Privacy Policy
Effective date: October 23, 2026
This Privacy Policy explains how The Carbonara Corp. ("we", "us"), a New York corporation doing business as NYC Urbans, collects and uses personal information through the websites of The Kiosk Pasta Bar and Boss of Burgers (the "Sites"). Our kiosks are located at South Plaza, next to the Manhattan Municipal Building, 1 Centre Street, New York, NY.
Contact: info@thekiosks.com · 100 Maiden Lane, New York, NY 10038
1. Information we collect
We collect only the information you choose to give us through the forms on the Sites:
| Form | Information | Why we use it |
|---|---|---|
| Catering quote (online quote or request) | name, company, email, phone, event details (date, time, place, delivery address and ZIP code, service, number of guests, menu choices, staff and extras), allergies and dietary needs, budget per person, how you heard about us, notes | to prepare your quote, warn you if a dish contains something you told us to avoid, prepare a safe menu and deliver your order. We use allergy information only for this purpose |
| Dome or table reservation | name, email, phone, date, time, number of guests, type of seating, notes | to manage and confirm your reservation |
We do not ask for Social Security numbers, government ID numbers or payment card details on the Sites.
Automatic information. Our web host processes technical data (IP address, browser type, pages requested, date and time) to deliver the Sites and keep them secure. We do not use advertising cookies, analytics cookies or tracking pixels. If we decide to add them, we will update this Policy and ask for your choice first.
Catering quotes. When you create a quote, we save it on our web server with a number (TK-… or BB-…) and email it to you and to our catering team. Your quote has a personal link with a secret code: anyone who has the link can open the quote, so share it only with people you trust. Only our authorized staff, with a password, can open saved quotes.
Payments. When online payment is active, payments are processed by Stripe. We do not receive or store your full card number. Stripe handles your payment details under its own privacy policy (stripe.com/privacy).
2. Marketing messages
- The forms on the Sites do not sign you up for marketing messages. Where you can join (for example the Member Card on nycurbans.com), messages by email and text message (SMS) are optional. You choose each channel separately, and no box is pre-checked. Consent is not a condition of any purchase or of membership.
- Email: every marketing email includes an unsubscribe link and our postal address. We honor unsubscribe requests within 10 business days.
- SMS: we send texts only to the number you gave us, with your prior express written consent, between 8:00 a.m. and 9:00 p.m. New York time. Message frequency varies. Message and data rates may apply. Reply STOP to cancel or HELP for help. You can also cancel in any other reasonable way, for example by replying "cancel" or writing to us. We honor your request within 10 business days and send at most one confirmation text.
- Operational messages about a booking, a request you made, verification codes or your account are not advertising. They never include offers.
3. How we share information
We do not sell your personal information and do not share it for targeted advertising. We share it only with:
- service providers that help us run the Sites and send messages (web hosting, email and SMS providers, and Stripe for payments), only for those services;
- public authorities, when the law requires it;
- a buyer or successor, if our business is transferred, under this Policy.
4. How long we keep information
- Catering quotes that are not confirmed: up to 12 months after the quote date.
- Confirmed or paid catering orders: 3 years after the related sales tax return, as New York sales tax rules require, then deleted.
- Reservations and other requests: up to 2 years after the event or the last contact.
- Marketing consent records and opt-out requests: at least 5 years, to prove consent and respect your choices.
5. Security
We use reasonable administrative, technical and physical safeguards appropriate to our size and to the information we hold, as required by the New York SHIELD Act (General Business Law § 899-bb). If a security breach affects private information of New York residents, we will notify you as required by General Business Law § 899-aa.
6. Children
The Sites are not directed to children under 13, and we do not knowingly collect information from them. The Member Card is for adults 18 and older. If you believe a child has given us information, write to us and we will delete it.
7. Your choices
You can ask us at any time to access, correct or delete your information, or to stop any marketing channel, by writing to info@thekiosks.com. We will answer within 30 days.
Do Not Track: we do not track you across other websites, so we do not respond differently to "Do Not Track" browser signals.
8. Member Card
The NYC Urbans Member Card is managed on nycurbans.com. Its own Terms and Privacy Notice apply and are shown before you join or activate your card.
9. Changes
We will post any update on this page with a new effective date. If a change materially affects how we use information you already gave us, we will ask for your consent where the law requires it.