Privacy policy
Last updated: April 17, 2026
PRIVACY POLICY
Strongwill Ltd Trading as: Toria Handcrafted Luxury | Toria Everyday Spa | Toria | Toria Apothecary , VMTcoin a.k.a. Victoria Maruhina Token coin Website: www.toria.ie Jurisdiction: Republic of Ireland Last Updated: April 2026.
1. WHO WE ARE
This Privacy Policy applies to Strongwill Ltd, a company registered in the Republic of Ireland, trading as Toria Handcrafted Luxury, Toria Everyday Spa, Toria, and Toria Apothecary and/or Victoria Maruhina (collectively "Toria", "we", "us", "our").
We are the Data Controller for all personal data collected through www.toria.ie, in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Data Protection Acts 1988–2018 (Ireland).
Contact: 📧 Email: info@toria.ie 📍 Registered in Republic of Ireland 🌐 Website: www.toria.ie
2. WHAT PERSONAL DATA WE COLLECT
We collect personal data through different channels:
2.1 When You Make a Purchase
- Full name
- Email address and phone number
- Delivery and billing address
- Payment information (processed securely by our payment provider — we never store card details)
- Order history and transaction data
2.2 When You Use Our Website
- IP address and device information
- Browser type and operating system
- Pages visited, time spent, and referring URLs
- Cookie data (with your consent — see Section 7)
2.3 When You Contact Us or Subscribe
- Name and email address
- The content of your message or enquiry
- Marketing preferences
2.4 When You Complete a Questionnaire or Survey
We collect the following data through our online research questionnaires:
- Full name
- Email address and phone number
- Gender
- Age and/or date of birth
- Location (city, region, country)
- Skin type, hair type, and scalp condition
- Wellness preferences, lifestyle habits, and health-related information
- Product preferences and therapeutic needs
- Any other information you voluntarily provide in open-text fields
2.5 When You Participate in Community Activities
- Name and email address (for giveaways, quizzes, and freebies)
- Engagement data (quiz responses, competition entries)
- Any information you share in community interactions
3. WHY WE COLLECT YOUR DATA & OUR LEGAL BASIS
| Purpose | Legal Basis |
|---|---|
| Processing and fulfilling your orders | Contract performance |
| Sending order confirmations and shipping updates | Contract performance |
| Responding to your enquiries | Legitimate interests |
| Sending marketing communications | Consent |
| Improving our website and services | Legitimate interests |
| Conducting research and product development | Consent / Legitimate interests |
| Creating educational and informational content | Legitimate interests |
| Developing therapeutic skincare, haircare, spa & apothecary products | Consent (for health data) |
| Personalising your experience | Consent |
| Complying with legal and regulatory obligations | Legal obligation |
| Preventing fraud and ensuring security | Legitimate interests |
4. RESEARCH QUESTIONNAIRES & CUSTOMER PROFILING
4.1 Purpose of Questionnaire Data
We use questionnaires to better understand our community and to:
- Create relevant weekly educational content (covering herbalism, aromatherapy, nutrition, holistic systems, cosmetic formulations, and pet wellness)
- Develop therapeutic or beauty skincare, haircare, spa, and apothecary products tailored to real customer needs
- Conduct market research and customer insight analysis
- Personalise your experience and communications (only with your consent)
- Generate anonymised statistical reports to understand community trends
4.2 Voluntary Participation
Participation in all questionnaires and surveys is entirely voluntary. You are not required to complete any questionnaire to purchase products or access our website. You may skip any question you prefer not to answer.
4.3 Withdrawal of Consent
You may withdraw your consent and request deletion of your questionnaire data at any time by contacting us at [insert privacy email]. Withdrawal does not affect the lawfulness of any processing carried out before withdrawal.
4.4 Anonymised & Aggregated Data
We may retain anonymised, aggregated data (which cannot identify you individually) indefinitely for statistical analysis, product development, and content planning purposes.
5. SPECIAL CATEGORY (SENSITIVE) PERSONAL DATA
Some information you provide through our questionnaires may constitute special category data under GDPR Article 9, including:
- Health-related information (skin conditions, allergies, sensitivities, wellness concerns)
- Information that may indirectly relate to physical characteristics (skin/hair type profiling)
We will only process special category data with your explicit, separate consent. Before collecting such data, we will:
- Clearly explain what data is being collected and why
- Request your explicit opt-in consent via a separate consent checkbox (not bundled with general terms)
- Apply enhanced security measures to protect this data
- Restrict access to authorised personnel only
- Conduct a Data Protection Impact Assessment (DPIA) where required
You have the right to withdraw consent for special category data processing at any time without consequence.
6. HOW WE SHARE YOUR DATA
We do not sell, rent, or trade your personal data. We may share data only in the following circumstances:
- Payment processors — to securely process your transactions
- Delivery and logistics partners — to fulfil and ship your orders
- Email marketing platforms — to send communications (only with your consent)
- Analytics providers — to understand website usage (only with your consent via cookie banner)
- IT and platform service providers — who support our website and operations (under data processing agreements)
- Legal and regulatory authorities — where required by Irish or EU law
- Professional advisors — such as solicitors or accountants, under confidentiality obligations
All third-party processors are required to handle your data in accordance with GDPR and our instructions.
7. COOKIES
We use cookies and similar tracking technologies on www.toria.ie. Cookies are small text files stored on your device.
Types of Cookies We Use:
- Strictly necessary cookies — essential for the website to function (no consent required)
- Analytics cookies — to understand how visitors use our site (consent required)
- Marketing/advertising cookies — to deliver relevant content and ads (consent required)
- Preference cookies — to remember your settings and choices (consent required)
You will be asked for your consent via our cookie banner when you first visit our website. You can manage or withdraw your cookie consent at any time through:
- Our cookie preference centre (accessible via the cookie banner)
- Your browser settings
For more information, please see our separate Cookie Policy.
8. YOUR RIGHTS UNDER GDPR
As a data subject under GDPR, you have the following rights:
- Right of Access — request a copy of the personal data we hold about you
- Right to Rectification — request correction of inaccurate or incomplete data
- Right to Erasure ("Right to be Forgotten") — request deletion of your personal data
- Right to Restrict Processing — request that we limit how we use your data
- Right to Data Portability — receive your data in a structured, machine-readable format
- Right to Object — object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent — withdraw consent at any time without affecting prior processing
- Right not to be subject to automated decision-making — including profiling that produces legal or significant effects
How to Exercise Your Rights:
Submit a request by emailing us at: [insert data subject request email]
We will respond within 30 days of receiving your request. We may need to verify your identity before processing your request.
9. DATA RETENTION
We retain your personal data only for as long as necessary:
| Data Type | Retention Period |
|---|---|
| Order and transaction data | 6 years (Irish Revenue requirements) |
| Customer account data | Duration of account + 2 years |
| Marketing consent records | Until consent is withdrawn + 1 year |
| Questionnaire and research data | Until deletion is requested, or 3 years from collection |
| Anonymised/aggregated research data | Indefinitely |
| Website analytics data | 26 months (standard analytics period) |
| Legal correspondence | 7 years |
10. DATA SECURITY
We implement appropriate technical and organisational measures to protect your personal data, including:
- SSL/TLS encryption for all data transmitted through our website
- Secure, access-controlled storage for all personal data
- Pseudonymisation and anonymisation of research data where possible
- Regular security reviews and staff training on data protection
- Data processing agreements with all third-party processors
- Breach notification procedures in line with GDPR Article 33 (we will notify the DPC within 72 hours of becoming aware of a breach, and affected individuals where required)
11. INTERNATIONAL DATA TRANSFERS
If we transfer your personal data outside the European Economic Area (EEA), we will ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Transfers only to countries with an EU adequacy decision
12. CHILDREN'S PRIVACY
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected data from a child, please contact us immediately at info@toria.ie and we will delete it promptly.
13. EDUCATIONAL CONTENT & DISCLAIMER
All weekly content published by Toria — including content on herbalism, aromatherapy, nutrition, holistic systems, cosmetic formulations, and pet wellness — is provided for educational and informational purposes only and does not constitute medical, clinical, veterinary, or professional health advice.
Content relating to blockchain, cryptocurrency, NFTs, and tokenisation (including the Soap4Token community initiative) is shared for informational and community engagement purposes only and does not constitute financial, investment, or legal advice.
Always consult a qualified professional before making health, wellness, financial, or investment decisions.
14. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. When we do, we will:
- Update the "Last Updated" date at the top of this page
- Notify you by email if the changes are significant (where we hold your email address)
- Display a notice on our website
We encourage you to review this policy periodically.
15. HOW TO COMPLAIN
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Data Protection Commission (DPC) of Ireland:
🌐 www.dataprotection.ie 📞 +353 (0)761 104 800 📧 info@dataprotection.ie 📍 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
We would, however, appreciate the opportunity to address your concerns directly before you contact the DPC — please reach out to us first at info@toria.ie.
16. CONTACT US
For any privacy-related queries, data subject requests, or concerns:
Strongwill Ltd t/a Toria Handcrafted Luxury | Toria Everyday Spa | Toria | Toria Apothecary
General contact: info@toria.ie 🌐 www.toria.ie, Republic of Ireland