Privacy
Last updated: October 2026
This notice explains how Oriana Morrison collects, uses and protects personal information, and the rights available to you. It applies to clients, prospective clients, visitors to this website and anyone who contacts us.
Who we are
Oriana Morrison Limited, trading as Oriana Morrison and ECNMX, is the controller of your personal information. The company is registered in England and Wales under number 11262346, with its registered office at Mappin House, 4 Winsley Street, London W1W 8HF, United Kingdom. It is registered with the Information Commissioner’s Office under reference ZC271402.
Questions about this notice or your personal information may be sent to contact@orianamorrison.com or by post to the address above.
What we collect
- Identity and contact details: name, address, email, telephone, date of birth, nationality, gender and marital status
- Identity documents: passports and other documents required for ITIN applications and anti-money laundering checks
- Tax and financial information: tax identification numbers, income, employment and contract details, residence and travel history, and information about family members or other relevant parties
- Engagement records: correspondence, meeting notes, call and video recordings, and service history
- Website information: details submitted through enquiry forms, and technical data such as IP address, browser and device type
How and why we use it
Personal information is used only where a lawful basis applies under UK data protection law:
- Contract: to provide tax advisory, compliance and ITIN services, and to respond to requests made before an engagement
- Legal obligation: to meet tax, accounting and regulatory requirements, including identity checks under the Money Laundering Regulations 2017 (Oriana Morrison Limited is supervised by HMRC for anti-money laundering purposes)
- Legitimate interests: to answer enquiries, keep records, protect the security of our systems, and establish or defend legal claims
- Consent: where consent is requested for a specific purpose, such as marketing. Consent may be withdrawn at any time.
Where we get it
Most information is provided directly by you or your authorised representatives, such as an agent, manager, employer, team or federation. Information may also come from tax authorities, identity verification providers and public sources.
Who we share it with
- Tax authorities, including the Internal Revenue Service, HM Revenue & Customs and other authorities where required
- Your authorised representatives and other professional advisers acting for you
- Service providers who support our work, such as hosting, email, document storage, e-signature and identity verification providers, under contracts that require them to protect it
- Law enforcement, regulators or courts, where the law requires
Personal information is never sold.
International transfers
U.S. tax work requires information to be sent to the United States, including to the IRS, and our offices operate in several countries. Where personal information leaves the UK, it is protected by UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or another safeguard permitted by law, or is transferred because it is necessary to perform the service you have requested.
How long we keep it
Client records are generally kept for six years after the end of an engagement, or longer where tax or anti-money laundering law requires. Enquiries that do not lead to an engagement are deleted after two years.
Security
Appropriate technical and organisational measures are in place to protect personal information against loss, misuse and unauthorised access.
Your rights
You have the right to access your personal information, and to ask for it to be corrected, deleted, restricted or transferred. You may also object to its use and withdraw consent at any time. Some rights are limited where information must be kept by law. Requests may be sent to contact@orianamorrison.com and are answered within one month, free of charge.
Use of client names and images
Client names, logos, photographs and other likenesses are used in our marketing only with the client's prior written permission, which may be withdrawn at any time.
Cookies and this website
This website uses only the cookies needed for it to work. Some pages display content from third parties, such as Instagram and LinkedIn, which may set their own cookies under their own privacy policies. Browser “Do Not Track” signals are not currently acted on, as no tracking or advertising cookies are used.
U.S. clients
Tax return information is not used or disclosed for any purpose other than preparing and filing your returns and providing the services you have requested, except as permitted by law or with your written consent, in accordance with section 7216 of the Internal Revenue Code. Nonpublic personal information is not shared with unaffiliated third parties except as permitted by law.
California residents may request details of the personal information held about them by writing to contact@orianamorrison.com.
Children
This website is not directed at children, and personal information is not knowingly collected online from anyone under 18. Information about minors is processed only where it is provided by a parent, guardian or authorised representative as part of an engagement.
How to complain
Concerns may be raised with us first at contact@orianamorrison.com. You also have the right to complain to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone 0303 123 1113, ico.org.uk/make-a-complaint.
Changes to this notice
This notice may be updated from time to time. The current version is always published on this page, with the date of the latest change shown above.