Privacy Policy

Last updated: 13th of October 2025

INTRODUCTION

BIG DECISIONS S.L.U. ("We," "Our," "BIG DECISIONS") is a Decision Science business, using AI technology to support business and marketing decision making using data and data products.

We take seriously the privacy interests and consumer choices of the individuals whose information we handle and maintain in our database. This Privacy Policy describes how we collect, use and manage information, and what rights consumers have to control how their information is used in marketing.

Data Controller:

  • Company Name: Big Decisions, S.L.U.
  • Registered Address: Calle Arroyo del Soto, 2, 28914, Leganés, Madrid, Spain
  • Company Registration Number: B56213069
  • Email:privacy@the297.com

About Our Services and Products:

Big Decisions provides:

  • BDS Services: The undertaking of AI, data science or data engineering projects for our customers, usually with the guiding principle that use of data, data-derived intelligence and AI processing and/or automation result in improved efficiency and effectiveness of functioning across various business departments. BDS Services are typically delivered as SaaS platform solutions, though may include bespoke services (data engineering, data science, AI consultancy and product building) for specific clients to their specification.
  • BDS Products: Our proprietary subscription-based products created to support business decision making and processes. These are based on data analysis, data science and AI processing. BDS products may be subject to limitations on either (i) the number of transactions or data processing operations, or (ii) the number of End Users, or (iii) both, as specified in applicable agreements.

1. INFORMATION COLLECTED

BIG DECISIONS S.L.U. may collect information from users of our website(s) (including any page on which this Privacy Policy is posted), including:

1.1 Automatically Collected Information

The domain name and IP address of a user's web browser, along with a time stamp and other information about a user's browser or device which are anonymised data.

Information about what content and pages users' access, utilise or visit on our website, or how they interact with our content - for instance, if they spent a certain amount of time reviewing a particular blog post or description of particular services.

1.2 Information You Provide

Information, including personally identifiable and contact information that you provide, which could include (for instance) survey information, sign-up information (e.g., if you sign up for events or newsletters), requests for information, mailing addresses and email addresses, with the data subject express consent by clicking on the ticking box.

This may also include:

  • Account registration information for our BDS Products and Services
  • Subscription and billing information
  • Communications with our customer support team
  • Information provided in Order Forms or Statements of Work
  • End User information (when you use our BDS Products and Services)

1.3 Customer Data

When you use our BDS Products and Services, you may upload, submit, or process data ("Customer Data"). You remain the data controller of such Customer Data, and we process it on your behalf as a data processor in accordance with our Data Processing Agreement (DPA). This Privacy Policy does not apply to Customer Data processed through our BDS Products and Services; please refer to the DPA for information on how we handle Customer Data.

2. HOW BIG DECISIONS S.L.U. USES THE INFORMATION WE COLLECT

We use the Information we collect through our website(s) to do the following:

2.1 Service Delivery and Communications

Provide Services to you.

Respond to and communicate with you (including regarding news and updates about our services).

  • To provide access to our BDS Products and deliver BDS Services
  • To create and manage your account and subscriptions
  • To process transactions and send billing information
  • To provide customer support and respond to enquiries
  • To authenticate users and maintain security

2.2 Marketing and Promotional Activities

Send you offers and ads for our products and services, when you browse the website(s), if you consented to it.

Send you offers and ads for products and services of partner brands, or other offers we believe may be of interest to you, such as invitations to events and webinars, if you consented to it.

2.3 Service Improvement and Analytics

  • To monitor and analyse usage patterns and trends
  • To improve and optimise our BDS Products and Services
  • To develop new features and functionality
  • To conduct research and development in AI and data science

2.4 Legal and Security Purposes

  • To comply with legal obligations and regulatory requirements
  • To enforce our terms and conditions
  • To protect against fraud, security threats, and illegal activities
  • To resolve disputes and troubleshoot problems

3. HOW BIG DECISIONS S.L.U. SHARES THE INFORMATION WE COLLECT

We may sometimes share or otherwise disclose the Information we collect about you, as described in this Privacy Policy or otherwise disclosed to you when you provide us with the information, including as follows:

3.1 Service Providers

We may share the Information with service providers who help us deliver the services you request, or we provide. And other companies that may help us deliver or develop Services.

