Privacy Policy

Torii takes privacy seriously. This policy explains what personal data we collect when you visit this website or contact us, why we collect it, and what rights you have in relation to it. We have tried to write this in plain language rather than legal boilerplate, because we believe you deserve a clear account of how your information is handled.

If anything here is unclear, you are welcome to write to us directly and ask.

1. What we collect and how

• Contact form submissions

  When you fill in the contact form, we receive your name, email address, the subject you selected and the message you wrote. This information is used solely to respond to your enquiry.

• Cookies and analytics

  We use cookies to understand how visitors navigate the site — which pages are visited, how long people spend on them, and where they came from. This is collected in aggregate form. You may refuse or withdraw consent for analytics cookies at any time through our Cookie Policy page.

• Technical data

  Like most websites, our server logs record IP addresses, browser type and the pages requested. This data is used to maintain security and diagnose technical issues, and is not used to identify individuals.

• Legal basis for processing

  We process contact form data on the basis of your consent (submitting the form) and our legitimate interest in responding to enquiries. Analytics data is processed only where you have provided consent through the cookie banner.

• Retention periods

  Enquiry correspondence is retained for a maximum of two years from the date of last contact. Technical logs are retained for 90 days. Cookie consent records are retained for 12 months.

2. How we use your data

• Responding to enquiries

  Contact information is used to reply to your message, to confirm whether we can assist, and to arrange any subsequent consultation. It is not used for any other purpose without your explicit consent.

• Website improvement

  Aggregated analytics data — where you have consented to it — helps us understand which parts of the site are useful and which might be improved. No individual is identified through this process.

• No marketing communications

  We do not send marketing emails or newsletters. Contacting us does not sign you up to any mailing list.

• Third-party sharing

  We do not sell or rent personal data. Where analytics services are used (subject to your cookie consent), data may be processed by that third-party provider under their own privacy terms. We do not share enquiry correspondence with any third party unless required to do so by law.

3. How we protect your data

• Encryption in transit

  This website uses HTTPS. All data transmitted between your browser and our servers is encrypted.

• Access controls

  Access to personal data is limited to those who require it in the course of responding to your enquiry. We do not maintain shared mailboxes or unsecured data stores.

• Breach notification

  In the event of a data breach affecting your personal information, we will notify you and any relevant regulatory authority within the timeframes required by applicable law.

4. Your rights

• Right to access

  You may request a copy of the personal data we hold about you. We will respond within 30 days.

• Right to rectification

  If any information we hold about you is inaccurate, you have the right to ask us to correct it.

• Right to erasure

  You may ask us to delete your personal data. We will do so unless retention is required by law or to establish or defend a legal claim.

• Right to data portability

  Where we process your data by automated means and on the basis of consent, you may ask us to provide it in a structured, machine-readable format.

• Right to object

  You may object to the processing of your personal data where we rely on legitimate interest as the legal basis. We will stop processing unless we can demonstrate compelling grounds.

• Exercising your rights

  To exercise any of these rights, please contact us using the details on our Contact page. We will acknowledge your request within five working days.