At Morrell Middleton we are committed to protecting and respecting your privacy. This policy explains when and why we collect personal information about people who contact us or use our services, how we use it, when we may share it and how we keep it secure. We may update this policy from time to time, so please check this page occasionally.
Questions about this policy can be sent to reception@gravitax.co.uk, by post to Morrell Middleton, Wellington House, Aviator Court, Clifton Moor, York, YO30 4UZ, or by phone on 01904 691141.
Who we are
We are Morrell Middleton Ltd. We are the controller responsible for your personal data ("we", "us" or "our" in this policy). A director has responsibility for our data protection compliance. You have the right to complain at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection (ico.org.uk), but we would appreciate the chance to deal with your concerns first, so please contact us in the first instance.
How we collect your information
We obtain information about you when you contact us about our services, for example through our website, by email or by phone. Once you become a client, carrying out our work means we will hold more of your information.
The information we collect
This may include your name, address, email address, telephone number, date of birth, marital status, National Insurance number and Unique Taxpayer Reference, together with financial and business information needed for our work. Where we need information by law or under our engagement letter and it is not provided, we may be unable to carry out the work, and we will tell you if so.
How we use your information
We use it to register you as a client; send you reminders and requests that help you meet your filing deadlines, such as Self Assessment and company year-end; register you with HM Revenue & Customs for Self Assessment, PAYE, VAT, CIS and auto-enrolment as you instruct; obtain authority to act for you with HMRC; meet our legal duties, including anti-money laundering checks; and, with your consent, send you marketing (see "Your choices").
We only use your data for the purpose we collected it for, unless a new purpose is compatible with the original one. If we need to use it for an unrelated purpose we will tell you and explain the legal basis. We may process your data without your knowledge or consent where the law requires or allows it.
How long we keep it
We keep your information only as long as needed for the work and to meet our legal and professional obligations, which is normally at least six years after our engagement ends. We review our retention periods regularly.
Who has access to your information
We will never sell or rent your information, or share it with third parties for their marketing. With your instruction we may pass it to service providers and other professionals who help us serve you (for example auto-enrolment, fee protection or independent financial advisers). We share only what is needed and require them to keep it secure. Payments may be handled by a specialist payment processor. We may also share data with HMRC and other authorities where the law requires, or as part of a sale or reorganisation of our business, in which case we will take steps to keep your privacy protected.
Your choices
We may send you fee protection offers, seminar invitations, technical updates, tax cards and other news, and registered office notices if we act as your company's registered office. We will not contact you for marketing by email, phone or text without your consent, and you can change your preferences at any time by emailing reception@gravitax.co.uk or calling 01904 691141.
Keeping your information up to date
Please tell us if any of your details change or are incorrect by emailing reception@gravitax.co.uk or calling 01904 691141. You can ask for a copy of the information we hold about you at any time.
Keeping your information secure
We take appropriate steps to keep your information safe, including encrypted connections on our website and encrypted email for sensitive information. If you ask us in writing to send information by ordinary unencrypted email instead, you accept the extra risk. No internet transmission is completely secure, so while we work hard to protect your data, information you send to us is at your own risk until we receive it.
Cookies
Our website uses cookies to make it work and to collect anonymous statistics about how it is used. You can switch cookies off in your browser settings, although some parts of the site may not then work properly. See our Cookie policy for more detail.
Links to other websites
Our website links to sites run by other organisations. This policy covers only our website, so please read the privacy policies of other sites you visit. We are not responsible for their privacy practices.
Transfers outside the UK
Some of the software we use, such as cloud accounting and file-sharing services, may store data outside the UK. Where this happens we make sure appropriate safeguards are in place, as required by UK data protection law.
Your legal rights
You have the right to: ask for access to your personal data; ask us to correct it; ask us to delete it; object to how we use it; ask us to restrict its use; ask us to transfer it; and withdraw consent at any time. To use any of these rights, please contact us. We may need to confirm your identity first, to make sure your data is not given to anyone who has no right to it.
Review of this policy
We keep this policy under regular review. It was last updated in October 2026.