These service providers may include:

  • Cloud hosting and infrastructure providers
  • Payment processors
  • Customer relationship management (CRM) systems
  • Email and communication platforms
  • Analytics and monitoring services
  • IT support and maintenance providers

3.2 Marketing and Communications

We may share the Information to communicate with you and market to you, including through email, direct mail or telephone as per your consent.

3.3 Legal Requirements

We will disclose your PII collected through our website with your consent (or other Information) if we are required to do so by law, regulation or other government authority or to protect the rights, safety or property of ourselves or any person or entity. We may also cooperate with law enforcement agencies in any official investigation, and we may disclose any Information to the requesting agency in doing so.

4. HOW WE SHARE INFORMATION WITH THIRD PARTIES

BIG DECISIONS may share the Information with customers, marketing services and platforms, as well as service providers that help us to provide the Services we've described above (or other services we may add in the future). BIG DECISIONS will share the Information only with the previous consent of the Data subject for the specific purposes listed.

This includes sharing in the following ways:

4.1 With Our Customers

Our customers include (but are not limited to) IT well-known brands and Companies and various marketing agencies that help them to market and advertise to their own customers (and prospective customers); our customers also include other data compilers, who work with their own customers. We licence the Information in various ways to our customers (and something to partners and resellers, who licence the Information to their customer), when we provide our Services. We may sometimes share the Information with those Customers' service providers (for instance, a provider that prints or sends mailings or email for a customer).

4.2 With Our Partners

We may also share the Information, including personally identifiable information (such as contact information), with business and data partners to help to tailor marketing and advertising campaigns and other communications. Likewise, we may share the information with those partners for analytical purposes, including to help those parties measure campaign performance, inform future campaigns, or to handle, analyse, or segregate this Information - generally on our or our customers' behalf, but sometimes to help those parties' own customers.

4.3 Affiliates

We may share personal data with our affiliated companies for business purposes, including service delivery, support, and business administration.

4.4 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections.

4.5 Legal Protection

BIG DECISIONS may disclose Information if we believe that such disclosure is necessary to (a) comply in good faith with relevant laws or to respond to subpoenas or warrants served on us; or (b) to protect or otherwise defend the rights, property or safety of BIG DECISIONS, our customers, or any other person or entity.

5. YOUR RIGHTS AND INQUIRY PROCESS

The data protection regulation provides individuals with their rights regarding the handling of their personal information. These rights are listed in the regulation from article 16 to article 20. Here are the steps that can help you to apply your rights regarding your personal data.

Under the General Data Protection Regulation (GDPR) and Spanish data protection law (Ley Orgánica 3/2018, de Protección de Datos Personales y garantía de los derechos digitales), you have the following rights:

5.1 Right to Opt-Out / Withdraw Consent

At any time, you will be able to withdraw your consent and opt-out from our database and from the one of our clients to whom we transfer your information with your consent. You have the possibility to Opt-out and erase your information by requesting directly by clicking on the Opt-out link on our website, or by contacting BIG DECISIONS's DPO at the following e-mail address:privacy@the297.com. If we market to you by email, in our corporate capacity - such as if you are a customer or prospective customer of ours and we send information about our Services - you may "unsubscribe" from our marketing emails through a link placed in your emails.

5.2 Right to Delete / Erasure

At any time you have the right to request the erasure of your Personal Information (subject to certain conditions).

You have the right to request deletion of your personal data in certain circumstances, including:

  • The data is no longer necessary for the purposes for which it was collected
  • You withdraw consent (where processing is based on consent)
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed
  • Erasure is required to comply with a legal obligation

5.3 Right to Modification / Rectification

You can modify or rectify any of your information that we collected by sending an e-mail to BIG DECISION's DPO at the following e-mail address:privacy@the297.com

5.4 Right to Access Your Information

At any time, you can request any information on how we collect and process your information and request details of the personal information which BIG DECISIONS S.L. holds about you. You can request this information through e-mail:privacy@the297.com.

