YMCA of Columbia-Willamette
Privacy Policy
Last updated: October 13, 2025
This Privacy Policy (the “Policy”) explains how the YMCA of Columbia-Willamette and its affiliates (collectively, “The Y,” “we,” or “us”) collects, stores, uses, creates, and discloses personal information, including when you:
-
Become a member or register for our programs.
-
Make a donation or volunteer with us.
-
Use our websites, applications, or other digital services, like free Wi-Fi in our facilities.
-
Visit our facilities or engage with us in the community.
-
Interact with us online, including on social media platforms.
This Policy does not apply to employees or job applicants.
Please read this Policy to understand how we handle your personal information and how you can exercise your privacy rights. If you have questions about our Policy, privacy practices, or any concerns regarding how we process your personal information, please contact us at privacy@ymcacw.org or using our online form.
1. Personal Information We Collect and Process
The Y collects information about you in a number of ways. We collect information from the following sources:
-
We collect personal information directly from you, such as when you become a member or register for our programs.
-
We collect personal information automatically from you using <<Cookies and Similar Technology>> [anchor link to Cookies and Similar Technology section below] when you visit our website, use our applications, or engage with our emails.
-
We collect personal information from others. For example, from time to time, we may get information from members, volunteers, public sources, community partners, or vendors who assist us with fundraising and marketing.
Finally, we may create personal information or make inferences about you, such as the programs or classes you may want to join. This personal information includes:
-
Identifiers such as your real name, account name, alias, username, postal address, unique personal identifier, unique online identifier, IP address, email address, or other similar identifiers.
-
Credentials, including your online account password.
-
Demographic information, such as information about your gender identity, age range, school district, socio-economic background, race or ethnicity, or marital status.
-
Professional and employment-related information, such as your current employer and job title.
-
Education information, such as information about your academic qualifications or information about the schools our members attend.
-
Membership information, including when your membership started or if your membership is on hold.
-
Volunteer information, such as the events you’ve volunteered at, your hours, and specialized skills.
-
Donor information, such as history of your contributions or your giving interests.
-
Criminal background, such as your sex-offender status or criminal history, if we are required to run a criminal background check by law or by our policies. We do not conduct criminal background checks without your authorization.
-
Content, such as information you provide us in a survey, reviews you post online, or prayer or consult requests you submit.
-
Health and wellness data, such as your engagement with various fitness programs, information about your physical status or activities you share with our trainers, health information we may gather when you sign up for membership, health data we collect when we provide childcare services, or health information we may gather if you participate in our community health programs.
-
Financial information, such as your income bracket or other information that helps us determine your eligibility for certain programs or informs our fundraising.
-
Payment information, such as a credit card number you use to sign up for a program or membership.
-
Your preferences, interests, and affiliations, such as the fitness programs you enjoy, your membership choices, camps you attend, program attendance or participation, your church affiliation, your school, and the people who share your membership.
-
Communications, such as when you send us email or engage with us directly on social media platforms.
-
Audio, electronic, visual, or similar information, including voicemail recordings you leave for us, security video we may record at our facilities, or photographs or video taken at our events.
-
Device information, such as information we automatically collect about your operating system, browser, device, or connection when you use our website or Wi-Fi.
-
Internet activity and digital interactions, such as the information we automatically collect about your visit to our websites, your use of our apps, or your engagement with our emails using Cookies and Similar Technology (section below) which assign unique identifiers. Such information may include:
-
Date and time of your visit to our websites and duration of your visit,
-
Date and time of your use of our Wi-Fi and the duration of that use,
-
Your traffic patterns, use patterns, and clickstreams on our website,
-
Your IP address and the quality of your connection,
-
The website from which you linked to our website, and
-
Information about the features and functionality you use on our websites and/or applications.
-
To learn more about information we automatically collect, please see the Cookies and Similar Technology section below.
From time to time, depending on our interactions, we may we collect personal information that qualifies as “sensitive” under certain privacy laws. We use this information to support our community goals and provide our programs and services. For example:
-
In response to a survey or when you sign up for a membership, you may choose to share information with us that reveals your racial or ethnic background, sexual orientation, or status as transgender or nonbinary.
-
If you register for our events, you may choose to provide information that reveals a physical condition to request accommodations.
-
We may inquire about your criminal history, depending on our interactions and the programs you choose.
-
We gather information about children to provide many of our services and programs. Such information may include health history, vaccination status, photos, demographic information, education information, or information we create in the course of providing our programs. For example, we may record an injury that occurred or when a child has passed a swim test.
-
We may record information about incidents, injuries, or accidents as needed to manage our facilities, protect you and others, meet our obligations, or for other legitimate purposes.
The Y may create and process de-identified personal information. Data in this state cannot be used to infer information about, or otherwise be linked to, a particular individual. Unless allowed under applicable law, we will maintain such information in a de-identified state and will not try to re-identify the individual.
2. How We Use Your Personal Information
We use your information for a variety of purposes, including to provide community programs, manage our memberships, operate our website, and engage with donors. For example, we use your information, to:
-
Manage memberships. We use personal information to manage membership, facilitate billing and payments, communicate member benefits, and provide support.
-
Categories of Personal Info Used:
-
Identifiers
-
Credentials
-
Demographic information
-
Education information
-
Membership information
-
Criminal background
-
Health and wellness data
-
Financial information
-
Payment card information
-
Your preferences, interests, and affiliations
-
Communications
-
Audio, electronic, visual, or similar information
-
-
-
Provide community programs, services, and events. We use personal information to deliver our programs, serve our community, and organize events. For example, we use registration data to limit access to events or programs with capacity limits; we use health and wellness data to help members achieve their fitness goals, at member’s direction; and we use contact information to remind you of classes you signed up to join.
-
Categories of Personal Info Used:
-
Identifiers
-
Credentials
-
Demographic information
-
Professional and employment-related information
-
Education information
-
Membership information
-
Volunteer information
-
Donor information
-
Criminal background
-
Content
-
Health and wellness data
-
Financial information
-
Payment information
-
Your preferences, interests, and affiliations
-
Communications
-
Audio, electronic, visual, or similar information
-
Device information
-
Internet activity and digital interactions
-
-
-
Operate our facilities. We use personal information to provide access to our facilities, operate our Wi-Fi, and maintain the health and safety of our guests, members, and community.
-
Categories of Personal Info Used:
-
Identifiers
-
Education information
-
Membership information
-
Volunteer information
-
Donor information
-
Criminal background
-
Content
-
Health and wellness data
-
Financial information
-
Payment information
-
Your preferences, interests, and affiliations
-
Communications
-
Audio, electronic, visual, or similar information
-
Device information
-
Internet activity and digital interactions
-
-
-
Provide, protect, and improve our websites, applications, and digital services. For example, when you visit our website, we may collect personal information, such as cookie identifiers, to measure our audience, determine if you’ve been to our website before, and determine how long you stay.
-
Categories of Personal Info Used:
-
Identifiers
-
Credentials
-
Your preferences, interests, and affiliations
-
Content
-
Communications
-
Device information
-
Internet activity and digital interactions
-
-
-
Seek donations, grants, and funding and manage relationships with benefactors. We may process financial or payment card information if you donate to our organization. We may contact you to share information about our progress, needs in our community, or upcoming events.
-
Categories of Personal Info Used:
-
Identifiers
-
Credentials
-
Demographic information
-
Professional and employment-related information
-
Education information
-
Membership information
-
Volunteer information
-
Donor information
-
Financial information
-
Payment information
-
Your preferences, interests, and affiliations
-
Communications
-
Audio, electronic, visual, or similar information
-
-
-
Digital communications. We use your information to share information about our programs and services, including by sending our newsletters, inviting you to events, or engaging with you on social media. We may send text messages to communicate during weather events or to remind you of events you registered to attend.
-
Categories of Personal Info Used:
-
Identifiers
-
Demographic information
-
Membership information
-
Volunteer information
-
Donor information
-
Your preferences, interests, and affiliations
-
Communications
-
Audio, electronic, visual, or similar information
-
Device information
-
Internet activity and digital interactions
-
-
-
Facilitate billing and process payments. We process your information to collect membership fees or processes your contributions.
-
Categories of Personal Info Used:
-
Identifiers
-
Membership information
-
Donor information
-
Financial information
-
Payment information
-
Device information
-
Internet activity and digital interactions
-
-
-
Research and analyze our community, community needs, and our impact. We may aggregate personal information to understand trends in our community and the impact we make.
