Policies & terms.

Privacy Policy

Effective date: August 25, 2026  ·  Entity: OnTrack Planning, LLC  ·  Blacksburg, Virginia

OnTrack Planning, LLC (“OnTrack Planning,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect through ontrackplanning.com (the “Site”) and in the course of providing financial coaching services, how we use and share it, and the choices and rights available to you as a Virginia resident.

1. Information we collect

We collect information in three general ways:

Information you give us directly. When you fill out a contact or booking form, schedule a discovery call, subscribe to our email list, or engage us for coaching services, we may collect your name, email address, phone number, and any details you choose to share about your financial situation or goals.

Information collected automatically. Like most websites, the Site collects technical information such as your approximate location, browser type, device information, pages visited, and referring URLs, through cookies and similar technologies, including Google Analytics. See Section 6 below.

Information collected during a coaching engagement. If you become a coaching client, we may collect more detailed financial information — income, expenses, assets, debts, insurance, and similar details — that you provide in order for us to deliver our services. This category may constitute “nonpublic personal information” under the Gramm-Leach-Bliley Act; see Section 5.

2. How we use your information

We use the information we collect to: provide, maintain, and improve the coaching services and this Site; respond to inquiries and schedule appointments; send administrative communications and, where you’ve opted in, newsletters or educational content; personalize and prepare your financial blueprint or coaching plan; comply with legal, regulatory, and recordkeeping obligations; and protect against fraud, unauthorized access, and other misuse.

We do not use your financial information for any purpose beyond delivering the services you’ve engaged us for, and we do not use automated profiling to make decisions that produce legal or similarly significant effects concerning you.

3. How we share your information

We do not sell your personal information, and we do not share it with third parties for their own independent marketing purposes. We may share information with:

Service providers who perform functions on our behalf — for example, scheduling software, email delivery, payment processing, secure file storage, or web analytics (see Section 6) — under obligations to protect your information and use it only as we direct.

Specifically, for the email sign-up forms on this Site (the newsletter subscribe box in the footer, the Homeschool Families quickstart, and the Resources page subscribe form), we use Cloudflare, Inc. to verify that a submission comes from a real visitor rather than an automated bot — a brief, privacy-preserving challenge (“Turnstile”) that evaluates technical signals like your browser and device, not the content you typed — and to operate the underlying process that receives your submission. We use Notion Labs, Inc. to securely store the email address, the source form, and the page URL associated with your submission. Both act as service providers on our behalf, are bound to use this information only to provide these functions, and do not use it for their own independent marketing purposes. See Cloudflare’s Privacy Policy and Notion’s Privacy Policy for more detail.

Professional advisors such as compliance consultants, accountants, or attorneys, where necessary to operate the practice.

Regulators and legal authorities where required by law, subpoena, or regulatory examination (for example, in connection with SEC or Virginia State Corporation Commission oversight of investment advisory activities).

A successor entity in the event of a merger, acquisition, or sale of some or all of our assets, subject to standard confidentiality protections.

4. Your privacy rights under Virginia law

The Virginia Consumer Data Protection Act (VCDPA) gives Virginia residents certain rights over their personal data, including the right to: confirm whether we process your personal data and access it; correct inaccuracies; request deletion; obtain a portable copy of your data; and opt out of the processing of your data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

You may exercise these rights by contacting us using the information in Section 9. We will respond within the time period required by Virginia law and will not discriminate against you for exercising these rights. If we decline a request, you may appeal by replying to our decision email, and if the appeal is denied, the VCDPA permits you to contact the Office of the Virginia Attorney General.

Note on applicability: financial institutions and data subject to Title V of the Gramm-Leach-Bliley Act are generally exempt from the VCDPA. To the extent OnTrack Planning’s handling of your nonpublic personal financial information falls under that exemption, Section 5 below, rather than this Section 4, governs that information — we describe both frameworks here in the interest of transparency.

5. Nonpublic personal information (Gramm-Leach-Bliley Act)

If you are an advisory client, certain financial information you share with us may qualify as “nonpublic personal information” under the Gramm-Leach-Bliley Act and its implementing regulations. Consistent with that framework, we do not disclose nonpublic personal information about current or former clients to nonaffiliated third parties except as permitted by law — for example, to service providers who need it to perform services for us, or as required by regulators or legal process. Where applicable, a more detailed Regulation S-P–style privacy notice will be provided directly to advisory clients at the start of the engagement and annually thereafter.

6. Cookies and similar technologies

The Site uses cookies and similar technologies to remember preferences, understand how visitors use the Site, and support features such as the appointment scheduler.

We use Google Analytics, a web analytics service provided by Google LLC, to help us understand Site traffic — for example, which pages are viewed, how long visitors stay, what device or browser they’re using, and the general geographic region a visit originates from. This information is aggregated and is not used to identify you personally. Google acts as a service provider on our behalf and processes this data consistent with the Google Privacy Policy. We do not use Google Analytics’ advertising features (such as Google Signals or remarketing), and the Site does not use cookies for cross-site targeted advertising or sell your personal information.

You can control or disable cookies — including those used by Google Analytics — through your browser settings, or by installing the Google Analytics Opt-out Browser Add-on. Disabling cookies may affect some Site functionality, such as the appointment scheduler.

7. Data security

We use reasonable administrative, technical, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Data retention and children’s privacy

We retain personal information for as long as needed to provide our services, meet legal and regulatory recordkeeping requirements (which for investment advisory records can extend several years beyond the end of an engagement), and resolve disputes. The Site is intended for adults and is not directed to children under 13; we do not knowingly collect personal information from children.

9. Contact us

Questions about this Privacy Policy or requests to exercise your privacy rights can be sent to us by using the contact options on our Contact page.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The “Effective date” above reflects the most recent revision. Material changes will be posted on this page.