1. About this notice

MOFOX Limited provides business consulting, implementation support and professional training.

This notice explains how we handle personal information when you visit themofox.co.uk, contact us, use our services, or participate in our programmes.

MOFOX Limited is the controller for the activities described here. Where we process information solely on a client’s documented instructions, the relevant data-processing arrangements apply.

Email: hello@themofox.co.uk

Telephone: +44 7871344770

2. Information we collect

Depending on your interaction with us, we may collect:

• Your name, contact details, country, organisation and role.
• Enquiries, correspondence and appointment information.
• Personal information contained in documents supplied for an engagement.
• Relevant learner experience, assessments, attendance, assignments and feedback.
• Billing details, invoices and payment records.
• Website access information, including IP address, browser details and security logs.
• Consent records, communication preferences, complaints and information-rights requests.

Please provide only information relevant to your enquiry or engagement. Avoid sending unnecessary personal information about other people.

3. Where information comes from

We receive information directly from you and through your interactions with our website.

Where relevant, we may also receive information from your employer, a sponsoring organisation, an authorised representative, a referral contact or public professional sources.

When information comes from another source, we provide the required privacy information within the applicable legal timeframe unless a lawful exception applies.

4. How and why we use information

We use personal information to:

• Respond to enquiries and arrange discussions.
• Prepare proposals and administer engagements.
• Deliver and review consulting or training services.
• Manage invoices, payments and required business records.
• Maintain security and investigate misuse.
• Handle complaints and establish or defend legal claims.
• Send permitted marketing communications.
• Record and respect your privacy choices.

Our lawful bases depend on the activity:

Contract: Where processing is necessary to fulfil a contract with you personally or take steps you request before entering one.

Legitimate interests: Where necessary to manage business enquiries, work with organisational contacts, administer employer-sponsored training, protect our systems or resolve disputes. We consider necessity and the effect on your rights.

Legal obligation: Where processing is required by applicable law, including relevant accounting and record-keeping duties.

Consent: Where required for particular activities, including optional tracking and certain electronic marketing.

5. Training information

We use relevant participant information to assess starting points, plan learning, administer attendance and review practical work.

For employer-sponsored training, we explain the agreed reporting arrangements before delivery, including what attendance, progress or assessment information will be shared.

Any proposed recording or collection of sensitive information requires separate consideration of its purpose, lawful basis, access and retention. Where necessary, additional privacy information is provided before collection.

Please contact us before sending health information or other sensitive personal details.

6. Marketing preferences

Submitting an enquiry does not automatically subscribe you to marketing.

Where consent is required, we obtain it separately. You can withdraw consent or unsubscribe using the instructions in our communications or by contacting us.

You have the right to object to the use of your personal information for direct marketing at any time.

We may retain a limited suppression record to ensure your preference continues to be respected.

7. Sharing information

Information may be shared, where necessary, with:

• Authorised personnel, consultants and trainers involved in the work.
• Hosting, email, IT support and business administration providers.
• Booking, communications, learning and document-management providers.
• Accounting, payment and professional advisory providers.
• Employers or sponsoring organisations within the arrangements explained to participants.
• Authorities or other recipients where disclosure is legally required or otherwise lawfully justified.

We limit access and disclosure to the relevant purpose. Providers processing information on our behalf are subject to appropriate contractual arrangements.

8. International processing

Where our arrangements involve a restricted transfer of personal information outside the UK, an appropriate transfer mechanism is required.

This may include applicable UK adequacy regulations or approved contractual safeguards, together with the required assessment and supplementary measures.

Contact us for details of any transfer relevant to your information and how to obtain information about the applicable safeguards.

9. Retention

We retain information only for as long as necessary for the relevant purpose.

In deciding the period, we consider:

• Whether an enquiry remains active.
• Delivery and administration of an engagement.
• Agreed learner assessment and reporting requirements.
• Statutory record-keeping obligations.
• Applicable complaint and legal-claim periods.
• The need to demonstrate consent or respect objections.

When information is no longer required, it is deleted or anonymised, subject to any lawful requirement to preserve it.

10. Your rights

Depending on the circumstances, you may have rights to:

• Access your personal information.
• Correct inaccurate or incomplete information.
• Request erasure or restriction.
• Receive or transfer certain information.
• Object to processing based on legitimate interests.
• Withdraw consent without affecting earlier lawful processing.

Applicable protections concerning automated decision-making also remain available where relevant.

These rights are subject to legal conditions and exemptions.

Contact hello@themofox.co.uk to exercise a right. We may request proportionate identity verification and will respond within the applicable legal timeframe.

11. Providing information

Where information is necessary to answer your enquiry or deliver a service, not providing it may prevent us from completing that activity.

Optional marketing consent is not a condition of receiving our services.

12. Security

We use proportionate organisational and technical measures to protect personal information. No internet transmission or storage system is entirely risk-free.

13. Complaints

Contact hello@themofox.co.uk with the subject “Data protection complaint”.

We acknowledge data-protection complaints within 30 days, investigate appropriately and communicate the outcome without undue delay.

You may also complain to the Information Commissioner’s Office: https://ico.org.uk/make-a-complaint/

14. Changes

We update this notice when necessary. The revision date appears above, and significant changes are brought to your attention where required.