Collect less. Use it narrowly. Protect it seriously.
Newport Ski Swap Volunteer Management System ("VMS") is an operational system for the Newport Ski Swap volunteer program. Its purpose is to support registration, scheduling, attendance, communications, volunteer-hour records, safety, account access, and legitimate administration of the event.
Volunteer information is not a product. We do not sell it, rent it, trade it, or provide it to advertisers or data brokers. We do not use it to build advertising audiences or profiles about your activity outside the volunteer program.
Our standard is purpose limitation: information should be collected only when there is a real operational, security, recordkeeping, or accountability reason for VMS to have it. Access should be limited to people who need it for those purposes.
We do not make money from your data.
Volunteer information is not sold, rented, licensed, or exchanged for advertising value.
No cross-site ad profiling.
VMS is not intended to follow volunteers around the web or create marketing audiences.
Access must have a reason.
Administrative access is for operating, securing, supporting, and documenting the volunteer program.
Only information connected to running the program.
VMS may hold information you provide directly, information created as you participate in the volunteer program, and limited technical information needed to keep the service secure and working.
- Account and contact information, such as your name, email address, phone number, volunteer account details, and sign-in information.
- Volunteer participation information, such as registration choices, assigned roles or shifts, schedules, groups, attendance, check-in and checkout activity, and volunteer hours.
- Program communications and administrative records, such as messages, support activity, recognition, feedback, conduct or account-standing records when those features are used.
- Security and system information, such as authentication events, device or browser information, IP address, timestamps, and audit records needed to protect the service and investigate problems.
VMS is not designed to collect payment-card information, advertising interests, browsing histories from unrelated websites, or other information that has no reasonable connection to the volunteer program.
If there is no legitimate volunteer-program reason, we should not be using it.
Information in VMS may be used to:
- create and secure volunteer accounts;
- manage registrations, schedules, roles, assignments, attendance, groups, and volunteer hours;
- send necessary volunteer, schedule, account, safety, and event communications;
- support volunteers and resolve registration, attendance, account, or record problems;
- maintain accurate operational, safety, accountability, and administrative records;
- detect abuse, investigate security events, troubleshoot failures, and protect VMS from unauthorized access; and
- improve the reliability, accessibility, and usability of the volunteer system.
We do not repurpose volunteer information for unrelated commercial marketing simply because the information is available to us.
Security is a requirement, not a privacy-policy slogan.
VMS uses encrypted web connections and layered application, session, access-control, and auditing safeguards. We design the service around reducing unnecessary exposure instead of assuming any single security control is enough.
Depending on the feature, safeguards may include:
- Encrypted transport for browser connections to the service.
- One-way protection of passwords and security credentials rather than storing readable passwords.
- Role-based and need-based access controls for administrative functions and records.
- Session and request protections intended to reduce account theft, forged requests, and unauthorized access.
- Security and administrative audit trails so important actions can be reviewed when something goes wrong.
- Redaction and exposure controls for sensitive values where the system logs operational or security activity.
No internet service can honestly promise zero risk. We can promise the standard we aim for: minimize what is collected, restrict who can access it, protect credentials, keep useful auditability, and correct weaknesses when they are found.
We should not keep information forever just because storage is cheap.
We retain information only for as long as it remains reasonably necessary for volunteer operations, official records, safety, security, accountability, dispute resolution, or legitimate administrative needs.
Retention is not identical for every record. Short-lived security information may expire quickly, while volunteer-hour records, attendance history, or administrative audit records may need to remain available after the event.
When information no longer has a legitimate purpose, it should be deleted, expired, anonymized, or otherwise removed from active use where reasonably practical. Some records may retain limited historical history when deleting that history would undermine the integrity of an official, security, or accountability record.
You should be able to challenge inaccurate information about you.
Volunteers can use available VMS account tools to review information made available through the portal, including profile, schedule, attendance, or volunteer-record information where those features are provided.
If information is wrong, incomplete, or associated with the wrong person, contact the Newport Ski Swap volunteer administration team and request a review or correction. We may need to verify identity before changing or disclosing account information.
Some security, audit, conduct, attendance, or official-record history may not be directly editable by a volunteer. That does not mean it is beyond review; it means corrections may need to be made through an accountable administrative process that preserves record integrity.
Student information deserves the same rules — with extra restraint.
Newport Ski Swap includes student volunteers as well as adult volunteers and leads. Student information is collected for participation in the volunteer program, not for commercial profiling, advertising, or unrelated marketing.
We aim to limit student information to what is reasonably necessary for registration, scheduling, attendance, volunteer-hour records, communications, safety, account access, administration, and security. Access to student records should be limited to authorized people with a legitimate program need.
The policy should follow the system — not hide from changes to it.
We may update this Privacy Policy when VMS features, security practices, service providers, legal obligations, or data-handling practices materially change. The effective date at the top identifies the current version.
We do not want a privacy policy that sounds protective while describing an older version of the system. Material changes to how volunteer information is handled should be reflected here in clear language.
Ask us what we hold or tell us when something is wrong.
Questions about this policy, your VMS account, inaccurate information, access concerns, or how volunteer information is handled can be directed to the Newport Ski Swap volunteer administration team through VMS support or the event's normal contact channels.
Privacy concerns should be treated as real operational issues. If you believe information is being accessed, used, exposed, or retained in a way that conflicts with this policy, please report it so it can be reviewed.