Privacy Notice

Ortega-Medina & Associates is committed to protecting and respecting your privacy.

This notification sets out the basis on which any personal data we collect about you, or that you provide to us, will be processed by us. Please read the following carefully to understand our practices regarding your personal data and how we will treat it.

For the purpose of the General Data Protection Regulation (GDPR) we are a controller of your personal data, our offices are:

Ortega-Medina & Associates
Niddry Lodge
51 Holland Street
Kensington, London
W8 7JB
United Kingdom

T: +44 (0) 207 225 4410
F: +44 (0) 207 589 0203

Website Data
When you visit our website, we collect certain information about you.

• Information that you provide by filling in forms on our website. This is limited to basic contact information, which you provide at the time of registering interest.
• Details of your visits to our website including, but not limited to:

o traffic data
o location (country)
o IP address
o other communication or technical data (e.g. screen size)
o the resources that you access.

This data is shared with Google Inc who provide analytic services and may retain this data for up to 24 months.

Immigration and Visa Application Data
We may collect and process the following data to provide United States immigration and visa advice and representation:
• Contact details
• Name
• Address – current and previous
• Date of birth
• National Insurance number (or foreign equivalent)
• Tax returns and payslips,
• Email addresses
• Bank details
• Telephone numbers
• Next of kin
• Children / Spouse – names and dates of birth
• Place of work
• Position held
• Driving license
• Pension information
• Personal relationship status / nationality
• Employment history
• Extensive financial data, mortgage and business finance applications
• Criminal convictions
• Health Data
• Racial or ethnic origin
• Religious or political beliefs

Source of Information
We may receive and process information about you from:
• yourself (data you provide)
• ourselves (data we generate)

Lawful Basis
Our lawful basis for processing this data are –
• our legal obligations (including our obligations under the Finances Act 2008)
• our contract with you
• your consent
The consequences for you if we are unable to process this data would be:
• we would not be able to deliver the legal services for which you retained us.

Any data related to payments or tax will be retained for 7 years from to conform with our legal obligations regarding record keeping under the Finance Act 2008.

Other data may be kept for up to 7 years from completion of our contract in case your matter becomes the subject of any legal or administrative proceedings.

To the extent that it is necessary to manage and satisfy our contract with you, your data may be shared with:
• our software and IT providers
• tax authorities
• US government agencies and embassies
• our and your bankers

Uses made of the information
We use information held about you in the following ways:
• delivery of contracted services including advice and assistance with US Immigration and Visa Applications
• improvement and management of our website

Disclosure of your information
Where we may occasionally be required to disclose certain information to additional third parties, we will disclose data only when and to the extent that we have a legal obligation to do so or have obtained written consent from you.
Such third parties may include:
• law enforcement (by warrant or subpoena)
• courts, tribunals or other judicial bodies

Transfer outside the EEA
We may transfer data relevant to US immigration or visa applications to US government agencies and embassies. This data is not protected by the EU-US Privacy Shield Treaty and due to the nature of the service cannot be protected in a manner considered adequate under the EU General Data Protection Regulation. We therefore transfer this data only on the basis of your consent as provided when you engaged our services, this consent may be withdrawn at any time by contacting us as detailed above.
We transfer website analytics data to Google Inc in the USA where your rights and freedoms are protected by the EU-US Privacy Shield Treaty.

Your rights
You have the following qualified rights with regard to your personal data:
• Access – you may request we provide you with the data we hold
• Rectification – you may request we correct any inaccurate data
• Erasure – you may request we erase your data
• Restriction – you may request we stop processing your data but retain it
• Objection – you may object to us processing your data
• Portability – you may request we provide you or a nominated party with your data in a commonly used, structured and machine readable format
You can exercise your rights at any time by contacting us at
You also have the right to lodge a complaint with the Information Commissioner’s Office or any other European Supervisory Authority.

Changes to this notification
Any changes we may make to this notification in the future will be updated to our website.

Questions, comments and requests regarding this notification are welcomed and should be addressed to