Privacy Policy

Last updated: May 27, 2026

This Privacy Policy explains how Optuma Pty Ltd (ABN 41 628 890 095) ("Optuma", "we", "us", "our") collects, uses, stores, shares and protects personal information when you visit optuma.com, create or use an account on portal.optuma.com, use the Optuma web platform ("Optuma") or Optuma Desktop, attend our events, subscribe to our communications, or otherwise interact with us.

Optuma is the data controller for the personal information described in this policy. We are based in Australia and rely on a small number of carefully chosen service providers to deliver our products and services globally. We do not have, and have not appointed, an EU representative under Article 27 of the GDPR; you can contact us directly using the details in section 11.

If you do not agree with this policy, please do not use our websites, products or services.

1. Scope

This policy covers:

Our marketing website at optuma.com (including pages such as /desktop/, /price/, /request-access/, /contact/, the blog, and the affiliate program);
Account creation, login, billing and self-service on portal.optuma.com;
The Optuma web platform (the web-first analytical platform comprising Analysis, Models and Portfolio Management); and
Optuma Desktop, our long-standing Windows and macOS application, including its 14-day trial.

Our learning site (learn.optuma.com), help desk (help.optuma.com) and community forum (forum.optuma.com) may display additional notices specific to those services. Where this policy conflicts with a notice on those sites, the more specific notice applies for that site.

2. Personal information we collect

2.1 Information you give us

You provide personal information when you fill in a form, request a trial or demo, purchase a subscription, contact our team, or otherwise communicate with us. Depending on the interaction, this may include:

Contact details — first name, last name, email address, phone number, country, and (where you choose to provide it) the name of your company or firm.
Demo and access requests — your email, name, phone, and a free-text description of how you intend to use Optuma (submitted via /request-access/).
Optuma Desktop trial sign-up — first name, last name, email, country, phone number, the edition you wish to trial, and credit-card details (number, expiry and CVC) used solely to verify your identity via a $1 pre-authorisation. Card data is transmitted through, and processed by, our PCI-compliant payment providers; we do not store full card numbers on our own servers.
Waitlist sign-ups — email and (optionally) first/last name and the product you are interested in.
Consultation, affiliate and contact enquiries — name, email, phone, timezone, website or social-media handle, company name, and the free-text content of your message.
Account information — when you purchase or trial a product, additional billing information, account preferences and authentication data are processed via portal.optuma.com.
Support correspondence — the contents of any email, help-desk ticket or chat you send us, including any screenshots, attachments or sample files you choose to share.

2.2 Information generated when you use our products

When you use Optuma or Optuma Desktop, we (or our infrastructure providers) collect or process information necessary to deliver the service, including:

Workspaces, watchlists, charts, scripts, indicators, scans, alerts, models, strategies, backtests, portfolios, sleeves, rebalance decisions, reports, and any other content you create, upload or save;
Connections you authorise to third-party data sources (for example custodians, brokers or market-data providers), and the data returned by those connections;
Authentication events, IP address, device and browser characteristics, locale, and usage telemetry (such as feature usage, error logs and performance data) that we use to operate, secure and improve the products.

2.3 Information collected automatically on our websites

When you visit our websites we (and our processors) automatically collect a limited amount of technical information, including IP address, approximate location (derived from IP), device type, browser type, language, referring URL, the pages you view, and timestamps. This information is collected through server logs and the cookies and similar technologies described in section 4.

3. Why we use your information and our lawful bases

If you are in the European Economic Area, the United Kingdom or another jurisdiction that requires us to identify a lawful basis for processing personal information, the relevant bases under Article 6 of the GDPR/UK GDPR are set out below.

To provide our products and services — including creating and managing your account, delivering Optuma and Optuma Desktop, hosting your content, processing payments, providing support, and responding to enquiries. Lawful basis: performance of a contract with you (Art. 6(1)(b)), or steps taken at your request prior to entering a contract.
To run our business — including security monitoring, fraud prevention, debugging, analytics on aggregated product usage, internal reporting, and improving our products and content. Lawful basis: our legitimate interests (Art. 6(1)(f)) in operating a secure and efficient business.
To send marketing and educational communications — including newsletters, product updates, webinars and event invitations. Lawful basis: your consent (Art. 6(1)(a)) where required, otherwise our legitimate interests in marketing our products to existing customers and to people who have asked to hear from us. You can unsubscribe at any time using the link in every email.
To measure and improve our websites and advertising — using the analytics and advertising cookies described in section 4. Lawful basis: your consent.
To meet our legal obligations — including tax, accounting, anti-money-laundering, records retention, and responding to lawful requests from authorities. Lawful basis: legal obligation (Art. 6(1)(c)).
To establish, exercise or defend legal claims, and to enforce our Terms and Conditions. Lawful basis: our legitimate interests.

