Privacy
How your information is handled.
Last updated 13 November 2026
This policy explains what personal information this website collects, why we collect it, and who helps us handle it. It covers the enquiry and enrolment forms on this site. The Substack newsletter and the separately operated masterclass registration site are explained in their own sections below.
Who is responsible
Kirstie Ann Johnston, trading as Kirstie Johnston Coaching, is responsible for the personal information described in this policy. You can reach us about anything here by emailing kirstie@kirstiejohnston.com.
What we collect
We collect only what you choose to type into a form on this site. There are two:
- Contact form — your first and last name, email address, an optional phone number, the reason you are contacting us, and your message.
- True North enrolment form — your name, email address, mobile number and billing address (street, city, state, postcode and country), together with your acknowledgement of the coaching scope and of this policy.
When either form page opens, a small amount of technical information is also received by our spam protection service, as explained below. We do not ask for sensitive information through these forms, and we ask that you share only what you are comfortable sending through a website.
How your information is used
- To read and respond to your enquiry, and to discuss the right next step with you.
- To arrange and administer a True North enrolment, including the billing details needed for it.
- To keep an accurate record of enquiries and of the work we do together.
- To keep these forms free of spam and automated abuse.
Your information is not used for advertising, and it is never sold or rented to anyone.
Who helps us handle it
To run this website and respond to you, we use a small number of service providers who handle information on our behalf:
- GoHighLevel — our coaching CRM. Each enquiry creates or updates a contact record holding your name, email address and phone number, records the enquiry type, message and originating form, applies tags, adds a dated note of what you sent, and, for coaching enquiries, opens an opportunity card in our coaching pipeline. This is where your enquiry is stored and followed up.
- Cloudflare Turnstile — verifies that a submission comes from a real person before it reaches us. See the next section.
- Our website hosting platform — serves this site and the small database that supports the form protections described below.
These providers process information under their own terms and privacy policies, and their systems may store data outside Australia.
Spam protection and Cloudflare Turnstile
Both the Contact and True North enrolment forms are protected by Cloudflare Turnstile, a bot-detection service. The Turnstile script loads from Cloudflare when either form page opens, so it runs for every visitor to those two pages, not only when a form is submitted.
During that check, Cloudflare may receive technical information such as your IP address and details about your browser and device, and may place cookies or similar storage on your device. When you submit a form, a verification token is sent to our server and checked with Cloudflare before your enquiry is processed. If that check cannot be completed, the form will not submit and you are invited to email instead. Cloudflare's own privacy policy explains how it handles this information.
No advertising, analytics or social-media tracking runs on this website. If that ever changes, this policy will be updated first.
Repeated submissions
To stop the forms being used to flood our inbox, we keep a short-lived count of how many times a given email address has submitted recently. In that count, email addresses are stored only as a one-way hash — the address itself cannot be read back from it.
An enquiry is not a newsletter subscription
Sending the Contact or True North enrolment form does not subscribe you to marketing emails and does not add you to our newsletter. We use your details to respond to what you asked about, and nothing more. We do not add enquiry or enrolment submissions to any mailing list.
The newsletter is separate, on Substack
The Self-Trust Edit is published on Substack. Subscribing happens on Substack itself, and Substack manages your subscription, preferences and unsubscribing under its own privacy policy. If you choose to subscribe there, Substack holds your information for that purpose — kept separate from anything you send us through this website.
Masterclass registration is a separate site
Registration for the Find Your North Masterclass happens on a separately operated website (kirstiejohnstoncoaching-workshop.com). This website has no registration form, and the details you enter to register are collected there rather than here.
Your registration details may also be passed to us, or recorded in our coaching CRM, so that we can follow up with you about the masterclass. Where that happens, they are handled in the ways described in this policy. Otherwise, information you provide on that site is handled under that site's own privacy policy.
How long we keep it, and your choices
We keep enquiry information for as long as we need it to respond to you and to maintain accurate records of our work together, and then remove it.
You can ask us what personal information we hold about you, ask us to correct it, or raise a concern about how it has been handled, by emailing kirstie@kirstiejohnston.com. We will respond as soon as we can.
Changes to this policy
This policy may be updated as the website or the tools behind it change. The date at the top of this page shows the current version.
Questions about your information?
Email kirstie@kirstiejohnston.com and Kirstie will personally help.