When you register for the walk
Your email address, and whatever else the registration form asks for that year. We use it to send you the meeting point, the route, and safety updates, nothing else.
Privacy policy
How World Zombie Day: London handles your information.
Last updated: September 2026
Who we are
World Zombie Day: London is a free, volunteer-run Community Fundraising event. For data protection purposes we are the data controller for this website and for event registrations. You can reach us at info@worldzombieday.co.uk.
What we collect
When you email us
Your email address and whatever you write to us, kept as long as we need it to answer you.
When you browse this site
If you accept, we use PostHog and Google Analytics 4 to count visits and see which pages people read, so we know what to improve. They record the pages you view, where you arrived from, roughly where in the world you are, and what kind of device and browser you use. We do not use them to identify you, session recording is off, autocapture is off, your IP address is anonymised, and we do not track you across other websites. If you decline, neither of them is ever loaded. That is our analytics. The booking forms on the register, donate, and after-party pages run analytics of their own, which your answer here does not reach; what they load is set out under cookies above.
Why we are allowed to
For registration emails, because you asked us to send them. That is your consent, and you can withdraw it at any time. For analytics and for answering your messages, our legitimate interest in running a safe event and a website that works. We never rely on legitimate interests where your rights clearly outweigh ours.
Cookies and your choice
Nothing is stored on your device by us unless you accept it. The dialog asks once, and it covers PostHog and Google Analytics, which tell us which pages are read. Decline and neither is ever loaded, and the rest of the site works exactly the same. Two things are kept whatever you choose, because they are the choices themselves: your answer to this question, and your theme, dark or light.
The ticketing and donation form on the register and donate pages is different, and you should know exactly how. It is run by Zeffy, it loads as soon as either page is opened whatever you answered, and it brings other companies with it. Stripe, hCaptcha, and Google Pay are there to take the payment and to check you are not a robot, and the form cannot do its job without them. Zeffy also loads HubSpot, Microsoft Clarity, Google, and LinkedIn, which are its own analytics and advertising rather than anything needed to take a booking. We do not control those, we do not receive anything from them, and they are not covered by the answer you gave us.
The after-party page is the same shape again with a different company. Tickets for the after party are sold by the venue, so that page carries a booking widget from DesignMyNight, which loads as soon as the page is opened whatever you answered, and may set cookies and bring other companies with it in the way Zeffy does. We do not control it and we do not receive anything from it. We have asked them what it loads and will name it here as soon as we have the answer.
If you would rather none of that ran, do not open those three pages. Nothing anywhere else on this site loads any of it. The register and donate pages also link to the same form on Zeffy’s own site, and the after-party page links to the same listing on DesignMyNight’s, but the same companies load there too, so that is not a way around it.
Who else sees it
PostHog and Google process analytics data on our behalf, and Vercel hosts the site and keeps standard server logs. All three are bound to act only on our instructions. Registrations and donations are handled by Zeffy, which brings its own payment, security, analytics, and advertising providers with it as described above; after-party tickets are handled by DesignMyNight on the venue’s behalf, and the newsletter list by Brevo; each is the controller for what you give them. The newsletter form is ours, so your address reaches Brevo through our server rather than from your browser, and nothing of theirs runs in this page at all. We do not sell your data, and we do not share it with anyone else unless the law requires it.
How long we keep it
Registration details are deleted within twelve months of the event they were for. Analytics data is kept for up to twelve months. Emails are deleted once the conversation is finished and there is no reason to keep it.
Your rights
Under UK data protection law you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to us using it. Email info@worldzombieday.co.uk and we will respond within one month.
If you think we have got it wrong, you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first so we can put it right.
Photography
This is a public event and participants may be photographed or filmed. See the photo policy for details of what that means and how images are used.
Read the photo policyChanges
If this policy changes we will update the date at the top of this page. Material changes will be flagged on the registration page before the next event.