Exercise your rights
Email [email protected] with the right you wish to exercise and the jurisdiction that applies to your request.
Appeals
If you are unsatisfied with our response, you may escalate to your regional data protection authority or regulatory body.
Data retention
Retention depends on the purpose, legal requirements, and applicable engagement terms. Contact us to confirm the period that applies to a specific record or project.
Third-party links
Resources we share may link to other sites with their own privacy policies. Review those policies before providing information.
Need help?
Questions about privacy or data handling?
Email [email protected] with the type of request, the information involved, and the jurisdiction that applies.
Project-specific security, privacy, residency, and onboarding requirements should be confirmed before sensitive information is introduced.