Atria Legal
Effective date: 25 September 2026
This Legal page contains Atria’s Privacy Policy, Terms and Conditions, and Account Deletion information.
Privacy Policy
1. Who we are
Atria is operated by ATRIA SPACES LTD, a company registered in England and Wales under company number 17472995, with its registered office at 22 Goodworth Road, RH1 1TE (“Atria”, “we”, “us” or “our”).
For the purposes of UK data protection law, ATRIA SPACES LTD is the controller of the personal data described in this Privacy Policy.
If you have questions about this policy or how we use your personal data, contact us at team@atria-spaces.com.
2. What this policy covers
This Privacy Policy explains how we collect, use, disclose and protect personal data when you use the Atria mobile application, website and related services (together, the “Service”).
Atria helps people discover and connect with other Atria users who are present at the same participating venue. It uses QR check-in and Bluetooth-based presence confirmation. Location permission may also be requested as an optional way to support presence detection, but Atria does not store your precise GPS coordinates.
3. Personal data we collect
Account information
When you create and use an account, we collect:
- your email address;
- your password in protected form;
- your first name;
- your date of birth; and
- account settings and preferences.
We do not ask for your telephone number as part of account creation.
Profile information
We collect the information you add to your profile, including:
- your profile photograph;
- an optional biography; and
- optional links to your Instagram, Facebook or LinkedIn profile.
Your first name, profile photograph and biography may be shown to other Atria users who are currently checked into the same venue as you. Your social-media links are visible only to users whose connection requests you have accepted.
Presence and visit information
When you use Atria at a participating venue, we may collect:
- the venue at which you checked in;
- your arrival and departure times;
- the duration of your visit;
- whether your presence was confirmed using a QR code, Bluetooth or optional device permissions;
- your current presence status, including whether you selected Quiet mode; and
- technical signals needed to confirm that your device remains at the venue.
Atria records confirmation that you are present at a venue. We do not store your precise GPS coordinates. Location permission is optional and is not required to use the core Bluetooth check-in experience.
When Atria can no longer confirm your presence, a grace period of up to 15 minutes may apply before you are marked as having left. If you select Quiet mode, your profile is hidden from other users at the venue, but Atria still records the visit.
Connections and safety information
We collect information about:
- connection requests and accepted connections;
- Embers, meaning users you encountered through the Service;
- blocked users;
- reports you submit or that are submitted about you;
- written descriptions included in reports; and
- actions taken by our team in response to reports or suspected breaches of our rules.
Technical and usage information
We and our service providers may collect technical information needed to operate, secure and improve the Service, including:
- IP address;
- device and operating-system information;
- app and browser version;
- app activity and feature usage;
- authentication, security and server logs;
- error, performance and availability information; and
- cookie and analytics information from our website.
Our website may use GoDaddy technologies and Google Analytics. These services may use cookies or similar technologies to understand website traffic and performance. Where consent is legally required, non-essential analytics will be used only after you provide consent.
Communications
We collect information contained in messages you send to team@atria-spaces.com and records of communications relating to support, safety, complaints or account administration.
4. How we use personal data and our lawful bases
We use personal data only where we have a lawful basis under applicable data protection law.
| Purpose | Data involved | Lawful basis |
|---|---|---|
| Create, authenticate and administer your account | Account and technical information | Performance of our contract with you |
| Display your profile to users at the same venue | First name, photograph, biography and presence | Performance of our contract with you |
| Confirm presence and manage check-ins | Venue, check-in, Bluetooth and optional permission signals | Performance of our contract; consent where required for device permissions |
| Provide connections and Embers | Profile, encounter and connection information | Performance of our contract with you |
| Show social links to accepted connections | Optional social links and connection status | Your consent and performance of our contract |
| Send operational notifications | Account, presence and connection information | Performance of our contract with you |
| Send marketing communications | Email, preferences and relevant usage information | Your consent |
| Prevent harm, investigate reports and enforce our rules | Reports, blocks, account activity and technical logs | Our legitimate interests in protecting users and operating a safe service |
| Maintain, troubleshoot and improve the Service | Technical, performance and usage information | Our legitimate interests in operating and improving Atria |
| Produce venue analytics | Aggregated or anonymised visit information | Our legitimate interests in understanding and improving participating venues and the Service |
| Comply with law and protect legal rights | Relevant account, safety and transaction records | Legal obligation and our legitimate interests in establishing or defending legal claims |
Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.