4. Cookies and similar technologies

A cookie is a small data file that a website stores on your device. We use cookies and similar technologies (such as localStorage) to make the site work, to remember your preferences, and — only with your consent — to understand how the site is used and to measure our advertising. You can change your choice at any time using the link in the footer, or by clearing your browser's cookies and localStorage for this site.

We group cookies and similar technologies into four categories.

Necessary (always on)

Required for the site to function or to record your privacy choices. These include the cookie that records your consent choice (optuma_cookie_consent, stored in localStorage for 12 months), the third-party cookies set by Trustpilot when our review-score widget loads (used to display our social-proof rating; allowed on a legitimate-interests basis and not used by us for analytics or advertising), and font-delivery cookies that may be set by Adobe Typekit (use.typekit.net) when serving our display typeface. We also set a first-party referral cookie (cname) when you arrive through a partner or affiliate campaign link, so that any trial or access request you then submit can be credited to the correct partner; it stores only a short campaign code, lasts 14 days, and is never used for advertising or shared with third parties.

Functional

Remember your preferences across visits — for example, whether you have dismissed our launch banner (optuma_launch_banner_dismissed_v*, where the version suffix changes when we publish a new banner). Set only if you allow them.

Analytics

Google Analytics 4, delivered via Google Tag Manager (container GTM-WBFKL8M). Used to count visitors, understand which pages are useful, and improve the site. Typical cookies: _ga, _ga_*, _gid. Set only if you allow them.

Marketing

Google Ads conversion tracking and remarketing, delivered via the same Google Tag Manager container. Typical cookies: _gcl_au, _gcl_aw. Set only if you allow them.

Google Consent Mode v2

We use Google's Consent Mode v2. Before you make a choice (or if you decline analytics or marketing), Google may receive a small number of anonymised "ping" signals that contain no personal data and set no cookies. These signals help Google model aggregate site traffic. They stop being sent if you opt out of analytics in Cookie Settings.

Embedded video

Some blog articles embed videos hosted on YouTube. When you play an embedded video, YouTube (Google LLC) may set its own cookies and process information about your playback session under its own privacy policy.

5. How we share your information

We do not sell your personal information. We share it only in the limited circumstances described below.

5.1 Service providers (sub-processors)

We use a small number of trusted service providers to host our infrastructure, deliver our software, and operate our business. They process personal information on our behalf, under contracts that require them to protect it and use it only for the purposes we specify. Our current key providers are:

Cloudflare, Inc. (United States) — hosting for our website, edge cache, Workers for limited dynamic endpoints, observability logs, and bot protection on our submission forms via Cloudflare Turnstile. Turnstile is configured in invisible mode and inspects a small amount of browser and network information (such as your IP address, browser version, and basic interaction signals) to distinguish humans from automated scripts. See Cloudflare's Turnstile Privacy Addendum for the specific data Cloudflare processes for this purpose.
Sanity.io (United States / global) — the content-management system that powers editable copy and images on this website.
Google LLC (United States) — Google Tag Manager, Google Analytics 4, Google Ads conversion measurement, and YouTube video hosting for embedded videos.
Trustpilot A/S (Denmark) — display of our customer review rating.
Adobe Inc. (United States) — Adobe Typekit web-font delivery.
Payment processors — PCI-compliant merchant providers used to process trial pre-authorisations and subscription payments initiated through portal.optuma.com or the Optuma Desktop trial flow.
Help-desk, email and CRM tools — used to manage customer support tickets, billing notifications and marketing emails.

5.2 Optional integrations and partner modules

If you choose to add a custom tool, module or integration to your Optuma products (for example a third-party indicator, broker connection, custodian feed or specialist plug-in), your name, email and phone number — and any data you choose to connect — will be shared with the provider of that tool so they can deliver and support it. You can decline to enable any such integration.

5.3 Other disclosures

We may also disclose personal information:

To affiliated companies within the Optuma corporate group, where they help us provide our products or run our business. The protections of this policy apply to information shared in those circumstances.
To a buyer or successor in the event of a merger, acquisition, financing, reorganisation or sale of all or part of our assets, subject to confidentiality protections.
Where we are required or permitted by law — for example to comply with a court order, lawful request from a regulator, or to protect the rights, property or safety of Optuma, our customers or others.

