YMCA BC Privacy Policy for Digital learning Products
Effective Date: December 1st, 2025
The YMCA of British Columbia (“we”, “us”, “our”) is committed to protecting the privacy of all individuals who access our digital platforms, including our Learning Management System (LMS), online courses, webinars, and digital products (together, the “Services”).
We collect, use, and disclose personal information in accordance with British Columbia’s Personal Information Protection Act (PIPA) and, where applicable, Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
This Privacy Policy explains what information we collect, how we use it, and the choices you have.
1. Information We Collect and How We Use It
We collect personal information only for purposes that are reasonable and necessary to deliver our Services.
a. Information You Provide
When you subscribe, register, make a purchase, or access a course, we collect information you provide directly, including:
- Name
- Email address
- Payment information (processed through third-party providers)
- Any information provided during course activities, surveys, or support requests
We use this information to:
- Provide access to courses and digital content
- Communicate transactional updates (e.g., registrations, renewals, deadlines)
- Send service notifications, product updates, and marketing emails (if you consent)
- Improve the delivery and quality of our Services
b. LMS Usage and Learning Data
When you use our LMS or digital learning tools, we collect information such as:
- Course enrolments and completion data
- Progress tracking and quiz scores
- Login dates and times
- Browser type, device type, OS version, and IP address
- General usage analytics
This helps us:
- Deliver course content effectively
- Track your progress
- Support your learning experience
- Improve course quality and system performance
c. Automatically Collected Information (Cookies & Tracking)
We use cookies and similar technologies to:
- Recognize your device
- Maintain secure sessions
- Personalize content
- Gather analytics to understand usage patterns
We may use third-party analytics tools that collect anonymous usage data.
You may disable cookies through your browser, though some features may not work properly.
2. Consent
We collect, use, or disclose your personal information only with your consent or as otherwise permitted by law.
You provide implied consent when you:
- Register for Services
- Make a purchase
- Participate in a course
- Provide information voluntarily
We will request express consent for purposes such as:
- Receiving marketing communications
- Using your information for a new purpose not previously identified
Withdrawing Consent
You may withdraw your consent at any time, subject to legal or contractual restrictions, by contacting us at: [email protected]
3. Disclosure of Personal Information
We may disclose your information:
- When required by law (e.g., court order, investigation)
- To service providers that assist in delivering our Services
- To complete transactions (e.g., payment processing)
- In a merger, acquisition, or organizational restructuring
We do not sell or rent personal information.
All service providers are required to protect your information and use it only to provide contracted services.
4. Payment Processing
We use third-party payment processors such as Stripe or PayPal.
- Payments are encrypted and processed according to PCI-DSS security standards.
- We do not store your full credit card details on our servers.
- Payment information is retained only as long as necessary to complete your transaction.
Please review the privacy policies of payment providers to understand how they handle your data.
5. Third-Party Services & International Storage
Some service providers used to support our digital Services may operate outside of Canada.
This means your information may be stored or processed in another country and subject to the laws of that jurisdiction (e.g., the United States Patriot Act).
We take reasonable steps to ensure that service providers:
- Use strong security protections
- Limit access to necessary purposes only
- Comply with PIPA regarding the protection of personal information
When you leave our website or LMS by clicking a third-party link, their policies apply.
6. Safeguards & Security
We use administrative, technical, and physical safeguards to protect your information from loss, theft, misuse, unauthorized access, disclosure, alteration, or destruction.
Measures include:
- SSL encryption
- AES-256 storage encryption
- Secure access controls
- Compliance with PCI-DSS standards
- Limited internal access on a need-to-know basis
No method of transmission or storage is fully secure, but we follow industry best practices.
7. Retention of Personal Information
We retain personal information only as long as necessary to:
- Fulfill the purposes for which it was collected
- Meet operational or legal requirements
When information is no longer required, it is securely deleted or anonymized.
8. Your Rights Under BC PIPA
You have the right to:
- Request access to your personal information
- Request corrections to inaccurate information
- Ask how your information has been used or disclosed
- Withdraw consent (unless legal obligations require otherwise)
- Raise concerns about how your information is handled
To exercise any of these rights, contact our Privacy Officer.
9. Age of Majority
By using our Services, you confirm that:
- You are at least the age of majority in your province or territory, or
- You are a parent/guardian providing consent for a minor dependent to use our Services
Our Services are not intended for children under 13, and we do not knowingly collect information from them without parental consent.
10. Changes to This Policy
We may update this Privacy Policy periodically. Changes take effect immediately upon posting.
If material changes are made, we will notify users on our website or through email.
11. Contact Information & Privacy Officer
For questions, access requests, corrections, complaints, or withdrawal of consent, please contact: