Paisley Art Institute (PAI) Privacy Policy

The PAI uses cookies on this website. By using this website you are agreeing to our use of cookies. To find out more read our cookie policy and privacy policy.

The PAI promises to take great care with your personal data, and we commit to protecting any personal information we obtain about you, whether you are visiting our website as a supporter, Member or funder.

This Privacy Policy sets out how and why we obtain, use and protect personal information.

1. Who we are

We are an unincorporated association of members founded in 1876.

The Paisley Art Institute (PAI) is an unincorporated association registered charity in Scotland (charity number SC000840.

This privacy policy applies to all of our activities.

The Paisley Art Institute (PAI) registered office address is c/o Unit 33, Sir James Clark Building, Abbeymill Business Centre, Seedhill, PAISLEY PA1 1TJ.

This Privacy Policy relates to information which is obtained by the PAI and for which the PAI is the Data Controller.

2. Our Purpose

Our purpose is the encouragement and promotion of Art by means of classes, Conversazioni, Lectures, Exhibitions, and the Purchase of Works of Art, or Literature, or by such other means consistent with the objects of the Institute as the Committee of Management may determine.

Central to this mission is our commitment to be transparent about the data we collect about you and how it is used and shared.
The PAI is consist of three types of members a) Artist Members b) others interested in Art who shall be called “Lay Members” and c) Honorary Members, which shall include Artists or Laymen whom the Institute wishes to honour. The PAI members are central to its governance structure. The PAI seeks to involve its members in its work as partners and advocates on its behalf.

3. Why we hold and process personal data

We keep data for the furtherance of our charitable obligations.

We hold and process personal data for a number of reasons:

To keep a record of our Members their subscriptions, other donations and actions taken by our wider supporters including our communications with them

To make invite people to become involved in our work and projects

To claim gift aid on donations

To send our Members and supporters marketing information about our projects, fundraising activities and appeals where we have their consent or are otherwise allowed to

To fulfil contractual obligations entered into with supporters and funders

To meet wider legal obligations such as those of our grant funders

To support Members and other volunteers to form networks, run events and projects, and collaborate

To record our campaigning actions and those of our supporters

To meet our charitable reporting duties

To track those who use our sites either as members, customers, or members of the public.

To ensure we do not send unwanted information to supporters or members of the public who have informed us they do not wish to be contacted.

Our website and charitable outputs are available to all in line with our charitable obligations. Our Members also share their professional identities, engage with network, exchange knowledge and find opportunities through our members section of our website.

4. Your Consent and Notices of Changes

If you engage with us including through use of our website, you consent to this Privacy Policy, including our Cookies Policy.

If you engage with the PAI including through our website, you consent to the collection, use and sharing of your personal data under this Privacy Policy (which includes our Cookie Policy and any other documents referenced in this Privacy Policy). We provide you with choices that allow you to opt-out or control how we use and share your data.

This Privacy Policy may be updated from time to time so you may wish to check it each time you submit personal information to the PAI. The date of the most recent revisions will appear on this page. If you do not agree to these changes, please do not continue to use the PAI website to submit personal information to the PAI. If material changes are made to the Privacy Policy we will notify you by placing a prominent notice on the website.

5. Information we collect

You provide data to us when you attend our events, join as a Member, register with us or use our website.

We log your visits and attendances to events in our website.

We receive data from your devices and networks, including location data.

If you communicate through our online tools, we learn about that.

We are improving our website and online presence, which means we get new data and create new ways to use data.

Attendance at Events or Involvement in our Projects.

We gather information on those who participate in projects or attend our events including your name and e-mail address.

Joining as Member

All Members who join the PAI are asked to give their name, date of birth, email address, postal address, contact numbers. Artist members must enter a selection process.

Website Use and Social Media Interaction

We log usage data when you visit or otherwise or engage in our charitable work such as when you view or click on content, or perform a search. We use log-ins, cookies, device information and internet protocol (“IP”) addresses to identify you and log your use. This helps us to understand engagement with our content, and the preferences of our supporters.’ Or refer to the profiling section at the end of the doc.

Your Device and Location

When you visit or leave our website (including our plugins or cookies or similar technology on the sites of others), we receive the URL of both the site you came from and the one you go to next. We also get information about your IP address, proxy server, operating system, web browser and add-ons, device identifier and features, and/or ISP or your mobile carrier. If you use our website from a mobile device, that device will send us data about your location. Most devices allow you to prevent location data from being sent to us and we honour your settings.


We collect information about you when you send, receive, or engage with messages in connection with our site. Messages are not stored.


Our charitable work is dynamic and we often introduce new features, which may require the collection of new information. If we collect materially different personal data or materially change how we use your data, we will notify you and may also modify this Privacy Policy.

6. How we Share Information

Any information you include on your profile and any content you post or social action (e.g. likes, follows, comments, shares) you take on our website and online tools will be seen by others.

We may use others to help us with our website and online tools.

We may need to share your data when we believe it’s required by law or to protect your and our rights and security.

Our Charitable Work

We do not share our data with third parties unless compelled to do so or in a strictly controlled way to certain Service Providers working on our behalf set out below.

