Privacy policy

Updated 30 September 2026

Who is responsible

BOLT LEARNING S.L. is responsible for the personal information described here. Contact our privacy team at privacy@the297.com or write to BOLT LEARNING S.L., C/ Arroyo del Soto, 2, 28914 Leganés, Madrid, Spain. This notice covers theboltlabs.com and catalog.theboltlabs.com.

Information you choose to provide

Contact and training enquiries contain the contact details, company details, selected courses, dates, learner quantities and message you submit. You can browse courses and request a proposal as a guest. A proposal request or PDF is not a purchase.

If you create an account when account services are available, we process your email, securely protected authentication credentials and session information. Optional onboarding records whether you buy for yourself or others, your areas of interest, technologies, goals, experience, team size and timing. Do not include sensitive information or another person's personal details in these answers.

Confirmed training orders may be associated with your account when supplied by our authorised order system. An account holder or buyer is not automatically treated as the learner. We do not infer that a course has been completed just because it has been purchased.

How and why we use information

We use enquiry and account information to provide the services you request and take steps toward a contract. We use proportionate security information to protect the service and prevent abuse, in our legitimate interests. Records required for tax, accounting or other statutory duties are processed to meet legal obligations.

When you request personalised suggestions, we compare your answers and available course history with course topics, technologies and descriptions. You can skip onboarding, change your answers or clear the saved browser profile. Suggestions are advisory: they do not determine admission, certification, credit or an entitlement to training. They may be imperfect and you should check prerequisites with the training team.

Email marketing requires a separate, optional opt-in. Creating an account or requesting a proposal does not subscribe you. You can withdraw marketing consent without losing access to course search, your account or guest enquiries.

Browser storage and technical information

We use essential storage for the functions you request, such as a saved selection, session and privacy choice. An optional learning profile is saved on your device when you use the personalisation feature. The two domains keep their browser storage separate. Hosting and security services may process IP addresses, timestamps and technical request information to operate the website. No analytics or advertising trackers are installed in this release. See our cookie and browser storage policy.

Recipients and service providers

Access is limited to authorised Bolt staff and service providers needed to operate the website, database, email and requested training. Account and profile storage uses Neon PostgreSQL when configured. Training partners receive the information needed to arrange a confirmed booking. We do not sell your learning profile.

If AI-assisted course suggestions are enabled, the recommendation service receives a limited course shortlist and learning preferences, not your password, email or payment details. The feature supplements local course matching and does not make binding decisions. External Vimeo video is loaded only after your optional-video consent.

Where a service provider processes personal data outside the EEA, applicable transfer safeguards are required, such as an adequacy decision or standard contractual clauses. Contact our privacy team for the applicable provider and safeguard information.

Retention

Browser selections and learning preferences remain until you clear them or the feature removes them. The video-consent choice expires after 180 days. Account records are kept while needed to provide your account; you can request deletion. Enquiry records are retained while needed to respond and manage the resulting relationship. Required transaction records and information needed to resolve disputes may be kept for the applicable legal period. Information no longer needed for these purposes is deleted or anonymised.

Your rights

You may request access, correction, erasure, restriction or portability of your personal data, where applicable, and object to processing based on legitimate interests. You can withdraw consent at any time; this does not affect processing already carried out lawfully. Send requests to privacy@the297.com. We may need to verify your identity. You can also complain to the Spanish Data Protection Agency (AEPD) or your local supervisory authority.

Payments and changes

This release does not collect card details or take online payments. Any future payment service will be explained before checkout is enabled. We will update this notice when our processing changes and provide any additional notice or choice required.