Privacy Policy

Last Updated: October 15, 2026

At AnnaJohnson.co, I respect your privacy and believe you should understand how your personal information is collected, used, and protected.

This Privacy Policy explains how I handle information when you visit my website, contact me, subscribe to emails, book a coaching session, or work with me.

1. Who I Am

AnnaJohnson.co is operated by Anna Johnson, an independent marketing consultant and leadership coach.

Business Owner: Anna Johnson
Business Mailing Address: 302 Washington St., #150-7113, San Diego, CA 92103, United States
Current Operating Location: Portugal
Email: contact@annajohnson.co
Website: https://www.annajohnson.co

I provide fractional CMO services, marketing consulting, leadership coaching, and related professional services to individuals and businesses internationally.

For questions about your personal information, contact me at contact@annajohnson.co.

2. Information I Collect

Depending on how you interact with my website and services, I may collect the following information.

Contact Information

Your name, email address, telephone number, and any other contact details you voluntarily provide.

Professional Information

Your job title, company name, professional background, career goals, leadership challenges, business needs, and information shared through coaching or consulting inquiries.

Client and Booking Information

Appointment details, questionnaires, contracts, invoices, communications, coaching notes, and information necessary to deliver professional services.

Payment Information

Billing details, transaction amounts, payment status, and related financial records. Payments are processed through HoneyBook and its payment processing partners. I do not directly store complete payment card numbers.

Website and Technical Information

Information such as IP address, browser type, device information, approximate geographic location, pages visited, referring websites, and interactions with website content.

Marketing Information

Email subscription preferences, email engagement, advertising interactions, and website conversion information where permitted.

Please avoid submitting sensitive personal information unless it is necessary for an agreed service and appropriate safeguards have been established.

3. How I Use Your Information

I use personal information to:

  • Respond to questions and service inquiries.

  • Understand your coaching or consulting needs.

  • Schedule and deliver professional services.

  • Prepare proposals, contracts, invoices, and client documents.

  • Process payments and maintain financial records.

  • Communicate about appointments and ongoing engagements.

  • Provide coaching summaries and agreed deliverables.

  • Send newsletters and marketing communications where permitted.

  • Maintain and improve my website.

  • Understand website traffic and visitor engagement.

  • Measure advertising effectiveness and conversions.

  • Protect my website and business from misuse.

  • Comply with applicable legal, accounting, and tax obligations.

Submitting an inquiry does not automatically subscribe you to marketing communications.

4. Legal Bases for Processing

Where the European Union General Data Protection Regulation (GDPR) applies, I process personal information under one or more of the following legal bases.

Contractual Necessity

To respond to requests before entering into an agreement and provide services you purchase.

Legal Obligations

To comply with applicable tax, accounting, consumer protection, and other legal requirements.

Legitimate Interests

To manage professional communications, maintain appropriate business records, protect website security, and operate my business where those interests are not overridden by your rights.

Consent

For marketing communications, nonessential cookies, analytics, and advertising technologies where consent is required.

You may withdraw consent at any time without affecting processing that was lawful before withdrawal.

5. Website Hosting and Third-Party Services

I use third-party platforms to operate my website and deliver professional services.

Squarespace

My website is hosted through Squarespace. Squarespace provides website functionality, forms, and related services.

Squarespace Email Campaigns

I use Squarespace Email Campaigns to manage newsletter subscriptions, marketing communications, subscriber preferences, and email engagement reporting.

HoneyBook

I use HoneyBook for client inquiries, scheduling, proposals, contracts, electronic signatures, invoicing, payment processing, and client relationship management.

Google Analytics

I use Google Analytics to understand website traffic, visitor interactions, and website performance.

Meta Pixel

I use Meta Pixel for advertising measurement, conversion tracking, and related marketing activities.

Google Ads Tracking

I use Google Ads tracking technologies to measure advertising performance, conversions, and related marketing activities.

Google Meet and Zoom

I use Google Meet and Zoom to conduct online coaching sessions, consultations, and business meetings.

