Y Retirement - The lifelong benefit of doing good

Privacy and Security

Effective Date: April 2026

This Privacy Notice (“Notice”) explains how the YMCA Retirement Fund (“Y Retirement”, “Fund”, “we”, “us” or “our”) collects, uses, discloses, and protects personal information. This Notice applies to information collected through our websites, mobile applications, customer service interactions, virtual assistant tools, and through participating employers. “Personal information” means information that (either in isolation or in combination with other available information) enables you to be identified as an individual or recognized directly or indirectly. It would not include aggregate or de-identified information or various types of publicly available information. Examples of “personal information” include the following:

  • Name
  • Date of birth
  • Marital status
  • Mailing address
  • Email address
  • Phone numbers
  • Social security number
  • Employment history
  • Biometric identifiers (voiceprint; fingerprint; facial recognition)
  • Beneficiary information
  • Passwords
  • Answers to security questions
  • IP addresses
  • Customer service recordings
  • Bank account information

Personal information may also include information related to your participation in retirement plans, including account balances, contribution history, and transaction activity. Personal information will be used to access your records, for you to use our website, mobile app and IVA, or for purposes described to you at the point of collection including maintaining participant records, processing contributions, transactions, and distributions (collectively “Services”).

We collect and process personal information only as necessary to administer retirement plans, provide Services, comply with legal obligations, and for other legitimate business purposes described in this Notice.

We maintain a formal cybersecurity program that includes risk assessments, access controls, encryption, system monitoring, and incident response procedures. While we have implemented administrative, technical, and physical safeguards designed to protect personal information , such as the use of two-factor authentication, no system or transmission of data over the internet can be guaranteed to be completely secure. Cybersecurity threats are continually evolving, and unauthorized access may occur despite our efforts. Y Retirement collects general information about visitors in order to analyze visitors’ interests and improve this site. No attempts are made to identify individual visitors unless illegal behavior is suspected. Y Retirement and its third-party service providers monitor network traffic to identify unauthorized attempts to upload or change information or damage this site.

Y Retirement does not sell personal information. We may share personal information with third-party service providers, affiliates, and other parties as necessary to administer the plans, provide Services, comply with legal obligations, or as otherwise described in this Notice. We make every effort to due diligence third-party service providers' safeguards of personal information and obtain confirmation that use of personal information will be limited to authorized purposes. We use cookies and similar technologies on our website and mobile app to enhance user experience, analyze usage, and support security functions. You may manage cookie preferences through your browser settings; however, disabling cookies may affect functionality.

We may contact you by email or text message to provide notices regarding your account, plan participation, required disclosures, and service‑related updates. Where permitted by law, we may also send informational or educational communications.

You may opt out of receiving communications that are not required by law at any time by clicking the “Unsubscribe” link at the bottom of an email subject line or by replying to a text message with “STOP.”

If you choose not to receive required communications by email or text message, such communications will be sent to you by U.S. mail.

We may revise this Notice. If we make material changes, we will notify you as required by law.

USE OF YOUR PERSONAL INFORMATION

We may use the information that we collect or receive about you for various purposes.

a. To Provide You With Our Services.
We use your information to provide you Services with respect to Y Retirement. Your information may be available or provided to third-party service providers that provide Services on behalf of Y Retirement.

b. To Maintain, Improve, and Personalize Our Services.
We use your information for our everyday business operations such as auditing, administration, and analytics. Your information may also be used to improve our Services or to personalize your Services.

c. To Communicate with You.
We use your information to communicate with you. We may also contact you with offerings or other communications that may be of interest to you. You are responsible for timely updating any contact information that you have on file with Y Retirement, including your postal address. If we send you marketing emails, each email will contain instructions permitting you to “opt-out” of receiving future marketing or other communications.

d. For Security Purposes.
Keeping your account safe requires us to process your personal information. We use such information to combat spam, malware, malicious activities, and security risks; improve and enforce our security measures; and monitor and verify your identity so that unauthorized users do not gain access to your information.

e. To Maintain Legal and Regulatory Compliance.
Our Services are subject to certain laws and regulations which may require us to process your personal information. 

f. For Our Business Purposes.
We may use your information for any other purpose disclosed to you at the time we collect or receive the information, or otherwise with your consent. We may share your information with our affiliates (entities that control or are under the control of Y Retirement) for business purposes.

g.  Retention.
We retain personal information for as long as necessary to fulfill the purposes described in this Notice, administer the retirement plans, comply with legal and regulatory obligations, resolve disputes, and enforce agreements. 

TWO-FACTOR AUTHENTICATION TERMS AND CONDITIONS

By logging into your account on yretirement.org, you agree to the YMCA Retirement Fund Two-Factor Authentication Terms and Conditions (“2FA Terms”).

You authorize Y Retirement to communicate with you (directly or through a third-party) by email, text, and/or voice call (as you have selected), to provide you with a single-use verification code to log into your account on yretirement.org. You are responsible for any message or data charges that you incur through the use of 2FA. In addition, you are responsible for timely updating any phone number(s) and email address(es) that you have on file with Y Retirement.

The email, text, or voice call that delivers your verification code is initiated when you log into your account on yretirement.org. If you receive a verification code at any other time or have questions about the security of the verification code that you receive, please immediately contact the Customer Service Department at 800-RET-YMCA (800-738-9622), Monday through Friday from 9:00am to 5:00pm ET.

If you wish to change the method (email, text, or voice call) that you elected for receiving verification codes, log into your account on yretirement.org, go to your Personal Information screen, and update your 2FA “Pick Your Delivery Method” election.

Y Retirement may revise the 2FA Terms. By logging into your account on yretirement.org after such posting, you agree to the current 2FA Terms. 

AI CHAT BOT VIRTUAL ASSISTANT

By interacting with Penny, our virtual assistant, you agree to the terms of use:

  1. Information Accuracy: While our virtual assistant strives to provide accurate and up-to-date information, it may not always reflect the most current data or developments. Y Retirement does not rely on virtual assistant interactions for official account transactions or determinations. Please verify any critical information independently or with a pension representative.
  2. General Support: The virtual assistant is designed to provide general information and support and nothing should be construed as professional, legal or financial advice. Interactions with the virtual assistant may be recorded and used to improve Services, subject to applicable privacy and security safeguards. The virtual assistant is not intended to process or respond to requests involving sensitive personal or account-specific information. Users should not submit such information through this tool.

    For questions specifically about your account, please consult a pension representative. 

  3. User Responsibility: You are responsible for the information you provide during your interactions with the virtual assistant. Please do not share any personal information. 

CONTACT US FOR QUESTIONS OR INFORMATION

If you have any questions or concerns relating to this Notice or our privacy practices please contact us.

YMCA Retirement Fund
1177 Avenue of the Americas, FL 16
New York, NY
10036-2714