Where other third party sharing takes place we will always seek permission from the data subject.

Data is shared on the profiles contained as part of the members section of our website with other members. If you join PAI we share the membership list with all members on our website.

All volunteers who receive data and operate on the PAI’s behalf receive appropriate training and technical resources.

Service Providers

We use others to help us provide our charitable work including our website and other core online services including our CRM and mailing tools (e.g. for, maintenance, analysis, audit, payments, fraud detection, marketing and development), printing and distribution of our journal and other postal mailings. They will have access to your information as reasonably necessary to perform these tasks on our behalf and are obligated not to disclose or use it for other purposes.

Legal Disclosures

It is possible that we will need to disclose information about you when required by law, warrant, or other legal process or if we have a good faith belief that disclosure is reasonably necessary to (1) investigate, prevent, or take action regarding suspected or actual illegal activities or to assist government enforcement agencies; (2) enforce our agreements with you, (3) investigate and defend ourselves against any third-party claims or allegations, (4) protect the security or integrity of our Service (such as by sharing with companies facing similar threats); or (5) exercise or protect the rights and safety of the PAI.

7. Your Choices and Obligations

We keep most of your personal data for as long as your membership is open.

We keep some of your data even after you end your relationship with us.

You can access or delete your personal data.
You have many choices about how your data is collected, used and shared.

Data Retention

We retain the personal data you provide as needed to carry out our charitable work. If you are a Member or supporter who receives mailings we keep your data to help us improve our charitable work. We delete keep data for three years for supporters and other contacts and seven years for Members.

Our Membership Record is a historical record and we keep a minimum amount of data for posterity as part of our archive.

We retain your personal data even after a Member has ceased their membership or a supporter has stopped receiving mailings to comply with legal obligations (including law enforcement requests), meet our regulatory and financial requirements, resolve disputes, maintain security, prevent fraud and abuse, or fulfil your request to “unsubscribe” from further messages from us. The list of the Members of the PAI is a historical record which is maintained for posterity with the limited amount of information we require to achieve this.

Rights to Access and Control Your Personal Data

You can access or delete your personal data.
You have many choices about how your data is collected, used and shared which we manage through our consent centre and speaking with us.

If you would like more information, or have any questions about this policy, please contact our Membership team by email at

To make a formal complaint about the PAI’s approach to data protection or raise privacy concerns directly with our data protection team, please contact:

You also have the right to make a complaint direct to the UK’s data protection authority, the Information Commissioner’s Office (ICO). The ICO can be contacted at:
Concerns can be also be logged via the ICO website.

8. Other Important Information

We monitor for, and try to prevent, security breaches. Please use the security features available through our online tools.

We are not responsible for the content of third parties including any personal data contained.

We store and use your data outside your country.

Our statements regarding direct marketing.

We target our communications using profiling based on the information we know about you.

We implement security safeguards designed to protect your data, such as HTTPS. We regularly monitor our systems for possible vulnerabilities and attacks.

Content provided by Third Parties published on our website.

We often publish and link to reports, blogs and articles written by Members and others who are not members of staff at the PAI. We are not responsible for the accuracy of either the content or any personal data contained within such content.

Cross-Border Data Transfers

We process data both inside and outside of the United Kingdom. Where we transfer data we do so either within the EEA, under EU-U.S. and Swiss-U.S. Privacy Shield frameworks or through written contract terms.

Direct Marketing

We currently do not share personal data with third parties for their direct marketing purposes.


Profiling is a common technique used in direct marketing and involves analysing data to improve the targeting of communications. The PAI uses profiling techniques to help ensure our communications are relevant.

Profiling allows us to target our resources effectively, which donors consistently tell us is a key priority for them. It enables us to raise more funds, sooner, and more cost-effectively, than we otherwise would. The data may have been provided to the PAI by our supporters when responding to our marketing campaigns, or when using our website, or social media sites such as Facebook. It may also have been provided by external organisations as described below.

When building a profile we may analyse geographic, demographic and other information relating to you, as well as your previous responses to our marketing campaigns. We do this in order to determine whether we believe a particular marketing campaign might be of interest. Some of the data is provided by external organisations and may be provided at an aggregate level (e.g. by postcode). Where it relates to you as an individual we check that you have provided your express consent to the relevant third party for this use of your data. This helps to maximise the effectiveness of our campaigns and to minimise the wastage that would result from sending marketing information where it is not of interest.

9. Email Disclaimer

The information in any e-mail (and/or document attached) sent by or on behalf of the PAI is confidential and may be legally privileged and/or contain copyright material of the PAI. This information is intended solely for the use of the named addressee.

If you are not the named addressee of an email from the PAI, please notify the sender immediately and do not disclose, copy or distribute the contents to any other person.

Any contractual representations contained therein on behalf of the PAI must not be taken as final, and are entirely subject to contracts signed formally by an authorised representative of this organisation.

Whilst the PAI takes all reasonable precautions to ensure that e-mails from the Institute are virus free, no responsibility will be taken for viruses transmitted from its systems.