Privacy Policy

Last updated: 23 September 2026

This Privacy Policy explains how TORA Property Development (“TORA”, “we”, “us”) collects, uses and protects personal data when you visit toracyprus.com (the “Website”) or contact us through it.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the Cyprus Law 125(I)/2018 on the protection of natural persons with regard to the processing of personal data, and, where applicable, the Israeli Protection of Privacy Law, 5741-1981.

1. Who we are (Data Controller)

Company: TORA Property Development Ltd
Registration number: HE 408219
Address: 6 Atlantidos, Voroklini 7041, Cyprus
Email: yarmith@gmail.com
Phone: +357 97 876660 (Cyprus) | +972 3 7221210 (Israel)

For any privacy question or request, write to yarmith@gmail.com.

2. What data we collect

a. Contact form. When you send us an enquiry we collect: first name, last name, phone number, email address, and the content of your message.

b. Newsletter sign-up. When you join our updates list we collect your email address.

c. WhatsApp and phone. If you contact us by WhatsApp or phone, we receive your phone number, your name as it appears in the app, and the content of the conversation.

d. Technical data. When you browse the Website our hosting server automatically records standard technical information, such as IP address, browser type, device, pages visited, and date and time of access, for security and operation purposes.

We do not ask for sensitive data (such as health, religion, or financial account details) through the Website. Please do not include such information in your message.

3. Why we use your data, and on what legal basis

Purpose	Legal basis (GDPR Art. 6)
Replying to your enquiry and providing information about our projects	Steps prior to entering a contract, at your request; legitimate interest
Sending project updates, early access to launches and news	Your consent (you can withdraw it at any time)
Operating, securing and improving the Website	Legitimate interest
Measuring Website use and the effectiveness of our advertising (only if you consent through the cookie banner)	Your consent (you can withdraw it at any time)
Complying with legal obligations and handling legal claims	Legal obligation; legitimate interest

We do not sell your personal data, and we do not use it for automated decision-making or profiling.

4. Cookies and similar technologies

The Website uses a small set of technologies. Some are essential for it to work as intended. Measurement and advertising tags, and content from Google Maps, are activated only after you give consent through the cookie banner.

Name	Type	Purpose	Duration
`pll_language`	Cookie (essential)	Remembers your language choice (English or Hebrew)	1 year
`tora_intro_seen`	Browser local storage (essential)	Shows the opening logo animation only on your first visit	Until you clear your browser data
`elementor`	Browser local and session storage (essential)	Technical data of the site builder, such as a page-view counter used for on-page display settings. It stays in your browser and is not sent to us or to third parties	Local storage: until you clear your browser data; session storage: until you close the browser
`onetap-accessibility-free`	Browser local storage (essential)	Remembers the settings you chose in the accessibility menu, such as font size or contrast	Until you clear your browser data
`cmplz_*`	Cookies (essential)	Remember your cookie consent choices (the cookie banner)	1 year
Google Analytics / Google Ads (e.g. `_ga`, `_ga_*`, `_gcl_au`)	Third-party cookies (statistics / marketing)	Measure visits and the effectiveness of our advertising. Set only if you consent	Up to 2 years
Google Maps	Third-party cookies (marketing)	Displays the interactive map on the Contact page. Loaded only if you consent; Google may then set its own cookies	According to Google’s policy

The Website uses Google Tag Manager (Google LLC) to manage measurement and advertising tags, in Google Consent Mode. Until you consent, analytics and advertising storage is set to “denied”: no such cookies are placed and no measurement data is collected. If you accept, Google tags such as Google Analytics or Google Ads may run and place cookies, and the data may be transferred to Google in the United States as described in section 7.

You can change or withdraw your consent at any time through the cookie settings link on the Website. You can also delete or block cookies through your browser settings. Blocking essential cookies may affect how the Website works.

5. Third-party services

To operate the Website we rely on the following providers. Some of them receive your IP address when your browser loads their content:

Website hosting: Servers24, on servers located in the European Union (Germany).
Google Fonts (Google LLC) – delivers the fonts displayed on the Website.
cdnjs (Cloudflare) and jsDelivr – deliver open-source code libraries used for animations.
WhatsApp (Meta Platforms) – if you choose to click the WhatsApp button, your conversation is subject to WhatsApp’s own privacy policy.
Google Tag Manager, Google Analytics, Google Ads (Google LLC) – measurement and advertising tags, active only after your consent.
Google Maps (Google LLC) – an interactive map is embedded on the Contact page and is loaded only after you consent. The Website also links to Google Maps for directions.
Gmail (Google LLC) – messages sent through the Website forms are delivered to our email inbox, which is hosted by Google.
Instagram – the Website contains a link to Instagram. Once you follow a link, the privacy policy of that service applies.

6. Who we share your data with

Your data is accessed only by TORA staff who need it to respond to you, and by the service providers listed above, who process it on our behalf and under appropriate confidentiality and data protection obligations. We may also share data with our partner developers in a specific project, only when this is needed to answer your enquiry and with your knowledge, or where required by law.

7. International transfers

Our team operates in Cyprus and Israel. Israel is recognised by the European Commission as providing an adequate level of data protection. Where a provider processes data outside the European Economic Area (for example, in the United States), the transfer is protected by an adequacy decision or by the European Commission’s Standard Contractual Clauses.

8. How long we keep your data

Enquiries through the contact form, WhatsApp or phone: up to 24 months from our last contact, unless a business relationship develops, in which case we keep it for as long as required by law.
Newsletter list: until you unsubscribe or withdraw your consent.
Server technical logs: according to the hosting provider’s standard retention, generally no more than 90 days.

9. Your rights

Subject to applicable law, you have the right to:

access the personal data we hold about you;
request correction of inaccurate data;
request deletion of your data;
restrict or object to processing, including objecting to direct marketing at any time;
receive your data in a portable format;
withdraw consent at any time, without affecting processing carried out before the withdrawal.

To exercise any of these rights, email yarmith@gmail.com. We will reply within one month.

If you believe your data has been handled unlawfully, you may file a complaint with the Commissioner for Personal Data Protection in Cyprus (www.dataprotection.gov.cy), or, if you are in Israel, with the Privacy Protection Authority (www.gov.il/en/departments/the_privacy_protection_authority).

10. Security

We use reasonable technical and organisational measures to protect your data, including encrypted HTTPS connections across the Website. No online transmission is fully secure, but we work to protect your information and to limit access to it.