top of page


privacy and cookies



Galleria Café Limited (“Arro Coffee or “we” or “us) takes its commitment to privacy very seriously and would advise you to read this policy closely. This privacy policy (‘Privacy Policy’) may change from time to time, so please check it frequently.


This Privacy Policy sets out the basis on which your personal data which we collect from you will be processed and controlled by us, Galleria Café Limited, College House, 17 King Edwards Road,  Ruislip, England, HA4 7AE.


Data we collect


We only collect basic personal data from you that may include name, address, email address, mobile phone number, date of birth. We process this data on the basis of your consent or for our legitimate business interest in providing marketing to you in relation to a product or service that you have bought, or in relation to customer services if you've asked us a question or raised a complaint.


We automatically receive your location and data about your browser or mobile platform when you are visiting our website or login into our free Wi-Fi hotspot.


How we use your data


We use your information in the following ways;

  • To ensure that content on our website is presented in the most effective way for you and the device you are using

  • To allow you to register with us on our website where you choose to do so

  • To notify you about changes to our services

  • For  the purposes of dealing with any question or complaint you have contacted us about


In accordance to what you have communicated to us at the point in which you registered; If you have given your consent:

  • To keep you updated with the latest information about our menus, services and special offers

  • To send you information that we think you will want to receive or that would benefit you and your experience with us


Where we transfer and store it


All information that you provide to us is stored in secure servers which are operated by trusted providers. We oblige all of our partners to sign contracts with us that clearly set out their commitment to respecting your Individual Rights, protecting your personal data – including not using it for any purpose other than for the agreed purposes - and their commitments to assisting us to help you exercise your Individual Rights.


We use a select number of trusted external service providers for certain technical data analysis, processing and/or storage offerings. These service providers are carefully selected and meet high data protection and security standards. We only share information with them that is required for the services offered and we contractually bind them to keep any information we share with them as confidential and to process Personal Data only according to our instructions.


We will only pass your data on to third parties without your express consent if we are obliged to do so by statutory law or an instruction by a public authority or court.


We may also transfer your personal data – that may include name, address, email address, mobile phone number, date of birth – to our marketing partners for the purposes of providing marketing to you, if you have given your consent for this.


We cannot be held responsible for any other third party data collection processes, or privacy policies that are not operated by us, including social media platforms and networks that may collect your personal data. If you do wish to enquire about their privacy policies and how your data is being handled by them, you must contact them directly.


How long we keep it


We will keep your contact information for five years, after which we will ask you again for consent to continue to receive marketing information from us.


In both circumstances, you have the right at any time to notify us that you no longer want to receive this information. You can exercise this right to opt-out by contacting our office at or clicking unsubscribe from our emails..


Your Individual Rights


If at any point you believe that the information we process on you is incorrect, you can request to see this information and have it restricted, corrected or deleted on our systems. If you wish to raise a complaint on how we have handled your personal data, you can contact our office at and we will investigate the matter.



We, together with its marketing, analytics and technology partners, uses certain monitoring and tracking technologies (such as cookies, beacons, pixels, tags and scripts). These technologies are used in order to maintain, provide and improve our Services on an ongoing basis, and in order to provide our Visitors, our Users and their Users-of-Users with a better experience. 
Please note that Third Party Services placing cookies or utilizing other tracking technologies through our Services may have their own policies regarding how they collect and store information. Such practices are not covered by our Privacy Policy and we do not have any control over them. 
Cookies: In order for some of these technologies to work properly, a small data file (“cookie”) must be downloaded and stored on your device. By default, we use several persistent cookies for purposes of session and user authentication, security, keeping the User’s preferences (e.g., regarding default language and settings), connection stability (e.g., for uploading media, using e-Commerce features, etc.), monitoring performance of our services and marketing campaigns, and generally providing and improving our services.
If you want to delete or block any cookies, please refer to the help and support area on your internet browser for instructions on how to locate the file or directory that stores cookies. Information on deleting or controlling cookies is also available at  (note that this website is not provided by Us, and we, therefore, cannot ensure its accuracy, completeness or availability).
Please note that deleting our cookies or disabling future cookies or tracking technologies may prevent you from accessing certain areas or features of our Services, or may otherwise adversely affect your user experience.
Clear Gifs: We and certain Third Party Services may employ a software technology called “clear gifs” (a.k.a. Web Beacons/Web Bugs), which enables them and us to improve our Services by measuring their effectiveness and performance. Clear gifs are tiny graphics with a unique identifier, similar in function to cookies, however are not stored on your device, but instead embedded within our Services.
Flash and HTML5: We and certain Third Party Services may also employ certain tracking technologies known as “Flash cookies” and “HTML5”, mainly for advertising purposes. Various browsers may offer their own management tools for removing or blocking such technologies. Additional information about managing Flash cookies is available here. 
(Please note that this website is not provided by Us, and we therefore cannot ensure its accuracy, completeness or availability).
Behavioral Targeting/Re-Targeting: Certain Third Party Services and ad networks may display advertising on our Website, Apps or manage our advertising on other websites. Such parties may use certain tracking technologies to collect certain information about your activities on the Services and different third party Services to provide you with targeted advertising based on your interests and preferences. You may opt-out of receiving targeted ads from certain advertisers and ad networks by clicking here (or if you are located in the European Union click here (provided by Please note this does not opt you out of receiving all advertising and that your opt-out will only be in relation to the specific advertising. You will continue to receive advertising for which you have not opted out.