-
Categories of Personal Info Used:
-
Identifiers
-
Demographic information
-
Your preferences, interests, and affiliations
-
Content
-
Communications
-
-
-
Consider you for employment or volunteer positions with The Y. We gather information to assess your skills and consider you for employment or volunteer positions.
-
Categories of Personal Info Used:
-
Identifiers
-
Professional and employment-related information
-
Education information
-
Commercial information
-
Communications
-
-
-
Protect our rights and property, as well as those of our users or others, and prevent harm.
-
Categories of Personal Info Used:
-
All categories of personal information
-
-
-
Detect and prevent fraud or violations of our policies or community guidelines.
-
Categories of Personal Info Used:
-
All categories of personal information
-
-
In carrying out these purposes, we combine information we collect from different contexts and/or sources to provide you a more seamless and personalized experience, to make informed decisions, and for other legitimate purposes.
As described above, depending on our interactions, some of the information we collect may qualify as “sensitive” under certain applicable privacy laws. We only collect such sensitive information as necessary to reach our community goals, understand our impact, assess need in our community, and for other legitimate purposes.
3. When We Share Your Personal Information
We share your information with others in a variety of circumstances, with various categories of recipients. We share or provide others with access to your information with your consent, at your direction, or to complete any transaction or request you have authorized as outlined in the chart below. See the tables below for more information on the types of third parties we share your information with, the types of personal information shared with those third parties, and why.
Our use of certain third-party cookies as described in the Cookies and Similar Technology section may constitute a ‘sale’ of your personal information for monetary or other valuable consideration. You may opt-out as described below.
We share your information with others for legitimate business purposes or as necessary as outlined below.
Schools
Why: We share information with schools to facilitate programs that serve students. For example, we may share information about registrants in an after-school camp to coordinate transportation or report incidents involving students.
- Categories of Personal Information Shared
-
Identifiers
-
Demographic information
-
Health and wellness data
-
Service Providers
Why: We share your information with third parties, such as our vendors, suppliers, or other professional services firms that provide us with services or work on our behalf for the purposes described herein. This may include our cloud service providers, support staffing services, or data analytics providers. In such cases, these companies must abide by our requirements and are not allowed to use personal information they receive from us for any other purpose beyond providing us with their respective services.
- Categories of Personal Information Shared
-
Identifiers
-
Demographic information
-
Health and wellness data
-
Volunteers
Why: We may share personal information with volunteers as necessary for them to carry out various activities. For example, volunteers may require access to registration data if they are helping to assist us with an event.
- Categories of Personal Information Shared
- Identifiers
- Demographic information
- Membership information
- Donor information
- Health and wellness data
- Communications
Advertising, Marketing, and Data Analytics Providers
Why: We hire advertising, marketing, and data analytics providers to place cookies on our website to gather information on our behalf.
We use the information collected by these third parties for the purposes described herein. These third parties may also use your information for their own purposes as well.
- Categories of Personal Information Shared
-
Identifiers
-
Your preferences, interests, and affiliations
-
Device information
-
Internet activity and digital interactions
-
YMCA affiliates
Why: We may share your information with YMCA affiliates to facilitate your membership privileges, recognize your contributions, protect the health and safety of you and others, and for other legitimate purposes.
- Categories of Personal Information Shared
-
All categories of personal information
-
Law enforcement, public health officials, healthcare providers, other non-profits, officials, authorities, or any other third-party, as necessary
Why: We might disclose your information to a third party, without your consent and without notice to you if we are required to do so by law. We may also disclose your information to a third party if we have a reasonable belief (1) we are legally or ethically obligated to do so, (2) such disclosure is necessary to protect, establish, or exercise our legal rights or defend against legal claims, or (3) the disclosure is necessary to protect our / your / others’ rights, property, health and/or safety.
- Categories of Personal Information Shared
-
All categories of personal information
-
Other professionals
Why: We may share your information with attorneys, accountants, or other professionals as necessary for legitimate business purposes.
- Categories of Personal Information Shared
-
All categories of personal information
-
4. Your Rights and Control of Your Personal Information
Privacy laws provide individuals with specific rights regarding their personal information. Depending on the jurisdiction in which you reside you may have some or all of the following rights and choices regarding your information.
-
The right to be informed or to know. You may have the right to be informed of how we process your information. For example, you may have the right to be informed or to know:
-
The categories of personal information we collect and process about you.
-
The categories of sources for the personal information we collect and process about you.
-
The purposes for collecting or processing that personal information.
-
The categories of personal information shared or disclosed to third parties, the categories of those third parties, as well as the purposes of such sharing or disclosure.
-
-
The right to access. You may have the right to access or view the personal information we process about you.
-
The right of data portability. You may have the right to request a copy of your personal data in electronic format and the right to transmit that personal data for use in another service.
-
The right to correct. You have the right to request that The Y correct any of your personal information.
-
The right to delete. You have the right to request that The Y delete any of your personal information that we collect from you or process, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and notify any relevant third parties to delete) your personal information, unless an exception applies.
-
You may have the right to know whether your personal information is used for “profiling,” utilizing automated decision-making in furtherance of decisions that produce legal or similarly significant effects. The Y does not engage in such profiling or uses of automated decision-making technology.
-
The right to opt-out, opt-in, or control certain uses of personal information. You may have the right to limit our use of your personal information, opt-out of certain processing of personal information, or opt-in to the processing of certain categories of information. For example, you may have the right to limit our use of your sensitive personal information and to opt-out of targeted advertising.
-
The right to not be discriminated against for exercising your privacy rights.
-
The right to appeal our response to your privacy inquiry or report privacy concerns to your state Attorney General or other privacy authority. To appeal our response, please email privacy@ymcacw.org and include ‘appeal’ in the subject line. We will approve or deny the appeal within 45 days after receiving the request and notify you in writing of our decision and the reasons for the decision.
-
The right to know if your data is sold. As described in Section 3 above, The Y’s use of third-party cookies may constitute a ‘sale’ of personal information.
You can exercise your rights, as well as make choices regarding The Y’s collection and processing of your information through various methods and tools. For example, you can:
-
Contact us. If you would like to exercise your privacy rights or have questions about our Policy or privacy practices, please contact us privacy@ymcacw.org.
-
Use browser controls. Most browsers provide settings to control your interactions with cookies, which will impact the information processed by cookies on our digital properties. Please refer to your browser for information on how to access these settings. Your settings may impact your experience with our digital properties and the functionality available to you.
-
Unsubscribe. With each marketing communication, you will be given the opportunity to opt-out of receiving future marketing notices. You may also opt-out of receiving future marketing notices by contacting us at privacy@ymcacw.org. If you request that we not contact you for marketing purposes (either by using the unsubscribe mechanism or by sending us an email), we reserve the right to contact you for non-marketing purposes.
-
Update your Cookie Preferences. You can update your cookie preferences at any time on our website. To access our cookie control mechanism, select the padlock symbol on the bottom of our website.
You, or someone legally authorized to act on your behalf, may make a request to exercise your rights related to your personal information. We may ask that you:
-
Provide sufficient information that allows us to reasonably verify you or your authorized representative’s authority to act on your behalf. Where possible, we will attempt to verify your identity by only using we have previously collected from you, such as an e-mail address. DO NOT SEND US SENSITIVE PERSONAL INFORMATION, such as a social security number or picture of photo ID, in your initial request to exercise any rights.
-
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and/or confirm the personal information relates to you.
We will confirm receipt of any request to exercise your rights and respond to a verifiable consumer request promptly. If we require more than 45 days to respond to your request, we will inform you of the reason and extension period in writing.
We will deliver our written response by mail or electronically, at your option.
The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personally information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
5. Cookies and Similar Technology
Our websites, applications, and emails use cookies and similar technology to automatically collect personal information about your device, internet activity, and digital interactions. Cookies are small files placed on your device to store information, often consisting of a unique personal identifier, for a variety of purposes. Web beacons are small tags placed in digital content, for example on a website or email, to track how the user interacts with the content. Such interaction will trigger a transfer of information that can be used to gain insight, such as how many people have viewed the content.
Our website uses cookies and similar technology for a variety of different purposes, including to:
-
Assist you in navigating between pages of the websites efficiently, keep you logged in, and remember your preferences.
-
Remember information so that you will not have to re-enter it during your visit or the next time you visit the websites.