5. Notifications and marketing
Atria may send operational notifications about connection requests, venue activity, check-in prompts and other Service functions. You can control push notifications through the app settings, where available, and through your device settings.
We send marketing communications only where you have separately opted in. You can withdraw your consent or unsubscribe at any time using the method provided in the communication or by contacting us.
6. How your information is shared
We may share personal data in the following circumstances:
With other Atria users
Users currently present at the same venue may see your first name, profile photograph and biography unless you select Quiet mode. Accepted connections may also see the social links you have chosen to provide.
With participating venues
Participating venues receive anonymous or aggregated statistics, such as total visits, visit duration or repeat-visit trends. We do not provide venues with identifiable visitor profiles through these analytics.
With service providers
We use suppliers to operate the Service, including:
- Railway for application infrastructure and hosting;
- Backblaze for regular backups;
- Healthchecks.io for service monitoring;
- GoDaddy and Titan for domain and email services;
- Cloudflare for website delivery, DNS, security and related infrastructure;
- Google Analytics for website analytics; and
- Apple and other app-distribution providers where necessary to distribute and operate the app.
These providers process information on our behalf or as independent controllers under their own terms, depending on the service. They are permitted to use personal data only as allowed by applicable law and their agreements with us.
For safety and legal reasons
We may disclose personal data where reasonably necessary to:
- investigate or prevent fraud, abuse, harassment or threats to safety;
- enforce our Terms and Conditions;
- comply with a legal obligation, court order or lawful request; or
- establish, exercise or defend legal claims.
Business changes
If Atria is involved in a merger, acquisition, financing, restructuring or sale of assets, personal data may be disclosed to relevant advisers and counterparties subject to appropriate confidentiality and data-protection safeguards.
We do not sell personal data.
7. International transfers
Some of our service providers may store or process personal data outside the United Kingdom. Where personal data is transferred internationally, we use safeguards required by applicable law. Depending on the destination, these may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another legally recognised safeguard.
You may contact us for more information about the safeguards relevant to your personal data.
8. How long we keep personal data
We keep personal data only for as long as reasonably necessary for the purposes described in this policy.
- Account, profile, connection and visit information is generally retained while your account remains active.
- When you request account deletion, your account and associated personal data will be deleted or anonymised within 30 days, except where retention is necessary for safety, legal or security reasons.
- Deleted information may remain in protected backups for up to 84 days before being overwritten or securely deleted.
- Reports, moderation decisions and limited identifiers may be retained for longer where reasonably necessary to protect users, prevent repeated abuse, comply with law or establish or defend legal claims.
- Support communications and technical logs are retained only for as long as reasonably required for support, security, troubleshooting and legal compliance.
- Analytics information is retained according to our configuration and the applicable provider’s retention controls, and is aggregated or deleted when it is no longer required.
9. Security
We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure or loss. These measures include access controls, protected authentication, monitoring and regular backups.
No system is completely secure. You are responsible for keeping your password confidential and for notifying us promptly if you believe your account has been compromised.
10. Your rights
Subject to applicable law, you may have the right to:
- access the personal data we hold about you;
- correct inaccurate or incomplete information;
- request deletion of your personal data;
- restrict or object to certain processing;
- receive certain information in a portable format;
- withdraw consent where processing is based on consent; and
- complain to the Information Commissioner’s Office (ICO).
To exercise your rights, email team@atria-spaces.com. We may need to verify your identity before completing a request.
You can contact the ICO through ico.org.uk. We would appreciate the opportunity to address your concern first.
11. Your choices
You can:
- select Quiet mode to hide your profile from other users during a visit;
- choose whether to add a biography or social-media links;
- accept or reject connection requests;
- block and report other users;
- control location, Bluetooth and notification permissions through your device settings;
- withdraw from marketing communications; and
- delete your account through the app.
Disabling certain permissions may limit features that depend on those permissions.
12. Age restriction
Atria is intended only for people aged 18 or over. We do not knowingly permit anyone under 18 to create an account. If we learn that a person under 18 has provided personal data, we may suspend the account and delete the information. Contact us if you believe an under-18 has created an account.
13. Automated decision-making
Atria does not currently make decisions that produce legal or similarly significant effects through solely automated processing.
14. Changes to this policy
We may update this Privacy Policy to reflect changes to the Service, our data practices or the law. We will publish the updated version with a revised effective date. Where a change materially affects your rights, we will provide additional notice where reasonably required.
