Privacy Policy.

How Cornbread. collects, uses, and protects your personal data.

Cornbread. is operated by SambaRhino, a sole trader based in Amsterdam, The Netherlands. We take your privacy seriously. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under the General Data Protection Regulation (GDPR).

WHO WE ARE

Data controller:  SambaRhino, trading as Cornbread.

Address:  Amsterdam, The Netherlands

Email:  contact@thisiscornbread.com

KVK number: 94393974

WHAT DATA WE COLLECT

Data you provide directly

—     Your name and email address when you join the Cornbread. membership via thisiscornbread.com.

—     Your name, email address, and any information you include when you contact us via email at contact@thisiscornbread.com.

—     Information you provide in client intake forms when you book a Cornbread. service — including personal, professional, and lifestyle information you choose to share.

Data collected automatically

—     Basic website analytics — pages visited, time on site, and general geographic location — collected via Squarespace's built-in analytics. This data is anonymised and aggregated.

—     Cookie data — see our Cookie Policy for full details.

WHY WE COLLECT YOUR DATA

We collect and use your personal data for the following purposes:

—     To communicate with you about your enquiry or booking.

—     To deliver the Cornbread. service you have booked — including preparing for sessions, sending written deliverables, and follow-up communications.

—     To send you membership communications — early access to collections, essays, and founder content — if you have signed up as a member.

—     To improve thisiscornbread.com using anonymised analytics data.

 Our legal basis for processing your data is:

—     Contractual necessity — for data related to service bookings and delivery.

—     Legitimate interest — for membership communications and website analytics.

—     Consent — where you have explicitly opted in to receive communications.

HOW WE STORE AND PROTECT YOUR DATA

Your data is stored securely. Client intake forms and session notes are stored in password-protected files accessible only to authorised personnel at SambaRhino. Email communications are stored in a secure email account.

We do not sell, share, or transfer your personal data to third parties except where required to deliver the service — for example, video call platforms used for virtual sessions. Any third-party tools used are GDPR compliant.

We retain your personal data for as long as is necessary for the purpose it was collected. Client records are retained for a maximum of five years after the conclusion of an engagement. Membership data is retained until you unsubscribe or request deletion.

YOUR RIGHTS

Under GDPR you have the following rights:

—     The right to access the personal data we hold about you.

—     The right to correct inaccurate or incomplete data.

—     The right to request deletion of your personal data.

—     The right to restrict or object to processing of your data.

—     The right to data portability — to receive your data in a structured, commonly used format.

—     The right to withdraw consent at any time where processing is based on consent.

To exercise any of these rights, write to contact@thisiscornbread.com. We will respond within 30 days.

COMPLAINTS

If you believe your data has been handled incorrectly you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

Last updated: March 2026