User Data Supplementation: We may receive information about you from other sources, including publicly available databases or third parties from whom we have purchased data, and combine this data with information we already have about you. This helps us to update, expand and analyze our records, identify new customers, and provide products and Services that may be of interest to you. Where we obtain your Personal Information from these third parties, we ensure that such parties are contractually committed to inform you that your Personal Information will be disclosed to us and we take steps to ensure the accuracy of your Personal Information before using it. If you provide us personal information about others, or if others give us your information, we will only use that information for the specific reason for which it was provided to us.

“Do Not Track” Signals: Please note that we do not change our practices in response to a “Do Not Track” signal in the HTTP header from a browser or mobile application


Applicant Privacy Notice


At Galleria Café Ltd (‘Arro Coffee or ‘we’), we want to ensure that we consider your privacy seriously. We will ensure that the information you submit to us as part of the recruitment process is only used for the purposes set out below. We will only process such data as agreed with you and as provided to you by us or by other sources that we will identify.


This Privacy Notice sets out how your personal data will be processed as controlled by Galleria Café Limited, College House, 17 King Edwards Road,  Ruislip, England, HA4 7AE.


Data we collect


We only collect your personal data when you submit an application to us using our website, when you e-mail us your details or as we receive from any agencies we use for recruitment purposes or to whom you pass your personal data.


Your personal data that we could process will include:

  • Full name

  • Contact details

  • Date of birth

  • Qualifications and employment history

  • Interview notes during your application

  • Racial, ethnic, sexual, religious and/or disability information

  • Passport and other identification details

  • Information about past criminal convictions


How we use your data

We will use your personal data for the following purposes:

  • processing your application;

  • respond to queries from you;

  • offering you future positions


We will only do so either with your consent, where it is in our legitimate business interest to do so, where we have a legal obligation to do so, or where necessary for entering into the performance of a contract with you.


More information about how your data will be used during recruitment and selection will be provided as part of the recruitment process.


Who we share it with


If you applied through our jobs website the information that you provide to us may be stored in secure servers which are operated by trusted providers. We oblige all of our partners to sign contracts with us that clearly set out their commitment to safeguarding the security of your personal data, not using it for any purpose other than for the purposes above, and ensuring their commitment to assisting us to help you exercise your Individual Rights.


During the application and recruitment process, your personal data will be stored on our database based in the UK. Following your successful employment, much of your data will be transferred to our trusted consultant of HR services.


How long we keep it for


We will hold your application data for a period of 18 months from your application after which we will delete this information. We will only extend this period on the basis of your consent or in the event of you being successful awarded a position.


What your rights are


At any time during the recruitment process, you have the right to:

  • Request a copy of your personal information

  • Request any inaccuracies in your personal information be corrected


You may also ask to object or restrict the processing of your personal data and have your personal information erased, where appropriate


In addition, you can also withdraw your consent to us processing your application at any time.


In order to exercise your rights, please contact


Modifications and changes to the policy


Any changes made to this Privacy Policy will be updated on our website and you will be notified by email if necessary and appropriate.


If you have any questions about our website or our Privacy Policy, please contact

bottom of page