15. Contact us
ATRIA SPACES LTD
Company number: 17472995
Registered office: 22 Goodworth Road, RH1 1TE
Email: team@atria-spaces.com
Terms and Conditions
1. About these terms
These Terms and Conditions (“Terms”) govern your use of the Atria mobile application, website and related services (the “Service”). The Service is operated by ATRIA SPACES LTD, company number 17472995, whose registered office is at 22 Goodworth Road, RH1 1TE (“Atria”, “we”, “us” or “our”).
By creating an account or using the Service, you agree to these Terms and acknowledge the Privacy Policy above. If you do not agree, do not create an account or use the Service.
Additional terms imposed by the app store through which you download Atria may also apply.
2. Eligibility
You must be at least 18 years old to create an account or use Atria. By using the Service, you confirm that you are 18 or over and legally capable of agreeing to these Terms.
3. What Atria provides
Atria helps users who are present at participating physical venues discover and connect with one another. Presence may be established using QR codes, Bluetooth and optional device permissions.
Atria is a digital introduction and presence service. We do not arrange, supervise or control conversations, meetings or relationships between users. We do not guarantee that another user is present, available, compatible, trustworthy or willing to interact.
4. Your account
You must provide accurate information and keep it reasonably up to date. You must not:
- create an account for another person without permission;
- impersonate another person or misrepresent your identity;
- create an account if you are under 18;
- allow another person to use your account; or
- attempt to regain access after your account has been suspended or terminated without our permission.
You are responsible for keeping your password confidential and for activity conducted through your account. Contact us promptly if you suspect unauthorised access.
Atria does not independently verify every user’s identity. A profile, photograph, biography or social link should not be treated as proof of identity, character or intentions.
5. Profiles, presence and visibility
When you are checked into a venue, your first name, profile photograph and biography may be shown to other users at that venue. If you select Quiet mode, your profile will be hidden from other users while Atria may continue to record the visit as described in the Privacy Policy.
Your social-media links are shown only to accepted connections. You control whether to provide optional profile information and whether to accept a connection request.
Presence information may be delayed or inaccurate because of device settings, connectivity, Bluetooth conditions or the 15-minute departure grace period. You must not rely on Atria as a precise safety, tracking or emergency service.
6. Acceptable behaviour
You must treat other users respectfully and use Atria only for lawful purposes. You must not use the Service to:
- harass, threaten, intimidate, stalk or exploit another person;
- engage in sexual misconduct or unwanted sexual behaviour;
- discriminate against another person based on a protected characteristic;
- impersonate another person or create a deceptive profile;
- share unlawful, abusive, hateful, sexually explicit, defamatory or privacy-invasive content;
- collect, scrape, monitor or misuse another user’s information;
- send spam, conduct unauthorised advertising or engage in commercial solicitation;
- manipulate check-ins, presence information, connections or reports;
- interfere with the Service, its security or another user’s access;
- use automated systems to access or extract information from the Service without permission; or
- encourage or assist anyone else to do any of these things.
7. Offline interactions and personal safety
You are responsible for deciding whether and how to interact with another person. Exercise ordinary care when speaking to or meeting people, even when Atria indicates that they are present at the same venue.
Atria does not conduct comprehensive identity or background checks and cannot guarantee another user’s identity, statements, intentions or conduct. If you feel unsafe, stop the interaction, seek assistance from venue staff or emergency services where appropriate, and use Atria’s block and report tools.
Nothing in these Terms makes Atria responsible for conduct that occurs independently between users, except to the extent responsibility cannot legally be excluded.
8. Participating venues
Participating cafés, bars and other spaces are independent businesses. Unless expressly stated otherwise, they do not act as Atria’s agents, and Atria does not control their premises, staff, products, opening hours, safety arrangements or conduct.
Your use of a venue remains subject to that venue’s own rules. Atria is not responsible for loss, injury, service failure or disputes caused by a venue, except where the law does not allow that responsibility to be excluded.
9. Reports, blocking and moderation
You may block or report another user through the Service. Reports may include a written description and will be reviewed by the Atria team.
We may investigate suspected breaches of these Terms and may, where reasonably appropriate:
- remove or restrict profile information;
- issue a warning;
- limit access to features;
- temporarily suspend an account;
- permanently terminate an account; or
- refer a matter to a venue, law-enforcement body or other appropriate authority.
We may act without prior notice where reasonably necessary to protect users, investigate misconduct, comply with law or preserve the integrity of the Service. We are not required to disclose confidential information about another user or the details of an investigation.