6. International data transfers

Optuma is based in Australia. Several of our service providers (including Cloudflare, Google, Sanity and Adobe) are located in, or process data in, the United States and other countries. Where personal information is transferred out of the European Economic Area, the United Kingdom or another jurisdiction with data-transfer rules, we rely on:

European Commission adequacy decisions where one is in force for the destination country;
The European Commission's Standard Contractual Clauses (and the UK Addendum where relevant) for transfers to other countries; and/or
Other transfer mechanisms permitted under applicable law.

You can ask us for further information about the transfer mechanism we use for a particular transfer by contacting us at the address in section 11.

7. How long we keep your information

We keep personal information only for as long as we need it for the purposes set out in this policy, plus a reasonable period to meet our legal, accounting, tax and audit obligations and to defend potential legal claims. As a general guide:

Account and billing records — for the duration of your customer relationship with us and at least seven years after your last invoice, to meet Australian tax and record-keeping laws.
Marketing-list data — until you unsubscribe or ask us to delete it, plus a short suppression-list retention to prevent us emailing you again by mistake.
Support correspondence — generally up to seven years, to help us understand recurring issues and to defend potential claims.
Trial and demo enquiries that do not convert — typically up to 24 months, after which we delete or anonymise the record.
Website analytics — aggregated indefinitely; identifiable records typically retained by Google for up to 14 months.
Server and security logs — typically up to 90 days, longer where needed to investigate an incident.

8. Security

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, modification and disclosure. These include encryption of data in transit using HTTPS/TLS, hosting at the Cloudflare edge with DDoS and bot protection, role-based access controls for our staff, separation of duties between marketing, product and finance systems, and the use of PCI-compliant payment providers for all card data. We do not store full credit-card numbers in our own systems.

No method of transmission or storage is ever completely secure, but we work hard to protect your information and to respond promptly to any incident that may put it at risk.

9. Your rights

9.1 Everyone

You can ask us to access, correct, update or delete information we hold about you at any time. You can also unsubscribe from marketing emails using the link at the bottom of any newsletter, or change your cookie preferences using the link in the footer. Where you have an account, you can usually correct or delete information yourself by logging in to portal.optuma.com/myaccount and choosing the relevant option (including "Delete Account").

9.2 European Economic Area and United Kingdom

If the GDPR or UK GDPR applies to our processing of your information, you have the right to:

Request access to your personal information;
Ask us to correct inaccurate information or complete incomplete information;
Ask us to erase your information where one of the GDPR grounds applies;
Restrict our processing, or object to processing carried out on a legitimate-interests basis (including direct marketing);
Receive a copy of certain information in a structured, machine-readable format (data portability);
Withdraw consent at any time where we rely on consent (this does not affect the lawfulness of any processing carried out before you withdrew); and
Lodge a complaint with a supervisory authority in your country of residence, place of work, or the place where you believe an issue occurred.

9.3 California and other US states

If you are a resident of California, Colorado, Connecticut, Utah, Virginia or another US state with comparable privacy legislation, you have additional rights, including the right to:

Know what categories of personal information we have collected about you, the sources, the purposes, and the categories of recipients we have shared it with;
Access a copy of the specific pieces of personal information we hold about you;
Correct inaccurate personal information;
Delete personal information, subject to legal exceptions;
Opt out of "sale" or "sharing" of personal information for cross-context behavioural advertising, and limit the use of any sensitive personal information; and
Not be subject to discrimination for exercising any of these rights.

We do not sell personal information for money. We do share limited online identifiers with Google for advertising measurement and remarketing, which some US state laws treat as "sharing" or a "sale" — you can opt out of this at any time by setting Marketing cookies to "off" in , or by enabling a recognised opt-out signal such as Global Privacy Control in your browser.

You can submit a privacy request, including through an authorised agent, by contacting us using the details in section 11. We will verify your request using information already in our records (for example, by sending a confirmation to the email address associated with your account) before fulfilling it.

10. Children

Our products and services are intended for finance professionals and are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. How to contact us

If you have a question about this policy, want to exercise any of your rights, or want to make a complaint, please contact us:

By email: privacy@optuma.com
By post: Privacy Officer, Optuma Pty Ltd, Level 6, 200 Adelaide St, BRISBANE QLD 4000, AUSTRALIA
By help desk: help.optuma.com

We will respond to your request within the timeframes required by the law that applies to you. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au, or to your local data-protection supervisory authority.

12. Changes to this policy

We may update this policy from time to time to reflect changes to our products, services, technology or legal obligations. When we do, we will update the "Last updated" date at the top of this page. If the changes are material, we will take additional steps to bring them to your attention (for example by email or a notice on the website).