The Donor Data Playbook: First-Party Data for Islamic Charities
How Islamic charities can collect, measure and use their own supporter data across the Islamic year, now that ad platforms treat religion as sensitive and the law has changed.
First-party data is the information a charity collects directly from its own supporters: donations, sign-ups, website activity and preferences, collected with their knowledge. For Islamic charities it matters more than for most, because Google treats religious belief as a sensitive category, which rules out Customer Match and lookalike audiences when promoting in it [6], and Meta has restricted the data that religion-related websites can share with it since January 2025 [18]. Our scan of the largest Islamic charity websites found that 52% of UK homepages run Google Analytics with full tracking before a visitor has made any cookie choice, and only 5% of UK and US sites load their Google tags from their own domain [4].
Read the full report
What the data says
- Google treats content about personal religious beliefs as a sensitive interest category: when an ad is promoting in that category, Customer Match, your data segments, audience expansion and lookalike segments are not supported [6].
- Meta lists religion among the categories whose websites stopped passing data back from January 2025: website audiences end, the purchase event is disabled and donation values can no longer be sent [18, 19].
- In our scan of 84 of the largest UK Islamic charity homepages, 52% ran Google Analytics with full tracking and 20% sent Meta pixel data on a first visit, before any cookie choice; 48% set an advertising cookie before a choice, and 32% showed a recognisable consent platform [4].
- Consent mode is rare: of the UK sites sending Google Analytics data, 35% pass any consent signal and 19% hold analytics back until the visitor chooses. In the US, where cookie rules differ from the UK's, 5% pass a signal [4].
- Only 5% of the 151 sites measured load Google tags from their own domain. Google reports an 11% uplift in signals for advertisers using Google tag gateway, which Cloudflare provides free [4, 11, 12].
- Since June 2026, enhanced conversions for web and for leads are one Google Ads setting, and offline conversion and lead uploads moved to the Data Manager API on 15 June 2026 [15].
- From 5 February 2026, UK charities can email and text people who expressed interest in or supported their charitable purposes without prior consent, if they offered an opt-out when collecting the details and in every message. It is not retrospective [22, 21].
- The same law added a PECR exemption for analytics cookies used only to improve a website, with notice and a free way to object; advertising cookies still need consent, and the maximum fine rose to £17.5 million or 4% of turnover [23].
- Google's guide cites BCG research that effective first-party data use can generate 2 times the incremental revenue from a single ad or outreach and a 1.5 times efficiency improvement [3].
The sector in two charts
UKUSUK, highest risk under UK consent rules
Source: Wusul scan, 31 October 2026 [4]
Source: Wusul scan, 31 October 2026 [4]
Frequently asked questions
What is first-party data for a charity?
It is information a charity collects directly from its own supporters, with their knowledge: donations, Gift Aid declarations, sign-ups, website visits and preferences. It is different from data bought from brokers or shared by partners.
Can Islamic charities use Customer Match on Google Ads?
Not when the ad is promoting in a sensitive category. Google treats content about personal religious beliefs as sensitive, and in that case Customer Match, your data segments, audience expansion and lookalike segments are not supported. Appeals with no religious content may be treated differently.
Why did Meta stop tracking donations on our website?
From January 2025 Meta restricted websites in sensitive categories, including religion, from passing data back. Restricted advertisers lose website audiences, the purchase event and donation values. On-platform lead and donation campaigns still work, and misclassified domains can be appealed.
What is Google tag gateway for advertisers?
It serves Google tags from your own website domain and forwards the data to Google. Google reports an 11% uplift in signals for advertisers who use it. On Cloudflare it is free and can be turned on in a few clicks. It does not change what consent allows.
Do charities need server-side tracking?
Not always. Every charity should use consent mode and Google tag gateway. Server-side Google Tag Manager suits charities with large paid media budgets or several ad platforms, because it gives more control and faster pages, but it has a running cost.
What is the charity soft opt-in?
Since 5 February 2026, UK charities can email and text people who expressed interest in or supported their charitable purposes without prior consent, if the only purpose is to further those purposes and an opt-out is offered when the details are collected and in every message. It is not retrospective.
Do analytics cookies still need consent in the UK?
Since 5 February 2026 there is a narrow exemption for cookies used only to collect statistics to improve your own website, with clear information and a free way to object. Advertising cookies still need consent, and third-party analytics shared for the provider's own purposes does not qualify.
How should charities track zakat paid by bank transfer?
Capture an email or phone number on the pledge form, with consent, and upload the gift with its value to Google Ads through Data Manager. Since June 2026, offline and lead uploads go through the Data Manager API.
Read the full report
Create a free Wusul account to read every chapter, chart and source, and to download the PDF. We email you a link to sign in, no password needed.
Already registered? Sign in