Google Email and Calendar Services

I may use Google services for professional communications, scheduling, and meeting invitations.

These providers may process personal information on my behalf or, for certain activities, as independent data controllers.

Their handling of information is governed by their applicable privacy policies and contractual terms.

Relevant privacy policies include:

6. Cookies and Tracking Technologies

My website uses cookies and similar technologies to support website functionality, understand visitor behavior, and measure advertising performance.

These technologies may include:

Essential Cookies

Necessary for website functionality, security, and requested services.

Analytics Cookies

Used by services such as Google Analytics to understand website traffic and performance.

Advertising Cookies and Pixels

Used by Meta Pixel and Google Ads tracking to measure advertising interactions, conversions, and campaign performance.

Preference Cookies

Used to remember certain website settings and choices.

Where required by applicable law, nonessential analytics and advertising technologies will only be activated after appropriate consent has been obtained.

You may accept, reject, or manage nonessential cookies through the cookie consent controls available on my website.

You may also adjust cookie settings through your browser.

7. Google Analytics

I use Google Analytics to better understand how visitors interact with my website.

Depending on your consent choices and the configuration of the service, Google Analytics may collect information such as:

  • Pages visited and time spent on the website.

  • Device and browser information.

  • Approximate geographic location.

  • Website traffic sources.

  • Interactions with website content.

  • Online identifiers associated with analytics technologies.

I use this information to improve website performance, understand which content is useful, and make informed decisions about my website.

Google's privacy information is available at https://policies.google.com/privacy.

8. Advertising and Conversion Tracking

I use Meta Pixel and Google Ads tracking technologies to understand the effectiveness of my advertising and marketing campaigns.

Depending on their configuration and your consent choices, these technologies may collect or receive information about website visits, interactions, advertising conversions, device information, and online identifiers.

These technologies may also support advertising attribution and remarketing activities.

Where legally required, advertising tracking will only operate after appropriate consent has been obtained.

I do not intentionally submit confidential coaching notes or sensitive client information to advertising platforms.

Information processed by Meta and Google is also subject to their applicable privacy policies and terms.

9. Email Marketing

I use Squarespace Email Campaigns to send newsletters, professional insights, service updates, and marketing communications.

When you subscribe, I may collect your name, email address, subscription preferences, and information about your interaction with marketing emails.

Where required by law, I obtain consent before sending marketing communications.

You may unsubscribe at any time using the unsubscribe link included in marketing emails or by contacting contact@annajohnson.co.

Submitting a coaching or consulting inquiry does not automatically subscribe you to my marketing list.

I do not sell subscriber email lists.

10. Coaching and Consulting Confidentiality

During coaching or consulting engagements, you may share information about your career, professional experiences, workplace challenges, business operations, or personal goals.

I use this information to provide the requested services and maintain appropriate client records.

I treat nonpublic client information as confidential, subject to applicable legal requirements and the terms of any signed service agreement.

I will not publicly identify clients, share private coaching conversations, or publish identifying information in testimonials or case studies without appropriate permission.

Coaching sessions are not routinely recorded. If recording is proposed, I will provide notice and obtain any consent required by applicable law.

11. Bookings, Contracts, and Payments

Client bookings, contracts, invoices, and payments are managed through HoneyBook.

When you book a session or purchase services, information necessary to complete the transaction may be collected and processed through HoneyBook and its payment processing partners.

I may retain transaction details, invoices, signed agreements, and related records as necessary to deliver services, maintain business records, and comply with legal obligations.

I do not directly store complete payment card numbers.

12. Sharing Personal Information

I may share personal information with trusted service providers where necessary to operate my website, manage my business, and deliver professional services.

These providers may include website hosting services, client management platforms, payment processors, email services, scheduling platforms, video conferencing providers, analytics services, and advertising platforms.

I may also disclose information when required by law, lawful legal process, or to protect legitimate legal rights.

I do not sell coaching records or client contact lists to data brokers.

