Legal

Privacy Policy

Last updated: 27 September 2026

This privacy policy applies to optimal.world and the OptimalTrend Companion mobile application. Optimal values your privacy and is committed to protecting your personal data in line with applicable data protection legislation.

1. How We Use Your Data

Optimal would like to keep in touch with you to let you know about its latest news and provide you with updates on relevant products and services for marketing purposes; to communicate with stakeholders, potential and existing customers and others who expressly choose to submit their personal data through our website.

We value your privacy and will only process personal data in the following circumstances:

Where your consent is first provided by you. You have the right to withdraw your consent at any time by contacting us via email: enquiries@optimal.world.
Where it is necessary for the purposes of performing an existing contract to which you are a party or to take steps at your request before entering into such a contract.
Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

Optimal strives to collect and use data only when the law as per the country we do business in allows us to. This policy applies to our website and our mobile applications. If you no longer wish to be contacted for marketing purposes, please send an email to enquiries@optimal.world.

2. Your Data Protection Rights

Optimal would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

Right to Access
You have the right to request copies of your personal data from Optimal. We may charge a small fee for this service.
Right to Rectification
You have the right to request that Optimal corrects any information you believe is inaccurate or incomplete.
Right to Erasure
You can request that we delete the information we hold on you by contacting us using the details below.
Right to Restrict Processing
You have the right to request that Optimal restricts the processing of your personal data, under certain conditions.

If you make a request, we have one month to respond. To exercise any of these rights, please contact us at enquiries@optimal.world or call +44 1224 953231.

3. Mobile Application Data

The OptimalTrend Companion app collects and processes data to deliver predictive maintenance and asset intelligence services. The types of data handled by the application include:

Account Credentials
Username and authentication tokens used to access the OptimalTrend platform. Credentials are transmitted over TLS-encrypted connections and stored securely on device.
Vibration & Sensor Data
Equipment vibration measurements, temperature readings, and operational parameters collected from wireless sensors via Bluetooth Low Energy (BLE) and WiFi gateway connections.
Device Identifiers
Sensor hardware identifiers, MAC addresses, and gateway serial numbers used to associate measurements with specific equipment in the asset hierarchy.
AI Diagnostic Queries
Text queries submitted to the OptimalAI assistant for vibration analysis and maintenance advice. Queries are processed via our secure API and are not used to train third-party models.

Sensor data and diagnostic information are transmitted to the OptimalTrend server infrastructure for processing, analysis, and long-term storage. This data is used exclusively to provide predictive maintenance services to your organisation under the terms of your service agreement.

The app does not collect location data, personal contacts, browsing history, or any data unrelated to equipment performance and maintenance operations.

4. Data Security & Retention

Optimal implements appropriate technical and organisational measures to protect your data:

All data transmitted between the mobile app and OptimalTrend servers is encrypted using TLS 1.2 or higher.
Authentication tokens are stored in the device’s secure storage and expire automatically.
BLE and WiFi gateway communications use manufacturer-standard security protocols for sensor pairing and configuration.
Server infrastructure is hosted on AWS with industry-standard access controls, encryption at rest, and regular security audits.
Sensor measurement data is retained for the duration of the service agreement. Upon termination, data can be exported or securely deleted upon request.

In the event of a data breach affecting your personal data, we will notify you and any applicable supervisory authority within 72 hours, in accordance with applicable data protection legislation.

5. Cookies

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. When you visit our website, we may collect information from you automatically through cookies or similar technology. For further information, visit allaboutcookies.org.

Optimal uses cookies in a range of ways to improve your experience on our website, including helping us understand which pages you find useful. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

Overall, cookies help us provide you with a better website. You can choose to accept or decline cookies; most web browsers automatically accept them, but you can usually modify your browser setting to decline cookies if you prefer.

6. Contact Us

If you have any questions about this privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.

Registered Address
Optimal
Cirrus Building, 6 International Avenue, ABZ Business Park, Aberdeen AB21 0BH, United Kingdom

7. OptimalTREND mobile app (iOS and Android)

This section describes the current OptimalTREND companion app and takes precedence over any different mobile-app description in sections 3 and 4 above. The app reads permitted equipment, sensor and gateway information from the OptimalTREND service. It does not directly pair with sensors over Bluetooth or configure gateways over Wi-Fi, and it does not contain an in-app AI chat.

Who is responsible and why we use information

Optimal Asset Maintenance Solutions Ltd is the controller for the app-account, access and service-operation personal information described here. We use it to authenticate authorised users, apply role and asset permissions, provide equipment information and alerts, record authorised field work, protect the service and respond to support requests. For this business service, our lawful basis for account, access and security processing is our legitimate interests in providing and protecting the service; where we contract directly with an individual, performance of that contract may also apply. A customer may be the controller for personal information it supplies through its equipment or workforce records; the applicable customer agreement determines those responsibilities.

Information used by the app

  • Sign-in and access: username and password submitted for authentication, the resulting session token, and profile details such as name, email, role and authorised asset scope.
  • Equipment and field work: permitted asset hierarchies, sensor readings, condition evidence, alerts and gateway status retrieved from the service; and any maintenance notes, spot checks, photos or signatures that an authorised user chooses to submit.
  • Device and notifications: if notifications are enabled, a device push token and limited device/app information needed to deliver alerts. If a user enables biometric sign-in on a supported device, the operating system checks the biometric locally; OptimalTREND does not receive the fingerprint or face template.
  • Offline use: authorised reads may be cached on the device, and permitted field actions may be queued there until synchronisation is possible. A user can choose to copy a diagnostic summary for support; the app does not automatically send that summary.

The app does not include advertising or an in-app AI chat. It uses our hosting provider and, for enabled notifications, Google Firebase Cloud Messaging and Apple Push Notification service. Those providers process the information needed to deliver the service; authorised users within the customer organisation may see records according to their permissions. Provider processing may involve locations outside the UK. Contact us for the locations and transfer arrangements that apply to your service.

Retention, choices and rights

We determine retention by the purpose of each record rather than one blanket period. Account and access records are needed while access is authorised and afterwards only for documented security, audit, contractual or legal needs. Equipment and field evidence are retained according to the customer service agreement and applicable maintenance, audit or legal requirements. We review and remove or de-identify information when those needs end. Cached reads and pending actions remain on the device until replaced, synchronised, cleared through available controls or removed with the app; deleting the app does not by itself delete server records.

You can disable notifications in device settings, decline optional photos or signatures, and use the existing rights described in section 2. Depending on the circumstances, you may also have a right to data portability. You can complain to the UK Information Commissioner's Office.

You have the right to object to processing based on our legitimate interests. Contact us using the details below to exercise that right.

For app privacy questions, access or deletion requests, or details of applicable providers and international transfers, contact info@optimal.world. The company can be reached at the postal address in section 6.