You must not submit knowingly false, misleading or malicious reports.
10. Your content
You retain ownership of the profile photograph, biography, social links and report information you provide (“Your Content”).
You give Atria a worldwide, non-exclusive, royalty-free licence to host, store, reproduce, display and process Your Content only to the extent reasonably necessary to operate, secure and improve the Service, enforce these Terms and comply with law. This licence ends when Your Content is deleted from our active systems, except where continued retention is permitted under the Privacy Policy or required by law.
You confirm that you have the rights needed to provide Your Content and that its use by Atria as described above will not violate another person’s rights or any law.
11. Permissions and communications
Some features depend on Bluetooth, notifications, camera access for QR codes or optional location permission. You control these permissions through your device settings. Disabling a permission may prevent the related feature from working correctly.
We may send operational communications needed to provide the Service. We send marketing communications only where you have opted in, and you may withdraw that consent at any time.
12. Third-party services and links
Atria may contain links to social networks, venues or other third-party services. We do not control those services and are not responsible for their content, availability, security or privacy practices. Your use of a third-party service is governed by its own terms and policies.
13. Ownership of Atria
Atria and its licensors own all rights in the Service, including its software, design, branding, logos, text and other materials, excluding Your Content. These Terms give you a personal, limited, revocable, non-exclusive and non-transferable right to use the Service in accordance with these Terms.
You may not copy, modify, distribute, sell, lease, reverse engineer or create derivative works from the Service except where the law expressly permits it.
14. Availability and changes
We aim to keep Atria available and functioning, but we do not guarantee uninterrupted, error-free or permanent access. We may maintain, update, modify, suspend or discontinue all or part of the Service where reasonably necessary.
Because Atria relies on devices, wireless signals, networks and third-party infrastructure, presence and notification features may occasionally be delayed, unavailable or inaccurate.
15. Liability
Nothing in these Terms excludes or limits liability where it would be unlawful to do so, including liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation. Nothing in these Terms affects your statutory rights as a consumer.
We are responsible for foreseeable loss or damage caused by our breach of these Terms or our failure to use reasonable care and skill. We are not responsible for loss or damage that is not foreseeable, for business losses incurred by consumers, or for failures caused by events outside our reasonable control.
Atria is not responsible for the independent actions of users, participating venues or third-party services, except to the extent that responsibility arises under applicable law and cannot be excluded.
16. Suspension and termination
You may stop using Atria at any time and may request account deletion through the app.
We may restrict, suspend or terminate your account if we reasonably believe that you have breached these Terms, created a risk to another person, misused the Service, exposed Atria to legal risk or acted unlawfully. Where appropriate, we will explain the reason and provide a reasonable opportunity to appeal by contacting us, unless doing so would compromise safety, an investigation or a legal obligation.
Sections that by their nature should continue after termination—including ownership, retained safety records, liability and governing law—will remain effective.
17. Changes to these Terms
We may update these Terms to reflect changes to Atria, our business or the law. We will publish the revised Terms with a new effective date. If a change materially affects your rights, we will provide reasonable notice. Continued use after the updated Terms take effect constitutes acceptance where permitted by law; where fresh consent is required, we will request it.
18. Governing law
These Terms are governed by the laws of England and Wales. If you are a consumer resident elsewhere in the United Kingdom, you may also bring proceedings in the courts of the part of the UK where you live. Any mandatory consumer protections available to you remain unaffected.
19. Contact
ATRIA SPACES LTD
Company number: 17472995
Registered office: 22 Goodworth Road, RH1 1TE
Email: team@atria-spaces.com
Account Deletion
How to delete your account
You can initiate deletion through the Delete Account option in Atria’s account settings. If you cannot access the app or need assistance, email team@atria-spaces.com from the email address connected to your account.
We may ask you to verify that you control the account before processing an email request.
What happens after a deletion request
- Your account will be disabled and scheduled for deletion.
- Your profile will no longer be visible to other users.
- Your profile, visit history, connections, Embers and associated personal data will be deleted or anonymised within 30 days.
- Deleted information may remain in protected backups for up to 84 days before it is overwritten or securely deleted.
- We may retain limited report, moderation, security or legal records where reasonably necessary to protect users, prevent repeated abuse, comply with law or establish or defend legal claims.
- Information already anonymised or aggregated so that it no longer identifies you may be retained.
Account deletion is permanent. Once completed, your account, connections and profile cannot be restored.
For help with deletion, contact team@atria-spaces.com.