How We Collect and Use Information
We keep your private information private by
- Not selling your information. You have entrusted the National Council of Young Men’s Christian Associations of the United States of America and its independent and autonomous member associations (collectively “The Y”) with your personal information, and we’re committed to using it wisely. The Y will not sell, share or otherwise transfer your personal information to anyone without your consent.
- Restricting who has access to your information. The Y takes reasonable precautions to restrict access to your Internet account and personal information only by employees who are authorized to have such access for business purposes.
Please refer to this policy regularly. The Y may need to change this policy from time to time to address new issues and reflect changes on our websites or within YMCA branches. We will post material changes on our websites or otherwise notify you and update the “Policy Last Updated” field in the Privacy Revision History at the bottom of this document, so that you will always know our policies regarding what information we gather, how we might use that information, and whether we will disclose that information to anyone.
YMCAs take appropriate administrative, technical, and physical measures to safeguard against unauthorized processing of personal information, and against the accidental loss of, or damage to, personal data. However, The Y cannot provide an absolute guarantee of the security of any of our websites or any other site on the Internet.
This policy applies to the personal information that you provide to The Y, either through our websites and mobile applications or in person at a YMCA branch or program site. This policy does not apply to your use of unaffiliated sites to which our websites link. This policy does not apply to Personal Health Information (“PHI”) collected through the YMCA Diabetes Prevention Program or any other program offered by The Y that requires the collection of PHI or other HIPPA protected information.
We collect the following types of information about you:
The Y collects personally identifiable information (PII) from you when you voluntarily submit such information to us. The collection of PII may occur in person or on a website or mobile application operated, provided or otherwise controlled by The Y. This information may include your name, home address, email address, telephone number, date of birth, demographic information, sex-offender status, membership status, emergency contact information, and other information that we may need to collect in connection with certain events, including but not limited to:
- registration for, or participation in, events, classes, camps, and other activities or programs offered by The Y;
- participation in YMCA Nationwide Membership
- registration for surveys, forums, content submissions, chats, bulletin boards, discussion groups, requests for suggestions, or other services or activities offered on our website;
- answering your inquiries about our websites, organization, membership, or other services or activities;
- registration as a member of The Y
Collection of Photographs
The Y may also collect your photograph, by capturing your image at a YMCA or scanning your personal identification card, for the purpose of identifying you as a member, volunteer or program participant. Your photograph will not be used for any commercial purpose without your authorization, and shall not be retained longer than three years from your last interaction with The Y.
Use and Disclosure of Personally Identifiable Information (PII)
If you do provide us with PII, The Y may contact you based on the information you provide to communicate with you about YMCA activities that may be of interest to you and your family.
The Y will use its best efforts to never disclose any PII about you to any third-party for purposes unrelated to the YMCA without having received your permission except as provided for herein or otherwise as permitted or required under applicable law.
We do not rent or sell PII, including information provided about children, to third-parties. The Y may share PII with trusted service providers, such as payment processors, technology partners or other providers that need access to your information to provide operational or other support services while you are a YMCA member or program participant. In certain circumstances, we may also share information with select similar nonprofit organizations that may offer activities of interest to you.
We may also provide PII to regulatory authorities and law enforcement officials in accordance with applicable law or when we otherwise believe in good faith that the provision of such information is required or permitted by law, such as in connection with the investigation or assertion of legal defenses or for compliance matters.
We ask for certain information such as your username, real name, birthdate, address, phone number and e-mail address when you register for a YMCA account, or if you correspond with us. We may also retain any messages you send through email. We use this information to operate, maintain, and provide to you the features and functionality of the Service. None of this information will be published publicly.
Collection of Payment Transaction Information
When you make a payment or donation, we collect information to process the financial transaction and may use that information to contact you in the future about The Y and its programs. Your payment information is transmitted to us, using a secure Internet method that helps maintain the privacy of this information. During the time your payment information resides on our computers, it is in an encrypted format and can only be accessed by authorized personnel with a decryption key.
Collection of Non-Personally Identifiable Information
We collect non-personally identifiable information without limitation, through the use of the following types of methodology:
- “Cookie” technology: A cookie is an element of data that a website can send to your browser, which may then store it on your system to help enhance your experience in using our sites and to provide us with technical information about your usage.
- IP address tracking: An IP address is a number that is assigned to your computer when you are on the Internet. When you request pages from our Sites, our servers log your IP address.
- Web beacons: A web beacon, or “clear gif,” is a small graphic image on a webpage or web-based document that a website can use to determine information about a user.
Non-personally identifiable information might include the browser you use, the type of computer you use, technical information about your means of connection to our websites (such as the operating systems and the Internet service providers utilized), and other similar information. Our systems may also automatically gather information about the areas you visit and search terms you utilize on our websites and about the links you may select from within the sites to other areas of the World Wide Web or elsewhere online.
Although an industry-standard do-not-track (DNT) protocol has not yet been established, The Y’s information collection and disclosure practices and the choices it offers to consumers will continue to operate as described in this Policy.
Use of Non-Personally Identifiable Information
We use non-personally identifiable information for our purposes related to running YMCAs and their programs, and, in particular, to administering websites, and, in the aggregate, to determine what technologies are being used. We may also share aggregate, non-personally identifiable information with third-parties.
