Privacy Policy

PRIVACY NOTICE

This privacy notice will advise you about our guidelines concerning the use of your personal information, including the reasonable efforts we make to protect your personal information in accordance with these guidelines, and about what choices you have concerning our use of such information. Please read this notice carefully.

1.0 PRIVACY

We keep your private information private by:

Not selling your information. You have entrusted the Young Men’s Christian Association of Greater Long Beach (LBYMCA) with your personal information, and we're committed to using it wisely. The Y will not sell, share, or otherwise transfer your personal information to anyone without your consent.

Restricting who has access to your information. The Y takes reasonable precautions to restrict access to your Internet account and personal information only to employees who are authorized to have such access for business purposes. If you have any questions or concerns about our privacy policy, please contact us at privacy@lbymca.org

Please refer to this policy regularly. The LBYMCA may need to update this policy periodically to address new issues and reflect changes on our websites or within YMCA branches. We will post material changes on our websites or otherwise notify you and update the “Last Date Updated” field in the “Revision History” at the bottom of this page so that you will always know our policies regarding what information we gather, how we might use that information, and whether we will disclose that information to anyone.

California residents have specific rights under the California Consumer Privacy Act (CCPA), as amended by the CPRA. These include the right to know what personal data we collect, the right to request deletion or correction, the right to opt out of the sale or sharing of your personal data, and the right to limit the use of sensitive personal information. To exercise these rights, please email us at privacy@lbymca.org. 

Scope of Privacy Policy

This policy applies to the personal information you provide to the LBYMCA, whether through our websites and mobile applications, or in person at a YMCA branch or program site. This policy does not apply to your use of unaffiliated sites to which our websites

While the LBYMCA is not a covered entity under HIPAA, we recognize the sensitive nature of health-related information and strive to protect it through privacy and security best practices. In specific programs involving wellness assessments, medical forms, or childcare services, we adhere to applicable standards to protect personal health information.

Collection of Personally Identifiable Information

The Y collects personally identifiable information (PII) from you when you voluntarily submit such information to us. The collection of PII may occur in person or on a website or mobile application operated, provided, or otherwise controlled by LBYMCA. This information may include your name, home address, email address, telephone number, date of birth, demographic information, confirmation of compliance with safety protocols, including sex offender registry checks, membership status, emergency contact information, and other information that we may need to collect in connection with certain events, including but not limited to:

• registration for, or participation in, events, classes, camps, and other activities or programs offered by the LBYMCA;

• registration for surveys, forums, content submissions, chats, bulletin boards, discussion groups, requests for suggestions, or other services or activities offered on our website;

• answering your inquiries about our websites, organization, membership, or other services or activities;

• registration as a member of the LBYMCA; and

• contributions made to the LBYMCA

Collection of Photographs

The Y may also collect your photograph, by capturing your image at a YMCA or scanning your personal identification card, for the purpose of identifying you as a member, volunteer or program participant. Your photograph will not be used for any commercial purpose without your authorization.

Use and Disclosure of Personally Identifiable Information (PII)

If you provide us with PII, the LBYMCA may contact you based on the information you provide to communicate about YMCA activities that may be of interest to you and your family.

The Y will use its best efforts to never disclose any PII about you to any third-party for purposes unrelated to the YMCA without having received your permission except as provided for herein or otherwise as permitted or required under applicable law.

We do not rent or sell PII, including information provided about children, to third parties. The LBYMCA may share PII with trusted service providers, such as payment processors, technology partners or other providers that need access to your information to provide operational or other support services while you are a YMCA member or program participant. All shared data is transmitted securely. We will not share your personal information with unaffiliated third-party organizations for marketing or promotional purposes without your explicit consent.

We may also provide PII to regulatory authorities and law enforcement officials in accordance with applicable law or when we otherwise believe in good faith that the provision of such information is required or permitted by law, such as in connection with the investigation or assertion of legal defenses or for compliance matters.

Collection of Payment Transaction Information

When you make a payment or donation, we collect information to process the financial transaction and may use that information to contact you in the future about the LBYMCA and its programs. Your payment information is transmitted to us, using a secure Internet method that helps maintain the privacy of this information. During the time your payment information resides on our computers, it is in an encrypted format.

Collection of Non-Personally Identifiable Information

We collect non-personally identifiable information without limitation, through the use of the following types of methodology:

“Cookie” technology: A cookie is a small piece of data that a website can send to your browser, which may then store it on your system to help enhance your experience using our sites and to provide us with technical information about your usage.

IP address tracking: An IP address is a unique number assigned to your computer when you are connected to the Internet. When you request pages from our Sites, our servers log your IP address.

Web beacons: A web beacon, or “clear GIF,” is a small graphic image on a webpage or web-based document that a website can use to determine information about a user.

Non-personally identifiable information may include the browser you use, the type of computer you use, technical information about your means of connection to our websites (such as the operating system and the Internet service provider used), and other similar information. Our systems may also automatically gather information about the areas you visit and the search terms you use on our websites, as well as the links you select from within the sites to other areas of the World Wide Web or elsewhere online.

Although an industry-standard do-not-track (DNT) protocol has not yet been established, the LBYMCA’s information collection and disclosure practices and the choices it offers to consumers will continue to operate as described in this Policy. You may manage your cookie preferences through your browser settings or opt out of tracking cookies where applicable. For more information on how we use cookies and similar technologies, or to opt out of tracking, visit our Cookie Settings page.

Use of Non-Personally Identifiable Information

We use non-personally identifiable information for our purposes related to running YMCAs and their programs, specifically to administer websites, and, in the aggregate, to determine the technologies being used. We may also share aggregate, non-personally identifiable information with third parties.

Collection of Sensitive Information

Where necessary, the LBYMCA may collect certain sensitive information from you, including:

• payment card or bank account information to process fees or donations;

• health information in connection with various fitness programs, programs in which we are responsible for supervising children, health screenings, or other health service events that we may provide from time to time; and

• access to sensitive information is restricted to those individuals who have a legitimate need for access and is protected by encryption and multi-factor authentication.

We will not use or disclose your information to third-parties unless such disclosure is necessary to accomplish the purpose for which the information is collected.

Privacy of Children

If we collect personal information online from children under the age of 13, we will comply with the Children’s Online Privacy Protection Act (COPPA) by obtaining verifiable parental consent before any data collection. Parents will be informed about what information is collected and how it is used. They will have access to review, delete, or restrict the use of that data. Offline data collection (e.g., during program registration or emergency contact information) is limited to what is reasonably necessary and is handled with strict confidentiality.

Links to Other Sites

Users may find other content on our websites that links to the sites and services of other third parties. We do not control the content or links appearing on these sites. Third-party sites or services, including their content and links, may be subject to frequent changes and may have their own privacy policies and customer service policies. We encourage you to review the privacy policies of any third-party sites or services before providing any of them with your personal information.

Choice/Opt-Out

If you opt in to receive information from us, you can change your mind later. If at any time you would like to stop receiving such information or opt out of a feature, you may change your options by clicking either the ‘Manage Email Preferences’ or ‘Unsubscribe From This List’ at the bottom of one of our emails, or by emailing privacy@LBYMCA.org. You should be aware, however, that it is not always possible to completely remove or modify information in our databases and servers, although we will make reasonable efforts to do so upon your request, and we are unable to have your information removed from the records of any third-party who has been provided with your information in accordance with this policy. 

We retain personal information only as long as necessary to fulfill the purposes outlined in this policy unless a longer retention period is required by law or organizational policy. We regularly review data retention periods and securely delete or anonymize data that is no longer needed.

Lawful Requests

We may be required to disclose your information pursuant to lawful requests, such as subpoenas or court orders, or in compliance with applicable laws. We generally do not disclose your information unless we have a good faith belief that an information request by law enforcement or private litigants meets applicable legal standards. We may share your information when we believe it is necessary to comply with applicable laws or to protect our members, interests or property. Nothing herein is intended to limit any legal defenses or objections that you may have to a third party’s, including a government’s, request to disclose your information.

Personal Data Access and Accuracy

You may contact the LBYMCA with inquiries or complaints regarding the use of information about you. We will use reasonable efforts to grant reasonable requests to access data about the requester.

We will also make reasonable requests to correct any incorrect or misleading data about the requester.

2.0 SECURITY

YMCAs take appropriate administrative, technical, and physical measures to safeguard against unauthorized processing of personal information and against the accidental loss of or damage to personal data. We implement a combination of administrative, technical, and physical safeguards to protect your personal information. These include encrypted transmissions, secure servers, multi-factor access controls, and regular employee

Consent to Transfer

YMCA websites are operated in the United States. If you are located outside of the United States, please be aware that any information you provide to the LBYMCA will be transferred to the United States by using YMCA websites, participating in any YMCA services, and/or providing us with your information, you consent to this transfer.

Updating your Personal Information

You can update your personal information by accessing our line membership system (Manage My Account), emailing us at privacy@lbymca.org, or submitting a written request to: YMCA Privacy Department, 4801 Airport Plaza Drive, Ste 400, Long Beach, CA 90815. Please DO NOT send Social Security numbers or other sensitive information to us via unencrypted email.

3.0 LEGAL DISCLOSURES

Data Breach Notification

In the event of a data breach that involves your personal information, the LBYMCA will notify affected individuals as required by applicable state and federal laws. We will provide timely notice that includes the type of information involved, what we are doing in response, and guidance on how you can protect yourself. If more than 500 California residents are affected, we will also notify the California Attorney General as required.

California Consumer Privacy Act (CCPA/CPRA)

California residents have specific rights under the California Consumer Privacy Act (CCPA), as amended by the CPRA. These include the right to know what personal data we collect, the right to request deletion or correction, the right to opt out of the sale or sharing of your personal data, and the right to limit the use of sensitive information. You can submit a request by emailing privacy@lbymca.org.

Your Rights Over Your Personal Information

As a YMCA member or participant, you have the right to:

• Access the personal information we have collected about you

• Request correction of any inaccurate or incomplete information

• Request deletion of your personal data, subject to legal and operational limitations

• Limit the use and disclosure of sensitive personal information

• Opt out of having your information shared for certain purposes

To exercise any of these rights, please contact us at privacy@lbymca.org or write to YMCA of Greater Long Beach, Attn: Chief Operations Officer, 4801 Airport Plaza Drive, Ste 400, Long Beach, CA 90815. We will verify your identity before processing your request and respond within the timeframe required by law.