Certain advertising-related disclosures may be considered a sale, sharing, or targeted advertising under applicable US state privacy laws. Where those laws apply, I will provide any legally required notices and opt-out rights.

13. International Data Transfers

I currently operate from Portugal and provide services internationally.

Some third-party service providers may process or store personal information outside Portugal or the European Economic Area, including in the United States.

Where required by the GDPR, international transfers will be subject to appropriate safeguards, such as adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms.

You may contact me for further information about applicable international transfer safeguards.

14. How Long I Keep Your Information

I retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal requirements.

General Inquiries

Information from inquiries that do not become client relationships is generally retained for up to 12 months after the last meaningful communication, unless a longer period is justified.

Client and Coaching Records

Ordinary coaching notes, service communications, and related client records are generally retained for up to three years after the professional relationship ends, unless earlier deletion is appropriate or a longer period is necessary for legal claims or other lawful purposes.

Contracts and Legal Records

Signed agreements and related records may be retained for longer where necessary to comply with legal obligations or address potential disputes.

Financial and Tax Records

Invoices and accounting records are retained for the period required under applicable tax and accounting laws, generally 10 years for relevant Portuguese records.

Email Marketing

Subscriber information is retained while you remain subscribed. Limited suppression records may be kept after unsubscribing to ensure your preferences are respected.

Analytics and Advertising Data

Data is retained according to the relevant platform's configured retention settings and applicable legal requirements.

When personal information is no longer needed, it will be deleted, anonymized, or securely disposed of unless continued retention is legally required.

15. Data Security

I take reasonable technical and organizational measures to protect personal information from unauthorized access, misuse, loss, alteration, or disclosure.

These measures may include using established service providers, appropriate account security, access controls, and limiting access to information necessary for business operations.

No internet-based system can guarantee absolute security.

16. Your Privacy Rights

Where the GDPR applies, you may have the right to:

  • Request access to your personal information.

  • Request correction of inaccurate or incomplete information.

  • Request deletion in certain circumstances.

  • Request restriction of certain processing activities.

  • Object to certain processing activities.

  • Request data portability where applicable.

  • Withdraw consent.

  • Object to direct marketing.

  • Exercise applicable rights concerning automated decision-making.

To exercise your rights, email contact@annajohnson.co.

I may request reasonable information to verify your identity before processing a request.

I will respond within the timeframe required by applicable law, generally within one month for GDPR requests, subject to permitted extensions.

You may also lodge a complaint with the relevant data protection authority.

In Portugal, the supervisory authority is:

Comissão Nacional de Proteção de Dados (CNPD)
https://www.cnpd.pt

17. Additional Privacy Rights for US Residents

Residents of certain US states may have additional rights under applicable state privacy laws, depending on whether those laws apply to my business.

These rights may include requesting access to, correction of, or deletion of personal information, and opting out of certain advertising-related disclosures or targeted advertising.

Requests may be submitted to contact@annajohnson.co.

Any applicable rights, limitations, and exceptions will be assessed under the relevant law.

18. Children's Privacy

My website and professional services are intended for adults aged 18 and older.

I do not knowingly collect personal information directly from children through this website.

If you believe a child has provided personal information without appropriate authorization, please contact me so I can review the situation.

19. External Websites

My website may contain links to third-party websites, social media platforms, booking systems, and other services.

These websites operate under their own privacy policies.

I am not responsible for the independent privacy practices of third-party websites.

20. Changes to This Privacy Policy

I may update this Privacy Policy to reflect changes in my services, website functionality, technology providers, or applicable legal requirements.

The date at the top of this page will indicate when the policy was last updated.

Where required by law, I will provide additional notice of material changes.

21. Contact

If you have questions about this Privacy Policy, how your information is handled, or your privacy rights, please contact:

Anna Johnson
Business Mailing Address: 302 Washington St., #150-7113, San Diego, CA 92103, United States
Current Operating Location: Portugal
Email: contact@annajohnson.co
Website: https://www.annajohnson.co