Depending on how you interact with Zombie Checkpoint, we may collect:

• Your name

• Email address

• Telephone number

• Booking and transaction information

• Details of participants included within your booking

• Age or age-related information where required

• Information supplied through participation waivers

• Accessibility or other information you voluntarily provide to help us safely deliver the experience

• Photographs and video recordings where applicable

• CCTV images

• Communications you send to us

• Website usage, device and technical information

• Marketing preferences
   

Payment information may be processed by our booking and payment providers. We do not necessarily receive or store your complete payment card details.
 

We may use your personal information to:

• Process and manage bookings

• Take payment and issue booking confirmations

• Contact you about your booking

• Operate and administer Zombie Checkpoint

• Complete participation and waiver procedures

• Manage safety and security

• Provide customer support

• Process booking changes, complaints or enquiries

• Provide photographs or video associated with your experience

• Send marketing communications where permitted

• Improve our attraction, website and customer experience

• Prevent fraud, misuse or unlawful activity

• Meet our legal, regulatory and insurance obligations
   

Depending on the circumstances, we process personal information because:

Contract – processing is necessary to provide the experience or services you have booked.
 

Legal obligation – we need to process information to comply with applicable laws or regulatory requirements.
 

Legitimate interests – processing is reasonably necessary for operating, protecting and improving our business, attraction and services, provided those interests are not overridden by your rights.
 

Consent – where we specifically ask for your permission, such as certain marketing communications or photography/video uses.
 

Where processing is based on consent, you can withdraw that consent at any time.
 

Zombie Checkpoint uses third-party systems and service providers to operate bookings, payments and other parts of our business.
 

Information necessary to process your booking may therefore be processed by our booking platform, payment providers and other suppliers acting on our behalf.
 

These organisations process information according to their respective responsibilities and applicable data protection requirements.
 

Photography and video recording may take place during visits to Zombie Checkpoint.
 

Where consent is required for photography, filming or promotional image use, this will be obtained through our participation waiver or another appropriate consent process.
 

Official photographs and video may also be captured as part of the experience and may be offered to participants separately.
 

Where we rely on consent, you may withdraw that consent for future use by contacting us.
 

CCTV may operate at Zombie Checkpoint for the purposes of safety, security, crime prevention and protection of customers, staff and property.
 

CCTV footage will only be accessed where necessary and will be retained only for an appropriate period unless it is required for an incident, investigation, insurance matter or legal requirement.
 

Appropriate signage will be displayed where CCTV operates.
 

Zombie Checkpoint accepts participants under the age of 18.
 

Where appropriate, information relating to younger participants may be provided by a parent, guardian or other authorised adult.
 

Where consent from an appropriate adult is required, including certain participation, photography or filming permissions, this will be obtained as part of our relevant consent or waiver process.
 

We aim to collect only the information reasonably necessary to safely administer and deliver the experience.
 

Where permitted, we may contact you with information about Zombie Checkpoint, Zombie Infection and related experiences, offers or events.
 

Where marketing requires consent, we will ask for it.
 

You can unsubscribe from marketing emails at any time by using the unsubscribe link within an email or by contacting us.
 

Transactional messages relating to an existing booking are not marketing communications and may still be sent where necessary to administer your booking.
 

Our website may use cookies and similar technologies to operate correctly, understand how visitors use the website, measure advertising performance and improve our services.
 

Where legally required, non-essential cookies will only be used after you have provided consent.
 

Further information can be found in our Cookie Policy and through the cookie controls available on our website.
 

Where necessary, information may be shared with trusted organisations that help us operate our business, including:

• Booking and reservation providers

• Payment processors

• Website and hosting providers

• Email and communications providers

• IT and technology providers

• Professional advisers

• Insurers

• Marketing and analytics providers

• Authorities, regulators or emergency services where legally required or reasonably necessary
   

We do not sell your personal information.
 

Some of our technology and service providers may process information outside the United Kingdom.
 

Where personal information is transferred internationally, we take appropriate steps to ensure that applicable data protection requirements and safeguards are followed.
 

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including satisfying operational, contractual, insurance, accounting and legal requirements.
 

Different types of information may therefore be retained for different periods.
 

When information is no longer required, it will be deleted, anonymised or securely disposed of where appropriate.
 

Depending on the circumstances, you may have rights relating to your personal information, including the right to:

• Request access to your personal information

• Request correction of inaccurate information

• Request deletion of your information

• Request restriction of processing

• Object to certain processing

• