This privacy policy will advise you about our guidelines concerning the use of your personal information, including the efforts we make to protect your personal information in accordance with these guidelines, and about what choices you have concerning our use of such information. Please read this policy carefully. If you do not agree to this privacy policy, please do not use the Websites (as defined below) or mobile application.

1.0 PRIVACY

We keep your private information private by:

• Not selling your information. You have entrusted the National Council of Young Men’s Christian Associations of the United States of America, and its independent and autonomous member associations, including the YMCA of Western North Carolina (collectively “the Y”), with your personal information, and we're committed to using it wisely. The Y will not sell, share or otherwise transfer your personal information to anyone without your consent.
• Restricting who has access to your information. The Y takes reasonable precautions to restrict access to your internet account and personal information only by employees who are authorized to have such access for business purposes. If you have any questions or concerns about our privacy policy, please contact us at [email protected].

Please refer to this policy regularly. The Y may need to change this policy from time to time to address new issues and reflect changes on our websites or within YMCA locations. We will post material changes on our websites and update the “Last Date Updated” field in the “Revision History” at the bottom of this page so that you will always know our policies regarding what information we gather, how we might use that information, and whether we will disclose that information to anyone. You are responsible for periodically viewing this Privacy Policy to check for any changes. Your use of the app following any such change constitutes your agreement that all information collected from or about you after the revised Privacy Policy is posted will be subject to the terms of the revised Privacy Policy.

Scope of Privacy Policy

This policy applies to the personal information that you provide to the Y, either through our websites (located at: https://ymcawnc.org/, and https://ymcacampwatia.org/) (each, a "Website"), and mobile applications. This policy does not apply to your use of third-party sites to which our websites link (e.g., YouTube, Daxko, third-party childcare service providers, etc.). This policy does not apply to Personal Health Information (“PHI”) collected through the YMCA Diabetes Prevention Program or any other program offered by the Y that requires the collection of PHI or other HIPPA protected information. By using the Website(s), you consent to the personal information practices described in this Privacy Policy including the uses and disclosures of personal information described herein. If you provide information about your child on or through the Website(s) and/or mobile application, then you consent also on behalf of your child, and you represent to us that you are duly authorized to provide such consent on behalf of your child.

Collection of Personally Identifiable Information

The Y collects personally identifiable information (PII) from you when you voluntarily submit such information to us and/or our trusted third-party service providers (e.g., Daxko). The collection of PII may occur on a Website or mobile application operated, provided or otherwise controlled by the Y.

The PII we may collect includes your or your children's:

• name;
• home address;
• email address;
• telephone number;
• date of birth;
• Internet Protocol (IP) address
• demographic information;
• sex-offender status;
• membership status;
• emergency contact information;
• other information that we may need to collect in connection with certain events, and/or
• certain financial information.

The purposes for which we may use your or your children's PII include:

• registration for, or participation in, events, classes, camps, and other activities or programs offered by the Y,
• participation in YMCA Nationwide Membership;
• content submissions, chats, requests for suggestions, or other services or activities offered on our website;
• answering your inquiries about our websites, organization, membership, or other services or activities;
• registration as a member of the Y;
• completing webforms (e.g., photo and video releases); and/or
• completing financial assistance applications for membership, programs and childcare.

If you complete any financial assistance applications, you will need to provide us with certain PII, including uploading financial documents for purposes of income verification. We will retain this information for the duration of processing your application by our business center. Once your application has been processed, we will delete the information you provided on the application and any financial documents you submitted.

Collection of Photographs, Audio Recordings, and Video Recordings

The Y may also collect your photograph, by capturing your image at a YMCA or scanning your personal identification card, for the purpose of identifying you as a member, volunteer, or program participant. Such images will not be used for any commercial purpose without your authorization, and shall not be retained longer than three years from your last interaction with the Y. The Website(s) may grant you the ability to complete a webform to provide us with your authorization to collect photographs, audio recordings, and video recordings of you. You may also provide us with authorizations on behalf of your children under the age of 18, by completing a webform for such video recording, photograph and audio recording release. If you submit a webform authorizing the Y to collect photographs, audio recordings, and video recordings, we will retain it and the PII it carries until you withdraw your authorization by contacting us at [email protected] or 828-251-5910.

The Y may collect photographs, audio recordings, and video recordings of members, guests, visitors, volunteers, and participants at events, classes, camps, and other activities or programs offered by the Y. In addition to completing a webform authorizing the Y to collect photographs, audio recordings, and video recordings, you acknowledge and agree that by entering Y facilities, or by registering for a Y program or event, you are granting the Y and its authorized representatives permission to use any and all collected photographs and recordings as part of any future printed or digital materials and communications to promote the Y, and further that such use shall be without payment of fees, royalties, special credit, or other compensation.

Use and Disclosure of PII

If you provide us with PII, you acknowledge and agree that the Y may contact you based on the information you provide to communicate with you about YMCA activities that may be of interest to you and your family.

The Y will use its best efforts to never disclose any PII about you to any third-party for purposes unrelated to the YMCA without having received your permission except as provided for herein or otherwise as permitted or required under applicable law.

We do not rent or sell PII, including information provided about children, to third-parties. The Y may share PII with trusted service providers, such as payment processors (e.g., Daxko), technology partners, or other providers (e.g., Google) that need access to your information to provide operational or other support services while you are a Y member or program participant and to perform statistical or other analyses associated with the design and delivery of the Y’s services and communications. The Y provides certain PII to Google Analytics to conduct statistical and other analyses with respect to its services and communications. The PII provided to Google Analytics may include: your name, address, phone number, email address, age, marital status, parental status, membership status, information about your participation in programs provided by the Y, and other demographic information. This information is used to measure traffic and usage trends for the Y's services and programs, understand the demographics of our members and program participants, identify the services and programs you express interest in, determine the effectiveness of our marketing and communication efforts, and identify other information that assists us in analyzing and improving the Y's services, programs, marketing and communications. We may also combine or aggregate your information with information of other members and program participants in performing our statistical analyses. If possible and appropriate, we will de-identify information of our members and program participants prior to processing it in connection with our statistical analyses.

We may also provide PII:

• to regulatory authorities and law enforcement officials in accordance with applicable law;
• when we otherwise believe in good faith that the provision of such information is required or permitted by law, such as in connection with the investigation or assertion of legal defenses or for compliance matters;
• to enforce our rights arising from any contracts entered into between you and us; and
• if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Y, our members, our employees, or others.

We may disclose aggregated and de-identified information about our users, without restriction.

Collection of Payment Transaction Information

You may be able to make certain payments on or through the Website(s). We use a third-party service, provided by Daxko, as a payment intermediary service to process credit and debit card transactions ("Payment Processor"). When you make a payment or donation, our Payment Processor will collect information to process the financial transaction. We may use the non-financial portion of such information to contact you in the future about the Y and its programs. The Y does not request or store any of your financial information, such as your bank routing or account numbers, or your debit or credit card account numbers.

Collection of Non-Personally Identifiable Information

Non-personally identifiable information might include:

• the browser you use;
• the type of computer or mobile device you use;
• technical information about your means of connection to our Websites and/or mobile application (such as the operating systems and the internet service providers utilized); and/or
• other similar technical information about your device(s).

Our Website(s) and/or mobile application may also automatically gather information about the areas you visit and search terms you utilize on our Website(s) and about the links you may select from within the Website(s) to other areas of the internet or elsewhere online.

The Y's Website(s) and/or mobile application do not currently respond to Do Not Track (DNT) signals. However, you may be able to reduce or avoid tracking of your activities across our Website(s) and/or mobile application by utilizing "incognito mode," "anonymous mode" or such similar functionality on the browser you use to access our Website(s).

Use of Non-Personally Identifiable Information

We use non-personally identifiable information for our internal business purposes related to running YMCAs and their programs, and, in particular, to administering Website(s), and, in the aggregate, to determine what technologies are being used so that we may better provide our Website(s) and services to our members and users of our Website(s) and/or mobile applications. We may also share aggregate, non-personally identifiable information with third-parties.

We collect non-personally identifiable information without limitation, through the use of the following types of methodology:

• "Cookie" technology:  A cookie is an element of data that a website can send to your browser, which may then store it on your system to help enhance your experience in using our sites and to provide us with technical information about your usage.
• Web beacons: A web beacon, or “clear gif,” is a small graphic image on a webpage or web-based document that a website can use to determine information about a user.

We use cookies on our Website(s) to identify you when you return to our Website(s). We do not sell, rent, trade, or share any information we collect through cookies. Cookies generally fall into four categories:

1. Strictly necessary cookies
2. Performance/statistical/analytics cookies
3. Functionality/preference cookies; and
4. Behaviorally targeted advertising/marketing cookies.

We use certain first-party performance/statistical/analytics cookies to better understand our users, the return rate of users and the performance of our Websites. Specifically, our Websites use the following cookies:

Almost all web browsers allow you to verify which cookies are present on your device, block cookies, or receive notifications when a cookie is set. You can also set cookie preferences proactively on all browsers and devices used. Additionally, you can reset your preferences whenever you clear your cache or cookies.

Below are links informing you of methods offered by some popular browsers which allow users to express their options regarding the use of cookies:

Google Chrome: https://support.google.com/chrome/answer/95647?hl=en&co=GENIE.Platform%3DDesktop

Apple Safari:

https://support.apple.com/guide/safari/manage-cookies-sfri11471/16.1/mac/13.0

Mozilla Firefox:

https://support.mozilla.org/en-US/kb/websites-say-cookies-are-blocked-unblock-them#w_check-cookie-settings

Microsoft Edge:

https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09

Collection of Sensitive Information

Where necessary, the Y may collect certain sensitive information from you, including:

• certain financial information and documents to verify your and/or your household income, if you complete certain financial assistance applications for membership, programs and childcare; and
• health information in connection with various fitness programs, programs in which we are responsible for supervising children, health screenings, or other health service events that we may provide from time to time.

Access to sensitive information is restricted to those individuals who have a legitimate need for access. Additionally, we implement practices, procedures, and/or measures designed to secure your sensitive information from accidental loss and from unauthorized access, use, alteration, and disclosure, that are appropriate for the nature of the sensitive information. We will not use or disclose your sensitive information to third-parties unless such disclosure is necessary to accomplish the purpose for which the information is collected. We will also delete your sensitive information once the purpose for which the information was collected has been fulfilled, unless retention of such sensitive information is required or permitted by applicable law.

Privacy of Children

• Our Website(s) and/or mobile application are directed to adults (at least 18 years of age). If you are under the age of 18, do not use or provide any information on or through this Website and/or mobile application, or provide any information about yourself or an individual under the age of 18. If your child is under the age of 13, it is solely your responsibility to ensure your child does not access or use the Website without your supervision and consent. We do not knowingly permit anyone under the age of 13 to submit PII to us and do not knowingly collect or solicit any information from anyone under the age of 13. If your child is under the age or 13, we also do not knowingly allow such persons to register as member without your authorization and consent. In the event that we learn that we have collected PII directly from a child under the age of 13, we will delete that information as quickly as possible. If you believe that we might have collected any information from a child under 13, please contact us at [email protected].

Links to Other Sites

Users may find other content on our websites that link to the sites and services of other third-parties (e.g., YouTube, Daxko, third-party childcare service providers, etc.). We do not control the content or links appearing on these sites. Third-party sites or services, including their content and links, may be constantly changing and may have their own privacy policies and customer service policies. We encourage you to review the privacy policies of any third-party sites or services before providing any of them with your personal information. If you disclose your personal information to third-parties on the Website or other websites on the internet, you do so at your own risk as different rules may apply to their use or disclosure of such information, which is governed by their privacy policies and/or terms of use.

Choice/Opt-Out

If you opt-in to receive promotional information from us, you can change your mind later. If at any time you would like to stop receiving such information or opt out of a feature, you may change your options by contacting [email protected]. Additionally, if you receive any promotional information from us by email, you may opt-out of receiving such promotional emails in the future by clicking the "unsubscribe" or “update your preferences” link at the bottom of such email. You should be aware, however, that it is not always possible to completely remove or modify information in our databases and servers, although we will make reasonable efforts to do so upon your request, and we are unable to have your information removed from the records of any third-party who has been provided with your information in accordance with this policy. We will continue to email you regarding program registration, payment of fees, and in case of emergency.

Personal Data Access and Accuracy

You may contact the Y with inquiries or complaints regarding the use of information about you. We will use reasonable efforts to grant reasonable requests to access data about the requester. We will also make reasonable requests to correct any incorrect or misleading data about the requester.

2.0 SECURITY

YMCAs take appropriate administrative, technical, and physical measures to safeguard against unauthorized processing of personal information, and against the accidental loss of, or damage to, personal data. However, the Y cannot provide an absolute guarantee of the security of any of our websites or any other site on the internet. Unfortunately, the transmission of information via the internet and mobile platforms is not completely secure. Although we do our best to protect your PII, we cannot guarantee the security of your PII transmitted through our Website(s) and/or mobile application. Any transmission of PII is at your own risk. We are not responsible for circumvention of any privacy settings or security measures we provide.

The safety and security of your information also depends on you. When you create or access your member account, or create an account to access the mobile application (each, an "Account"), you may be prompted to provide your email address associated with your membership, and password. We are not responsible for any loss or damage arising from your failure to maintain the confidentiality of your password. Where you have chosen a password for access to your Account, you are responsible for keeping this password confidential. With respect to your Account, you are responsible for any activity that occurs under your Account. We ask you not to share your password with anyone. If you have reason to believe that your Account is no longer secure or believe it is being used by an unauthorized party, you will inform us immediately and comply with any instructions or requests we provide.

Consent to Transfer

YMCA websites are operated in the United States, and the Y's Website(s) and mobile applications are directed to residents of the United States, primarily towards residents of the State of North Carolina. If you are located outside the United States, please be aware that any information you provide to the Y on or through the Website(s) and/or mobile application will be transferred to the United States. By using the Website(s) and/or mobile application, participating in any services of the Y, and/or providing us with your information, you consent to transfer your information to the United States.

California Privacy Rights

The California “Shine the Light” law permits California residents to annually request and obtain information free of charge about what personal information is disclosed to third-parties for direct-marketing purposes in the preceding calendar year. The Y does not distribute your personal information to outside parties for their direct marketing without your consent.

Updating Your Personal Information

You can update your personal information by emailing us at [email protected] or via a written request mailed to: YMCA of WNC, 40 N. Merrimon Ave., Suite 309, Asheville, NC 28804. Please do not send Social Security Numbers or other sensitive information to us via unencrypted email.

If you have any questions about this policy, please contact [email protected].

External Privacy Notice Revision History

Version 2.0
​​​​​​​Last updated 7/30/25

ND:4887-0544-8846, v. 2