-
Understand how visitors navigate our website and engage with our content.
-
Provide custom, personalized content, and information on our websites or emails.
-
Target digital ads on other sites and services and monitor the effectiveness of those ads.
-
Engage in digital communications and measure the effectiveness of our campaigns.
-
Monitor the performance and effectiveness of our websites.
-
Diagnose or fix technology problems on our websites.
We hire others, such as security vendors, analytics service providers, and advertising companies, to gather information on our behalf using cookies on our website. We use the information collected by these third parties for the purposes described herein. These third parties may also use your information for their own purposes. For example, a marketing or advertising provider may use data collected from cookies to gather information about your online activities over time, combining data collected from our website and from websites and apps that we do not control or operate.
We use Google Analytics to get information about website traffic, Google Maps to help you find our facilities, Google Tag Manager for advertising purposes, and YouTube to serve video content on the website. Go here to learn how Google processes your data collected using cookies, here to opt-out of Google Analytics, here to learn about YouTube’s approach to privacy, and here for the Google Privacy Checkup. The following providers also collect data on our website, which may be used for their own purposes in accordance with their privacy policies: HotJar (web analytics, see Privacy Policy and information on opting out) and Microsoft (forms and surveys, see Privacy Statement and information on opting out).
To learn more, please see the Section Your Rights and Control of Your Personal Information above for information on controlling cookies and similar technology.
6. Children’s Personal Information
We process the personal information of children, teens, and minors. As described above, we offer family memberships, youth programs, and services, like childcare and after school activities, which require us to process information about children. Parents and guardians may share children’s information with us in these contexts, and we may collect personal information from children to operate our services and meet our obligations. We process children’s personal information in accordance with applicable law. If any parent or guardian believes we have collected children’s personal information without their consent, please contact us at privacy@ymcacw.org.
7. Securing your Information
We use reasonable administrative, technical, and physical measures to protect the confidentiality, integrity, and security of the personal information we process. Unfortunately, no electronic network or methods of transmitting data over the Internet can be guaranteed to be 100% secure. As a result, we cannot guarantee the confidentiality, integrity, and security of the personal information we process.
8. Retention and Storage
We consider the following factors when determining how long we retain and store your information:
-
Our legal and contractual obligations,
-
Our professional and ethical responsibilities,
-
The purpose for which your information was collected or processed,
-
Your requests to delete the information,
-
Retention periods in applicable laws and regulation, and
-
Our legitimate business purposes. We may retain your data to the extent it is necessary to prevent fraudulent activity, to protect ourselves against liability, and to allow us to enforce our contractual or other rights and to pursue available remedies and limit any damages we might sustain.
The Y stores personal information in the United States.
9. Links to Third-Party Websites, Products, and Services
This Privacy Policy applies only to the information The Y collects and processes. Our websites, apps, our content, and our communications may contain links to other websites and services that are not owned or controlled by us. We are not responsible for and have not reviewed the privacy practices of such sites or services, or the owners or operators of such sites or services. We shall not be responsible or liable in any way as a result of your use of any other sites or services.
Our websites or apps may enable social sharing features and other integrated tools, which let you share data with third parties or on other digital platforms. The use of such features enables the sharing of information with your friends or the public, depending on the settings you establish with the entity that provides the social sharing feature. For more information about the third party and scope of the third party’s data collection and processing in connection with social sharing features, please review the third party’s privacy policy providing these features.
10. Updates
We may revise this Policy at any time to enhance transparency. We may also update the Policy, as necessary or as useful, in response to (1) changes in applicable laws, regulations, or standards (2) changes to our processing of personal information or (3) changes to our business operations. For example, we may modify the Policy if a new applicable law requires additional notices or if we intend to collect new categories of personal information. We will post any revised Privacy Policy here and provide a “Last Updated” date at the top of this Privacy Policy. In some cases, we might provide you with additional notice (such as by adding a Policy to the homepage our Site). We encourage you to review this Policy regularly to stay informed about our processing of personal information, your rights, and your choices.
11. Contact Us
If you have any questions about this Privacy Policy or the use of your information, please contact us at:
YMCA of Columbia-Willamette
Association Services Office
601 SW 2nd Avenue, Suite 110
Portland, OR 97204