Privacy Policy

1. Who we are (Data Controller)

ATRIA is operated by Nexa Holdings, LLC, a company organised in the United States. ATRIA also carries out activities in Rome, Italy; an Italian operating company has not yet been established. Nexa Holdings, LLC acts as the data controller for the processing described here. For any privacy question or to exercise your rights, contact us at contact@atria.homes.

2. What data we collect

We collect only what we need to respond to you and run the website:

• Information you provide via our contact form: your name, email address, and the content of your message. If you use the palette tool, an optional saved colour palette and a free-text note about your rooms may be included.
• Technical and usage data automatically generated when you visit: IP address, browser type, device information, pages viewed, and server logs, used for security and to operate the site.
• Cookie and similar-technology data, as described in the Cookies section below.

Photo-to-palette tool: when you extract a colour palette from a photo, the image is processed entirely in your browser and is never uploaded to or stored on our servers.

3. How we use your data

• To respond to your enquiries and provide consultations you request.
• To operate, secure, maintain, and improve the website.
• To send communications you have asked for (for example, a newsletter, where offered) and to manage your preferences.
• To comply with legal obligations and to establish, exercise, or defend legal claims.

4. Legal bases for processing (GDPR)

• Consent (Art. 6(1)(a)) — for non-essential cookies/analytics and for any optional marketing communications.
• Performance of a contract or pre-contractual steps (Art. 6(1)(b)) — to respond to and act on your requests.
• Legitimate interests (Art. 6(1)(f)) — to keep the site secure and functioning and to understand how it is used, balanced against your rights.
• Legal obligation (Art. 6(1)(c)) — where the law requires us to retain or disclose data.

5. Cookies and analytics

The website currently uses only essential/technical cookies necessary for it to function. We do not use profiling cookies, and we do not currently run third-party analytics.

We plan to introduce privacy-friendly analytics in the future. Before any non-essential or analytics cookies are set, we will request your consent through a cookie banner and will not load them until you agree. You will be able to change or withdraw your choice at any time.

6. Service providers and recipients

We do not sell your personal data. We share it only with trusted providers who process it on our behalf under appropriate agreements:

• Resend — delivery of emails sent through our contact form.
• Vercel — website hosting and content delivery, including server logs.
• [Analytics provider — to be confirmed once analytics is enabled].

We may also disclose data where required by law or to protect our rights.

7. International data transfers

Because ATRIA operates in both the United States and Italy, your data may be transferred to and processed in countries outside the European Economic Area, including the United States. Where this happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an equivalent lawful transfer mechanism.

8. Data retention

We keep enquiry and contact data only as long as needed to handle your request and for a reasonable period afterwards to manage our relationship and meet legal obligations, after which it is deleted or anonymised. Server logs are kept for a limited period for security.

9. Data security

We apply appropriate technical and organisational measures to protect your data against loss, misuse, and unauthorised access. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

10. Your rights under the GDPR

If you are in the EEA or the UK, you have the right to access, rectify, erase, restrict, or object to the processing of your data, the right to data portability, and the right to withdraw consent at any time without affecting prior processing.

To exercise any of these rights, write to contact@atria.homes. You also have the right to lodge a complaint with your supervisory authority — in Italy, the Garante per la protezione dei dati personali.

11. Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use it, to request access to and deletion of your personal information, to correct inaccurate information, and to be free from discrimination for exercising these rights.

In the past 12 months we have collected identifiers (such as name and email) and internet/network activity (such as logs) for the purposes described above. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, and we do not knowingly process the sensitive personal information or data of minors for such purposes.

To exercise your California rights, contact contact@atria.homes. We will verify your request and respond within the timeframes required by law. You may use an authorised agent to submit a request on your behalf, subject to verification.

12. Children’s privacy

The website is not directed to children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above shows when it was last revised. Material changes will be highlighted on this page.

14. Contact

For any question about this policy or your personal data, email us at contact@atria.homes.