5.5 Right to Restrict the Use of Your Information

At any time, you can restrict the use of either part or all of your information that was collected. You will be able to restrict the use by contacting the DPO by e-mail:privacy@the297.com.

You have the right to request restriction of processing in certain circumstances, including when you contest the accuracy of the data or object to processing.

5.6 Right to Data Portability

You have the right to receive your Personal Information, which you have provided to us, in a structured, commonly used and machine-readable format, and to have that information transmitted to another organisation in certain circumstances.

5.7 Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

5.8 Right Not to be Subject to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.

5.9 How to Exercise Your Rights

If you need any help on this matter you can contact BIG DECISIONS's DPO at the e-mail address:privacy@the297.com or you can write to us at BIG DECISIONS S.L.U., Calle Arroyo del Soto, 2, 28914, Leganés - Madrid. If you have any complaints regarding our compliance with this Privacy policy, please contact us. We will investigate and attempt to resolve complaints and disputes regarding use or disclosure of personal information according to the GDPR.

We will respond to your request within one month of receipt. In complex cases, we may extend this period by a further two months, in which case we will inform you of the extension and the reasons for the delay.

5.10 Right to Lodge a Complaint

You also have the right to lodge a complaint directly with any local Supervisory Authority about how we collect and process your data.

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the Spanish Data Protection Authority:

Agencia Española de Protección de Datos (AEPD)

  • Address: Calle Jorge Juan, 6, 28001 Madrid, Spain
  • Website:www.aepd.es
  • Phone: +34 901 100 099

6. RETENTION OF PERSONAL DATA

BIG DECISIONS S.L.U. will retain the collected personal information for the period necessary to fulfil the purpose. Unless a longer retention period is required or permitted by the European data protection regulation. Personal data that is not used for any purpose is deleted.

Retention Periods:

  • Account Information: Retained for the duration of your account plus 6 years after account closure (for legal and tax purposes)
  • Contract and Billing Data: Retained for 6 years after contract termination (in accordance with Spanish tax and commercial law)
  • Subscription Data: Retained for the duration of the subscription and 6 years thereafter
  • Marketing Data: Retained until you withdraw consent or object to processing
  • Support Communications: Retained for 3 years after the last interaction
  • Usage and Log Data: Retained for 12-24 months for security and analytics purposes
  • Website Analytics Data: Retained for up to 24 months

When personal data is no longer needed, we will securely delete or anonymise it in accordance with our data retention and deletion policies.

7. SECURITY AND DATA INTEGRITY

BIG DECISIONS S.L.U. takes steps to help ensure that the data we possess is housed and transmitted securely. This may include various types of physical and electronic security, including firewall protections, encryption, hashing or truncation of data, and access controls to personal information. While neither we nor any platform can guarantee 100 percent safety from hacks or illegal intrusion, we employ efforts that are designed to ensure that this does not occur.

BIG DECISIONS S.L.U. takes all reasonable steps to protect your personal information from misuse, tampering and loss, and from unauthorised access, alteration or disclosure. To do this, we use the following options, among others:

Use of encryption when collecting and transmitting data,

Technical and organisational measures to ensure the permanent integrity, availability and reliability of the processing systems and services,

Restriction of physical access to our locations,

Restricting access to the data we collect about you,

Ensuring that we and our business partners have appropriate safeguards in place to ensure the security of your personal information and,

If required by law, deletion or anonymisation of personal data.

Additional Security Measures:

  • Access Controls: Role-based access controls and authentication mechanisms
  • Network Security: Firewalls, intrusion detection systems, and network monitoring
  • Regular Security Assessments: Vulnerability scanning and penetration testing
  • Employee Training: Regular data protection and security awareness training
  • Incident Response: Procedures for detecting, responding to, and reporting security incidents
  • Backup and Recovery: Regular data backups and disaster recovery procedures

8. DATA TRANSFER

BIG DECISIONS S.L.U. may transfer your personal data to other subsidiaries and/or business partners as necessary for the purposes described in this Privacy Policy.

