Play Action International Privacy Notice – October 2022

To download a PDF version of this Privacy Notice please click here.

To download our exclusion statement for our IATI data publishing please click here.


Play Action International (charity number 1172875) is a UK registered charity. Our fundraising activities are carried out the UK with our charitable activities taking place in Uganda. Throughout this Policy we refer to ourselves as “PAI” “we” or “us”.

This Privacy Policy applies to the personal information of our staff, trustees, existing and prospective donors, fundraisers, volunteers, corporate and trust supporters and university and Students Union partners. It explains why we collect personal information, how we will use it and who we will share it with. For the purposes of data protection law, Play Action International is the “data controller” in respect of the personal information covered by this Policy.

Play Action International respects your privacy and takes our obligations under data protection law seriously. We hope that this Policy will provide you with the information you require. However, if you have further questions about the way we use your personal information please contact us using the details below:

What data do we collect?

When you get in touch with us to join our volunteering projects, fundraise, make a donation, request information or otherwise support PAI’s work we will collect information about you. The information we collect may include your name, title, email address, home or work address, date of birth, telephone number(s), and if you represent a prospective organisational supporter, information on your organisation’s activities or areas of interest. In some instances (such as joining our volunteering projects) additional information may be required to support your specific activities, including health information, passport details and next of kin details.

Why do we collect your data? 

PAI collects and processes personal information in order to carry out and support fundraising activities and events, and to deliver our volunteering projects. This means that we may use the personal information we collect for the following purposes:

In order to ensure the information held is up-to-date and accurate, we may use publicly available sources to verify internal records.


Personal information may be collected by us in the following ways:

We do not buy data from external or third-party sources. However, we may obtain information about you from other sources. This includes where a business contact, friend or family member contacts us on your behalf because they think you would be interested in supporting our work.

We may also collect and combine your information with publicly available information so that we can tailor the communications we send you and to make sure they are relevant to you. We also use this information to ensure we contact people who are more likely to be interested in supporting our fundraising activities and donating to us.

When you visit our website, we use cookies to facilitate and improve your experience of our website. For a list of the cookies used, see Appendix 1. You can choose to delete cookies on your computer or device at any time. However, you may lose any info that enables you to access our site more quickly and effectively, including but limited to, log in and personalisation settings.


Data protection law requires us to have a legal basis for using your personal information. The legal basis will, in almost all circumstances, be one of the following:


PAI will only send you direct marketing communications by email or text if you have given unambiguous and explicit ‘Opt-in’ consent for us to do so (unless you fall into the ‘corporate subscriber’ category[1] and it is in our legitimate interests to contact you).

You will be provided with the option to ‘unsubscribe’ from all our direct marketing communications. You can also withdraw your consent by contacting:


We take steps to ensure that your personal information is only retained for only as long as it is necessary for the purpose it was collected. After this period, it will be deleted or in some cases anonymised. If we collected the personal information based on your consent and we have no other legal basis to continue using your information, if you subsequently withdraw your consent, then we will delete your personal and contact information, although we may keep your name on file to ensure you are not re-added to our database in error. 


Play Action International works with various third-party suppliers and providers to support with the delivery of our activities, including online giving platforms such as Just Giving and Virgin Money Giving, payment processing companies GoCardless and Stripe, and our website provider Raising IT. We will receive your personal information from these third-parties where you have agreed that the information can be shared with us. In these instances, you are advised to consult other sites’ privacy notices as we have no control over information that is submitted to, or collected by, these third parties.

In some situations, we may need to share your personal information with other third parties. If we do share your data, we will ensure we have the agreement of organisations or individuals beforehand to follow our data protection requirements and this privacy notice. These situations may include:


During the delivery of our international volunteering projects in Uganda, we work with in-country activity providers to provide extension trips and weekend activities for our participants. As we are restricted in transferring data outside the EU, we will not share your data with these third parties. If you choose to share your data with these providers when taking part in a trip or activity, please be aware that we have no control over information that is submitted to, or collected by, these third parties. In these instances, you are advised to consult their own privacy notices.


Data protection law gives you certain rights in relation to your personal information. These include: (in certain circumstances) the right to object to and / or withdraw consent to the processing of your personal information, the right to access to your personal information, and the ability to erase, restrict or receive a machine-readable copy of your personal information.

We will handle any request to exercise your rights in accordance with applicable law. This means there may be certain situations in which we are not legally required to comply with your request. If you wish to exercise any of these rights please refer to the “Contact Us” section of this privacy policy.


We may change this Privacy Policy from time to time (for example, if the law changes). Any changes will be immediately posted on our website and you will be deemed to have accepted the terms of the Privacy Policy on your first use of our website following the alterations. We recommend that you check this page regularly to keep up-to-date.


Questions and comments regarding this policy should be sent to:

If you have a complaint or concern about how we have handled your personal information, please contact us in the first instance. We will work hard to resolve your concerns, however, if you are still not satisfied you can lodge a complaint with the Information Commission’s Office (the data protection regulator in the UK).


The following cookies are used on our website, which is hosted by Raising IT. The list below spells out what cookies are used, what data is collected and when they expire.

Cookie NameUsed byDescriptionExpiration
__utmaGoogle AnalyticsStores the number of visits of a user, the time of their first visit, the previous visit, and the current visit. It does not contain any personal information and is used only for analytical purposes.  2 years from set/update
_utmzGoogle AnalyticsThis performance cookie stores where a user came from (eg. search engine, search keyword, link).6 months from set/update
_ga and _gidGoogle AnalyticsUsed to distinguish between website users in Google Analytics.2 years and 2 hours
_gat_UA-XXXXXXXX-X (where the Xs are replaced by the Google Analytics ID number)Google AnalyticsUsed to moderate calls to the Google Analytics service.1 minute
__unamShareThisSet as part of the ShareThis service and monitors “click-stream” activity, e.g. web pages viewed, navigation from page to page, time spent on each page etc. The ShareThis service only identifies a user if they have separately signed up with ShareThis for a ShareThis account and given them consent. Checks how long you stay on a site: when a visit starts, and ends. It does not contain any personal information and is used only for analytical purposes.14 months
cc_cookie_acceptWebsiteStores whether the user has accepted the cookie message or not.365 days
ASP.NET_SessionIdWebsiteUsed for authenticating a user’s session after logging in. Closes when you exit the browser.End of session
ARRAffinityWebsiteTells our infrastructure which server to handle the request.End of session
MemberLoggedInWebsiteA binary flag which stores whether a user is logged in or not.End of session
ai_session and ai_userWebsiteTracks users as they navigate the website predominately for infrastructure performance insights.1 day
DisplayNameWebsiteKeeps track of a donor’s preference to show their name during a Direct Debit.End of session
Facebook PixelWebsiteThe Facebook pixel is an analytics tool that allows advertisers to measure the effectiveness of their advertising by understanding the actions people take on a website. They can use pixel data to:·       Make sure ads are being shown to the right peopleBuild advertising audiences·       Unlock additional Facebook advertising tools Further information is available at: 
Snapchat PixelWebsiteThe Snap Pixel is a piece of JavaScript code that helps advertisers measure the cross-device impact of campaigns. Advertisers will be able to see how many Snapchatters take action on their website(s) after seeing their ad. Further information is available at 

[1] ‘Corporate subscriber’ refers to organisations, or individuals representing them who are companies as defined by the Companies Act 1985, companies incorporated in pursuance of a royal charter or letters patent, corporations sole, partnerships in Scotland, and any other corporate body or entity (including charities) which is a legal person distinct from its members.