Privacy Policy
This Privacy Policy explains how personal information is handled when you visit the CosFox website, create or use a CosFox account, or interact with CosFox through a business using the service.
CosFox is a trading name of MBFRAMEWORKS LTD, registered in England and Wales under company number 17165682.
In this policy, “CosFox”, “we”, “us” and “our” refer to MBFRAMEWORKS LTD where it is responsible for the processing described.
Who CosFox is for
CosFox provides software designed to help builders and construction businesses manage enquiries and organise information about potential and existing projects.
The service can receive information supplied during an enquiry, ask relevant follow-up questions and organise the resulting conversation into information that the builder can review.
CosFox is designed to assist the builder. It does not replace the builder’s professional judgement or make construction decisions on the builder’s behalf.
Our role with personal information
Our role depends on how CosFox is being used.
When we process information relating to CosFox customers, accounts, subscriptions, support, security or our own business operations, MBFRAMEWORKS LTD may act as the data controller.
When a builder or construction business uses CosFox to collect and organise enquiries from its own customers or prospective customers, that business will normally determine why the information is being collected and how it will be used. In those circumstances, MBFRAMEWORKS LTD may process the information on that business’s behalf as a data processor.
If you have submitted an enquiry to a builder using CosFox, the builder you contacted may therefore be the appropriate organisation to contact about how your enquiry information is used.
Information we may process
Depending on how you use CosFox, information may include:
• Name and contact information. • Business and account information. • Information supplied when creating or managing a CosFox account. • Enquiry and project information. • Messages and conversation content submitted through CosFox. • Information about proposed construction work, property requirements and project preferences. • Information provided when contacting us for support. • Technical, security and service information generated when CosFox is used. • Subscription and billing-related information where applicable.
Please avoid providing unnecessary sensitive personal information through CosFox.
How CosFox uses AI
CosFox uses artificial intelligence and software-based analysis to help understand and organise construction-related conversations.
For example, CosFox may use information from an enquiry to identify information that appears to have been confirmed, distinguish confirmed information from matters that remain uncertain, ask useful follow-up questions, organise enquiry information into a Builder Report, identify matters that may deserve the builder’s attention and assist the builder in reviewing the enquiry.
CosFox is designed as an assistive system. Its outputs may be incomplete or incorrect and should be reviewed by the builder. CosFox does not make final construction, contractual, pricing or professional decisions on the builder’s behalf.
Why we process personal information
Depending on the circumstances, we may process personal information to provide and operate the CosFox service, create and administer customer accounts, process and organise enquiries, provide Builder Reports and other CosFox functionality, maintain the security and reliability of the service, provide customer support, administer subscriptions and payments, comply with legal and regulatory obligations, prevent misuse, fraud and security incidents, and improve and maintain the service where permitted by law.
Where MBFRAMEWORKS LTD acts as a controller, processing will be carried out using an appropriate lawful basis under applicable data-protection law. Where we act as a processor for a CosFox customer, we process the relevant personal information on that customer’s documented instructions, subject to applicable law and our contractual obligations.
Sharing and service providers
CosFox relies on technology and service providers to operate the service. This may include providers involved in areas such as hosting and infrastructure, database and data storage, artificial-intelligence processing, authentication and security, communications, payment processing and service monitoring.
We do not sell personal information.
Where a service provider processes personal information on our behalf, appropriate contractual and data-protection arrangements are required.
A detailed list of relevant production sub-processors and applicable processing locations will be maintained as part of CosFox’s commercial data-protection documentation.
International data transfers
Some technology providers used to operate CosFox may process information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, appropriate safeguards must be used.
How long information is kept
We retain personal information only for as long as reasonably necessary for the purpose for which it is processed, including legal, contractual, security and operational requirements.
Different categories of information may require different retention periods. Specific production retention periods will be documented following verification of CosFox’s production data lifecycle.
Security
We use technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. No internet-based service can guarantee absolute security.
Your data protection rights
Depending on the circumstances and applicable law, individuals may have rights relating to their personal information, including rights to request access to personal information, request correction of inaccurate information, request deletion in certain circumstances, request restriction of processing in certain circumstances, object to certain processing, request portability of certain information and raise a concern about how personal information is being used.
These rights are not absolute and may depend on the circumstances and the lawful basis for processing.
If your information was submitted to a builder or construction business through CosFox, you should normally contact that business first because it may be the controller responsible for your information.
Complaints
You may have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection.
Contact
For privacy questions relating directly to MBFRAMEWORKS LTD or the operation of CosFox, please use the contact details published on the CosFox Contact page.
Changes to this policy
We may update this Privacy Policy where CosFox, our processing activities or applicable legal requirements change. The current version will be published on this page.
Last updated: 28 August 2026