Legal

Policies & terms.

The legal documents that govern this website and the coaching relationship. Straightforward, in plain language wherever the law allows it.

§ 01 · Privacy policy

Privacy Policy

Effective date: July 8, 2026  ·  Entity: OnTrack Planning, LLC  ·  Blacksburg, Virginia

OnTrack Planning, LLC (“OnTrack Planning,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect through ontrackplanning.com (the “Site”) and in the course of providing financial coaching services, how we use and share it, and the choices and rights available to you as a Virginia resident.

1. Information we collect

We collect information in three general ways:

Information you give us directly. When you fill out a contact or booking form, schedule a discovery call, subscribe to our email list, or engage us for coaching services, we may collect your name, email address, phone number, and any details you choose to share about your financial situation or goals.

Information collected automatically. Like most websites, the Site may collect technical information such as your IP address, browser type, device information, pages visited, and referring URLs, typically through cookies or similar technologies. See Section 6 below.

Information collected during a coaching engagement. If you become a coaching client, we may collect more detailed financial information — income, expenses, assets, debts, insurance, and similar details — that you provide in order for us to deliver our services. This category may constitute “nonpublic personal information” under the Gramm-Leach-Bliley Act; see Section 5.

2. How we use your information

We use the information we collect to: provide, maintain, and improve the coaching services and this Site; respond to inquiries and schedule appointments; send administrative communications and, where you’ve opted in, newsletters or educational content; personalize and prepare your financial blueprint or coaching plan; comply with legal, regulatory, and recordkeeping obligations; and protect against fraud, unauthorized access, and other misuse.

We do not use your financial information for any purpose beyond delivering the services you’ve engaged us for, and we do not use automated profiling to make decisions that produce legal or similarly significant effects concerning you.

3. How we share your information

We do not sell your personal information, and we do not share it with third parties for their own independent marketing purposes. We may share information with:

Service providers who perform functions on our behalf — for example, scheduling software, email delivery, payment processing, or secure file storage — under obligations to protect your information and use it only as we direct.

Professional advisors such as compliance consultants, accountants, or attorneys, where necessary to operate the practice.

Regulators and legal authorities where required by law, subpoena, or regulatory examination (for example, in connection with SEC or Virginia State Corporation Commission oversight of investment advisory activities).

A successor entity in the event of a merger, acquisition, or sale of some or all of our assets, subject to standard confidentiality protections.

4. Your privacy rights under Virginia law

The Virginia Consumer Data Protection Act (VCDPA) gives Virginia residents certain rights over their personal data, including the right to: confirm whether we process your personal data and access it; correct inaccuracies; request deletion; obtain a portable copy of your data; and opt out of the processing of your data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

You may exercise these rights by contacting us using the information in Section 9. We will respond within the time period required by Virginia law and will not discriminate against you for exercising these rights. If we decline a request, you may appeal by replying to our decision email, and if the appeal is denied, the VCDPA permits you to contact the Office of the Virginia Attorney General.

Note on applicability: financial institutions and data subject to Title V of the Gramm-Leach-Bliley Act are generally exempt from the VCDPA. To the extent OnTrack Planning's handling of your nonpublic personal financial information falls under that exemption, Section 5 below, rather than this Section 4, governs that information — we describe both frameworks here in the interest of transparency.

5. Nonpublic personal information (Gramm-Leach-Bliley Act)

If you are an advisory client, certain financial information you share with us may qualify as “nonpublic personal information” under the Gramm-Leach-Bliley Act and its implementing regulations. Consistent with that framework, we do not disclose nonpublic personal information about current or former clients to nonaffiliated third parties except as permitted by law — for example, to service providers who need it to perform services for us, or as required by regulators or legal process. Where applicable, a more detailed Regulation S-P–style privacy notice will be provided directly to advisory clients at the start of the engagement and annually thereafter.

6. Cookies and similar technologies

The Site may use cookies and similar technologies to remember preferences, understand how visitors use the Site, and support features such as the appointment scheduler. You can control cookies through your browser settings; disabling them may affect some Site functionality. The Site does not currently use cookies for cross-site targeted advertising.

7. Data security

We use reasonable administrative, technical, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Data retention and children’s privacy

We retain personal information for as long as needed to provide our services, meet legal and regulatory recordkeeping requirements (which for investment advisory records can extend several years beyond the end of an engagement), and resolve disputes. The Site is intended for adults and is not directed to children under 13; we do not knowingly collect personal information from children.

9. Contact us

Questions about this Privacy Policy or requests to exercise your privacy rights can be sent to us by using the contact options on our Contact page.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The “Effective date” above reflects the most recent revision. Material changes will be posted on this page.