Under certain circumstances, your personal data may be transferred to countries outside your home country or region, including countries outside the European Economic Area if you are resident there, which may have different data protection standards than your home country. These countries include, but are not limited to, the United States and other countries in which BIG DECISIONS S.L.U. or its subsidiaries, affiliates or business partners maintain locations. In order to ensure that your personal data is adequately protected when it is transmitted, we have contractual arrangements (to the extent required) for such transfers with our subsidiaries, affiliates and business partners. We take all reasonable technical and organisational measures to protect the personal data we transmit.

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions by the European Commission recognising certain countries as providing adequate protection
  • Binding Corporate Rules (where applicable)
  • Other legally recognised transfer mechanisms under GDPR

You may request information about the specific safeguards we have in place for international transfers by contacting us atprivacy@the297.com.

9. CHANGES TO THIS PRIVACY POLICY

From time to time, we may update this Privacy Policy. Any changes to it will become effective when it is posted to our website unless we indicate a later effective date. Please check back to learn of any changes to this Privacy Policy.

When we make material changes, we will:

  • Update the "Last updated" date at the top of this notice
  • Notify you by email (if you have provided an email address)
  • Post a prominent notice on our website
  • Provide you with the opportunity to review the changes before they become effective

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

10. SECURITY

We have an information security policy in place designed to protect Personal Data from loss, misuse, unauthorised access, disclosure, alteration, and destruction. Our Chief Information Security Officer is primarily responsible for conducting investigations into any alleged computer or network breaches, incidents or problems and ensuring that proper disciplinary action is taken against those who violate our Information Security Policy.

11. CHILDREN'S PRIVACY

Children Under the Age of 16 Our Website is not intended for children under 16 years of age. No one under age 16 may provide any information to or on the Website. We do not knowingly collect personal information from children under 16. If you are under 16, do not use or provide any information on this Website or on or through any of its features. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us atprivacy@the297.com.

12. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to collect information about your browsing activities and to enhance your experience on our website and platform.

12.1 What are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and improve functionality.

12.2 Types of Cookies We Use

Cookie TypePurposeDuration
Strictly Necessary CookiesEssential for the operation of our website and platform (e.g., authentication, security)Session or up to 12 months
Performance CookiesCollect information about how visitors use our website to improve performanceUp to 24 months
Functional CookiesRemember your preferences and choices to provide enhanced featuresUp to 12 months
Analytics CookiesHelp us understand user behaviour and measure website effectivenessUp to 24 months
Marketing CookiesTrack your browsing to deliver relevant advertising (only with consent)Up to 12 months

 

12.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to:

  • View and delete cookies
  • Block third-party cookies
  • Block cookies from specific websites
  • Block all cookies
  • Delete all cookies when you close your browser

Please note that blocking or deleting cookies may impact the functionality of our website and platform.

For more information about cookies and how to manage them, visit:www.allaboutcookies.org

13. LEGAL BASIS FOR PROCESSING

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

PurposeLegal Basis
Providing our BDS Products and ServicesPerformance of contract (Article 6(1)(b) GDPR)
Processing payments and subscriptionsPerformance of contract (Article 6(1)(b) GDPR)
Customer support and communicationsPerformance of contract (Article 6(1)(b) GDPR) and legitimate interests (Article 6(1)(f) GDPR)
Improving our Products and ServicesLegitimate interests (Article 6(1)(f) GDPR)
Marketing communications (existing customers)Legitimate interests (Article 6(1)(f) GDPR)
Marketing communications (prospects)Consent (Article 6(1)(a) GDPR)
Compliance with legal obligationsLegal obligation (Article 6(1)(c) GDPR)
Security and fraud preventionLegitimate interests (Article 6(1)(f) GDPR)
Analytics and website improvementLegitimate interests (Article 6(1)(f) GDPR)

14. CONTACT US

BIG DECISIONS S.L.U. has a designated privacy contact. If you have questions related to this Privacy Policy, or regarding our products or services, please contact us:

We appreciate your comments and questions regarding BIG DECISIONS S.L.U.'s privacy practices.

Full Contact Details:

BIG DECISIONS, S.L.U.

We will respond to your enquiry as soon as possible and within the timeframes required by applicable law.