Commercial and marketing communications:
We use the information we collect or receive, such as your email address, to communicate directly with you. We may send you emails containing newsletters, promotions, and special offers. If you do not want to receive such email messages, you will be given the option to opt out or change your preferences. We also use your information to send you Service-related emails (e.g., account verification, purchase and billing confirmations and reminders, changes/updates to features of the Service, technical and security notices).
Use of certain service type information we collect about you:
Collection of Sensitive Information
Where necessary, The Y may collect certain sensitive information from you, including
- payment card or bank account information to process fees or donations;
- health information in connection with various fitness programs, programs in which we are responsible for supervising children, health screenings, or other health service events that we may provide from time to time
Access to sensitive information is tightly restricted to those individuals who have a legitimate need for access. We will not use or disclose your information to third-parties unless such disclosure is necessary to accomplish the purpose for which the information is collected.
Sharing of Your Information
We will not rent or sell your information into third parties outside the YMCA without your consent, except as noted below:
- Who can see User Content: No User Content is made publically available. Only YMCA staff with secure access to philaymca.org can see your information.
- Who can see your IP address: If you post User Content on the Service while not logged in, your IP address will be published with your User Content in order to attribute your contribution to the Service. A selection of Trusted Users with administrative powers on Philaymca.org have the ability to review IP addresses of users to reduce abusive behavior. Any third party service embedded on Philaymca.org such as video provider, social network or other third party will also have access to your IP address.
- Who can see your email address: If you enter an email address, you will enable communication from the YMCA no other parties will have access to your email address.
What happens in the event of a change of control:
We may buy or sell/divest/transfer the organization or any combination of its products, services, assets and/or businesses. Your information such as customer names and email addresses, User Content and other user information related to the Service may be among the items transferred in these types of transactions. We may also sell, assign or otherwise transfer such information in the course of mergers, acquisitions, bankruptcies, dissolutions, reorganizations, liquidations, similar transactions or proceedings involving all or a portion of the Organization.
Instances where we are required to share your information:
Sharing certain service type information we collect about you:
We may share certain service type information, including information obtained through tools such as cookies, log files, device identifiers, location data, anonymous usage data, referring/exit pages and URLs, platform types, number of clicks, etc.): (i) with our third-party business partners for the purposes described in the section above on “How We Collect and Use Information.” We may also aggregate or otherwise strip data of all personally identifying characteristics and may share that aggregated, anonymized data with third parties.
How We Store and Protect Your Information
Storage and Processing:
Keeping your information safe:
The Philadelphia Freedom Valley YMCA cares about the security of your information, and uses commercially reasonable safeguards to preserve the integrity and security of all information collected through the Service. To protect your privacy and security, we take reasonable steps (such as requesting a unique password) to verify your identity before granting you access to your account. You are responsible for maintaining the secrecy of your unique password and account information, and for controlling access to your email communications from the YMCA, at all times. However, the Philadelphia Freedom Valley YMCA cannot ensure or warrant the security of any information you transmit or guarantee that information on the Service may not be accessed, disclosed, altered, or destroyed. Your privacy settings may also be affected by changes to the functionality of third party sites and services that you add to the Philaymca.org Service, such as social networks. The Philadelphia Freedom Valley YMCA is not responsible for the functionality or security measures of any third party.
Compromise of information:
In the event that any information under our control is compromised as a result of a breach of security, the Philadelphia Freedom Valley YMCA will take reasonable steps to investigate the situation and where appropriate, notify those individuals whose information may have been compromised and take other steps, in accordance with any applicable laws and regulations.
Your Choices about Your Information
You control your account information and settings: You may update your account information preferences at any time by logging in to your account and changing your profile settings. You can also stop receiving email communications from us by notifying the YMCA at the Welcome Center or by emailing firstname.lastname@example.org
We make every effort to promptly process all unsubscribe requests. As noted above, you may not opt out of Service-related communications (e.g., account verification, purchase and billing confirmations and reminders, changes/updates to features of the Service, technical and security notices). If you have any questions about reviewing or modifying your account information, you can contact us directly at email@example.com.
Opting out of collection of your information for Tracking / Advertising:
Please refer to your mobile device or browser’s technical information for instructions on how to delete and disable cookies, and other tracking/recording tools. Depending on your type of device, it may not be possible to delete or disable tracking mechanisms on your mobile device. Note that disabling cookies and/or other tracking tools prevents the Philadelphia Freedom Valley YMCA or its business partners from tracking your browser’s activities in relation to the Service. However, doing so will disable many of the features available through the Service including Account Management, Joining the YMCA, making a donation, or registering for a Program. If you have any questions about opting out of the collection of cookies and other tracking/recording tools, you can contact us directly at firstname.lastname@example.org.
How long we keep your private profile information:
Following termination of your User account, Philadelphia Freedom Valley YMCA may retain your private profile information for a commercially reasonable time for backup, archival, or audit purposes.
The Philadelphia Freedom Valley YMCA does not knowingly collect or solicit any information from anyone under the age of 18 or knowingly allow such persons to register as Users. The Service and its content are not directed at children under the age of 13. In the event that we learn that we have collected personal information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child under 13, please contact us at email@example.com
Links to Other Websites and Services
Questions or Concerns? Contact us at the Philadelphia Freedom Valley YMCA at firstname.lastname@example.org
|Version:||Policy Last Updated||Authorized By||Affected Provisions|
|1.06||8/14/2017||Web Master, YMCA Security Officer||Personally Identifiable Data, disclosure of information, and Sensitive Information Collection|