Burbank Community YMCA
SECTION I – PRIVACY
This policy applies to the personal information that members provide to our Y, either through our websites and mobile applications or in person at our facility or at a program site. This policy does not apply to members’ use of unaffiliated sites to which our websites link. This policy does not apply to personal health information collected through the Y’s Live Well program or any other program offered by our Y that requires the collection of personal health information or other HIPPA protected information. Collection of Personally Identifiable Information
The Burbank Community YMCA collects personally identifiable information (PII) from members when they voluntarily submit such information to our Y. The collection of PII may occur in person or on a website or mobile application operated, provided or otherwise controlled by the Y. This information may include a member’s name, home address, email address, telephone number, date of birth, demographic information, sex-offender status, membership status, emergency contact information, and other information that we may need to collect in connection with certain events, including but not limited to:
- Registration for, or participation in, events, classes, camps, and other activities or programs offered by the Y
- Participation in YMCA Nationwide Membership
- Registration for surveys, forums, content, submissions, chats, bulletin boards, discussion groups, requests for suggestions, or other services or activities offered on our website
- Answering member inquiries about our websites, organization, membership, or other services or activities
- Registration as a member of the Y
Collection of Photographs
The Y may also collect a member’s photograph, by capturing the member’s image at our Y or scanning a member’s personal identification card, for the purpose of identifying him/her as a member, volunteer or program participant. The photograph will not be used for any commercial purpose without the member’s authorization.
Use and Disclosure of PII
If a member does provide our Y with PII, the Y may contact the member based on the information the member provides to communicate with him/her about YMCA activities that may be of interest to the member and his/her family.
The Y will use its best efforts to never disclose any PII about a member to any third-party for purposes unrelated to the YMCA without having received the member’s permission except as provided for herein or otherwise as permitted or required under applicable law.
The Y does not rent or sell PII, including information provided about children, to third-parties. The Y may share PII with trusted service providers, such as payment processors, technology partners or other providers that need access to a member’s information to provide operational or other support services while he/she is a Y member or program participant.
The Y may also provide PII to regulatory authorities and law enforcement officials in accordance with applicable law or when we otherwise believe in good faith that the provision of such information is required or permitted by law, such as in connection with the investigation or assertion of legal defenses or for compliance matters.
Collection of Payment Transaction Information
When a member makes a payment or donation, the Burbank Community YMCA collects information to process the financial transaction and may use that information to contact the member in the future about the Y and its programs. A member’s payment information is transmitted to our Y, using a secure Internet method that helps maintain the privacy of this information. During the time a member’s payment information resides on our computers, it is in an encrypted format.
Collection of Non-Personally Identifiable Information
The Burbank Community YMCA collects non-personally identifiable information without limitation, through the use of the following types of methodology:
- “Cookie” technology: a cookie is an element of data that a website can send to a member’s browser, which may then store it on his/her system to help enhance his/her experience in using our sites and to provide our Y with technical information about the member’s usage.
- IP address tracking: an IP address is a number that is assigned to a computer when someone is on the Internet. When a member requests pages from our Sites, our servers log the member’s IP address.
- Web beacons: a web beacon, or “clear gif,” is a small graphic image on a webpage or web-based document that a website can use to determine information about a user.
Non-personally identifiable information might include the browser a member uses, the type of computer the member uses, technical information about the member’s means of connection to our websites (such as the operating systems and the Internet service providers utilized), and other similar information.
Although an industry-standard do-not-track (DNT) protocol has not been established, the Y’s information collection and disclosure practices and the choices it offers to consumers will continue to operate as described in this Policy.
Use of Non-Personally Identifiable Information
The Burbank Community YMCA uses non-personally identifiable information for our purposes related to running our Y and its programs, and, in particular, to administering websites, and, in the aggregate, to determine what technologies are being used.
Collection of Sensitive Information
Where necessary, the Burbank Community YMCA may collect certain sensitive information from a member, including:
- Payment card or bank account information to process fees or donations
- Health information in connection with various fitness programs, programs in which we are responsible for supervising children, health screenings, or other health service events that we may provide from time to time
Access to sensitive information is restricted to those individuals who have a legitimate need for access. Our Y will not use or disclose a member’s information to third-parties unless such disclosure is necessary to accomplish the purpose for which the information is collected.
Privacy of Children
The Burbank Community YMCA is mindful that young people need special safeguards and privacy protection. Our Y realizes that we may not understand or be able to meaningfully consent to the provisions of our policy or be able to make thoughtful decisions about the choices that are made available to our adult users. We strongly urge all parents or legal guardians to participate in their children’s exploration of the Internet and any online services and to teach their children about protecting their personal information while online.
To provide the services we offer, our Y sometimes needs to collect certain information about children in both online and offline contexts. If the Y asks for PII from children under 13 in connection with our online services, where required we will comply with the Children’s Online Privacy Protection Act (COPPA), including taking additional steps to protect the privacy of such information, including
- Obtaining verifiable consent form the parent or legal guardian of the child before collecting or using the child’s PII
- Notifying parents about what PII is being requested and how that PII will be used and/or shared, such as through this policy
- Limiting the online collection of PII from children to no more than is reasonably necessary to accomplish the purpose of the collection
- Giving parents a description of and access to the PII our Y has collection from their children
- Maintaining reasonable procedures to ensure the confidentiality, security and integrity of the personal information collected
We may also need to collect certain information about children and minors in an offline context, such as when
- A parent or legal guardian of a minor signs up for a membership including the child at a local YMCA, or for a program or camp we may offer at one of our program sites
- Minors visit our facilities without a membership, where we may collect information about them to be able to contact their parent or legal guardian to notify them of an injury or other issues involving the minor
Links to Other Sites
Users may find other content on our websites that link to the sites and services of other third-parties. The Burbank Community YMCA does not control the content or links appearing on these sites. Third-party sites or services, including their content and links, may be constantly changing and may have their own privacy policies and customer service policies. Our Y encourages our members to review the privacy policies of any third-party sites or services before providing any of them with any personal information.
If a member opts-in to receive information from the Burbank Community YMCA, the member can change his/her mind later. If at any time he/she would like to stop receiving such information or opt out of a feature, the member may change their options by contacting the Burbank Community YMCA. Members should be aware, however, that it is not always possible to completely remove or modify information in our databases and servers, although our Y will make reasonable efforts to do so upon a member’s request.
The Burbank Community YMCA may be required to disclose a member’s information pursuant to lawful requests, such as subpoenas or court orders, or in compliance with applicable laws. We generally do not disclose a member’s information unless we have a good faith belief that an information request by law enforcement or private litigants meets applicable legal standards. Our Y may share a member’s information when we believe it is necessary to comply with applicable laws or to protect our members, interests or property. Nothing herein is intended to limit any legal defenses or objections that a member may have to a third party’s, including a government’s, request to disclose member information.
Personal Data Access and Accuracy
A member may contact the Burbank Community YMCA with inquiries or complaints regarding the use of information about him/her. Our Y will use reasonable efforts to grant reasonable requests to access data about the requester.
We will also make reasonable requests to correct any incorrect or misleading data about the requester.
SECTION II – SECURITY
The Burbank Community YMCA takes appropriate administrative, technical, and physical measures to safeguard against unauthorized processing of personal information, and against the accidental loss of, or damage to, personal data. However, our Y cannot provide an absolute guarantee of the security of any of our websites or any other site on the Internet.
Consent to Transfer
Our website is operated in the United States. If a member is located outside of the United States, he/she must be aware that any information he/she provides to our Y will be transferred to the United States. By using our website, participating in any Y services, and/or providing our Y with information, a member consents to this transfer.
California Privacy Rights
The California “Shine the Light” law permits California residents to annually request and obtain information free of charge about what personal information is disclosed to third-parties for direct-marketing purposes in the preceding calendar year.
Updating Personal Information
A member can update his/her personal information by emailing the Burbank Community YMCA at firstname.lastname@example.org or via a written request mailed to the Burbank Community YMCA. Our Y requests that members do not send Social Security numbers or other sensitive information us our Y via unencrypted email.