What we collect — When you send us a form on our website (party inquiries, collaboration requests, the contact form, or the Columbia student sign-up), we collect what you enter: your name, email address, phone number, and the details of your request. When you apply for a job, we collect the information on your application and résumé. We do not collect personal information from visitors who simply browse the site.
How we use it — We use what you send us only to answer your request or, for job applications, to consider you for the position you applied for. We do not sell, rent, or share your personal information with anyone for their marketing.
Payments, online orders, gift cards and rewards — Since October 11, 2026, Square is our point-of-sale provider. Square processes card payments at the restaurant, online orders placed on our ordering page (cash.app/$arcocafe, operated by Square's parent company, Block, Inc.), eGift cards, and Arco Cafe Rewards, which you join with your phone number and a code sent to you by text. We never see or store your full card number. Our guest records — your name and contact details, your visits and purchases, and your rewards balance — are kept in our Square account. For how Square handles this information, see Square's privacy notice.
Reservations — Table reservations are made through OpenTable. The details you give when you book are handled under OpenTable's privacy policy and shared with us so we can welcome you.
Emails and text messages — We do not send marketing emails or marketing text messages. The messages you may receive are replies to your requests, and receipts, gift card messages, and rewards codes sent through Square when you use those services. If we ever start a newsletter or offers program, we will update this policy first, and every message will include a simple way to stop receiving them.
Job applicants — Our application asks for your name, contact details, the position you want, when you can work, your work experience, and references. We never ask for your Social Security number, date of birth, past pay, arrest or conviction history, credit history, or a photo, and we ask you not to include them. When you apply online, your application is sent to us by email through Resend, our email delivery provider, which keeps a copy for 30 days and then deletes it; you can download your own copy when you send it. Our application page uses Cloudflare Turnstile to check that a person, not an automated program, is applying; Turnstile processes technical information about your browser and connection for that purpose only (see Cloudflare's Turnstile privacy notice). Applications are seen only by the people who make hiring decisions and are used only for that purpose. We keep them for three years after the hiring decision, as New York State and City law allow claims to be brought within that time, and then delete them.
Cookies and analytics — We use Google Analytics to understand, in aggregate, how visitors use our website: which pages are visited, how long people stay, and what devices they use. We use it only to improve the site. We do not use advertising cookies or tracking pixels. The map on our Visit page is provided by Google Maps and loads from Google when it appears on your screen.
How we protect it — Our website runs only over an encrypted connection. Information you send us is kept with our service providers — Netlify (website, forms, and the online application), Google Workspace (email), Resend (delivery of online applications), Cloudflare (the anti-bot check on our application page), and Square (guest records) — and only the people who need it to answer you or to run the restaurant can see it.
Your rights — You have the right to access, correct, or delete any personal information we hold about you. To make a request, contact us or call us. We will respond within 30 days.
Data retention — Website form submissions are kept for three years from the date you send them, then deleted. Job applications are kept for three years after the hiring decision, then deleted. Guest records in Square are kept while you remain our guest or a rewards member, or until you ask us to delete them. Analytics data is aggregated and does not identify you.
Contact — If you have questions about this privacy policy, contact us or call (646) 781-9080.
Last updated: October 2026