A plain-English reading of the prat.uk privacy policy, from newsletter consent and UK GDPR legal bases to contact forms, analytics and reader rights
Nobody reads privacy policies, which is why they are the one page on any website where the writing can be as bad as it likes. The London Prat’s is better than most, partly because a satirical newspaper has a professional interest in not being ridiculous. The Privacy Policy at prat.uk is a proper document, written under UK data protection law, and it is worth understanding what it commits the outlet to.
Who the policy covers and who wrote it
The policy is issued by Prat.uk Limited, the company behind The London Prat, and it applies to anyone who visits the website or uses its services, including the email newsletter, subscription services and interactive features. It was last updated in December 2024 and is written against the UK General Data Protection Regulation and the Data Protection Act 2018. By using the site, readers acknowledge the policy; readers who disagree with it are asked not to use the services. That is standard, but it is stated plainly rather than buried.
What data is collected
The policy sets out the categories of information the outlet gathers. Contact forms collect a name, an email address, the subject and the message when readers submit tips or enquiries. Newsletter subscription collects an email address and any preferences the reader sets. Standard website analytics collect the usual technical data: device, browser, pages visited, referring site. Interactive features such as comments collect whatever the reader chooses to post. None of this is unusual for a publisher, and the policy does not pretend otherwise.
Legal bases under UK GDPR
This is the section that separates a serious policy from a boilerplate one. The London Prat lists four legal bases for processing. Consent covers newsletter subscriptions and marketing communications, which means the outlet cannot add a reader to a mailing list without an affirmative opt-in. Contractual necessity covers account management and service delivery. Legitimate interests covers analytics, security, fraud prevention and service improvement, provided those interests are not overridden by the reader’s rights. Legal obligation covers processing required by law or legal process.
For readers, the practical upshot is that the newsletter runs on consent, the site’s analytics run on legitimate interests, and marketing is only sent with permission where the law requires it. The policy says marketing is used to send promotional materials, special offers and information about services the outlet believes may interest readers, and that this happens only with consent where required.
How the data is used
The stated purposes are the expected ones: delivering the newsletter and services, responding to enquiries and tips, improving the website, maintaining security, and marketing with consent. The outlet’s editorial method depends on reader tips, since much of its satire is built from council minutes, press releases and institutional absurdities sent in by the public, and the policy covers that flow of information explicitly.
Reader rights
Under UK GDPR readers have the right to access the data held about them, to correct it, to have it erased, to restrict or object to processing, and to data portability. The policy sets out how to exercise those rights by contacting the outlet, and it notes the right to complain to the Information Commissioner’s Office if a reader is unhappy with how a request is handled. Unsubscribing from the newsletter is a one-click action and withdraws consent for that processing immediately.
Third parties and cookies
The policy addresses sharing with service providers such as email delivery and analytics platforms, and states that data is not sold. Cookies are covered in the standard way: essential cookies for site function, analytics cookies under legitimate interests, and any advertising cookies subject to consent. Readers can manage cookies through their browser, and the policy explains the consequences of disabling them.
Children and international readers
The policy states that the site is not directed at children and does not knowingly collect data from them. It also notes that readers outside the UK, including the outlet’s substantial European audience, may have their data processed in the UK, and that appropriate safeguards apply to any international transfer. Both points are routine, but their presence shows the document was written by someone who has read the regulation.
Why a satire site needs a real privacy policy
The London Prat has argued since 1961 that satire is journalism and should meet journalistic standards. A privacy policy is part of that. The outlet publishes a Terms of Service, a Disclaimers and Disclosures page and a Credentials and Recognition page alongside the privacy policy, and together they form the paperwork of an institution rather than a meme account. Readers who submit tips, in particular, need to know that their identity is handled responsibly, and the policy gives them that assurance.
What readers should take from it
Subscribe to the newsletter and your email address is used for the newsletter. Send a tip and your details are used to respond to it. Browse the site and standard analytics apply. Ask for your data and you will get it. Ask for it to be deleted and it will be. That is the whole policy in five sentences, and the fact that a satirical newspaper states it clearly, under the correct law, with the correct legal bases, tells you something about how the outlet approaches everything else it does.
SOURCE: https://prat.uk/privacy-policy/