Privacy Policy

Who we are

Beans & Leaves Cafe operates cafes in Staten Island, New York. This policy describes information handled by our website. Effective November 2, 2026.

Information you provide

Our contact and catering forms collect your name, email address, message and, when provided, phone number and preferred location. Catering inquiries also include an event date, optional event time and number of guests. Please do not include payment-card details or sensitive personal information.

We use these details to respond to your inquiry and coordinate requested services. Submitting a form does not place an order or reserve an event.

Hosting, security and analytics

Cloudflare hosts the site and processes technical request information, such as IP addresses and browser information, for delivery and security. Forms use Cloudflare Turnstile to reduce automated spam. When enabled, Cloudflare Web Analytics measures visits without advertising cookies. We do not use advertising pixels or session recordings, and the site does not set its own cookies.

Our form database may store a salted hash of an IP address and a shortened browser user-agent for abuse prevention. Our operational logs omit the contents of your inquiry. Third-party services may process additional technical information under their own policies.

Storage and retention

Submissions are stored in Cloudflare D1 before notification email is attempted, so a delivery problem does not lose your inquiry. Notifications are sent to the cafe's designated inbox when live email delivery is enabled. Database submissions are deleted after 12 months. Copies in the cafe's email inbox are reviewed and deleted by the owner when no longer needed, subject to legal or business recordkeeping requirements.

Sharing and your choices

We do not sell inquiry information. We share it only with service providers necessary to operate the site, respond to requests, or meet applicable legal obligations. Call the cafe or contact us to request access, correction or deletion. The maintainer handles database deletion and the owner handles inbox copies; we may need to verify your request.

Third-party links and children

Delivery apps, social networks and linked video sites have their own privacy policies. This policy does not cover those services. Our website is intended for general audiences, not to collect information from children under 13. Please contact us if a child has submitted information that should be removed.

Updates and contact

We may update this policy as the website changes. The effective date above identifies the current version. For questions, call (718) 448-0276 or use our contact page.