Security

We build Optiml with a privacy-first, security-by-design mindset. From the way we architect our systems to the way we store data, every layer is designed to protect users and keep the site reliable.

All traffic to and from optiml.co.uk is encrypted using modern HTTPS (TLS) protocols. This helps prevent eavesdropping and tampering while your data is in transit.

We use professionally managed, cloud-hosted infrastructure with built-in redundancy, firewalls, and continuous patching. Our architecture separates key services to reduce risk and contains automated scaling to withstand high traffic securely.

Only authorised personnel have access to backend systems, protected by strong authentication and strict role-based permissions. All access is logged and reviewed.

• We validate inputs and encode outputs to reduce common web risks like XSS.
• We regularly update dependencies and monitor for known vulnerabilities.
• Security headers and rate limiting help protect against abuse.

Our systems are continuously monitored for performance and anomalies. Automated alerts and error tracking help us respond quickly to potential issues or threats.

We collect only the data needed to deliver our services. Most calculator inputs are stored locally in your browser - not on our servers - meaning you remain in control and can clear them at any time.

If we ever detect a security incident, we investigate quickly and take steps to mitigate risk. Where legally required, we notify affected users and regulators such as the ICO.

If you believe you have found a security vulnerability, we encourage you to report it responsibly by emailing contact@optiml.co.uk.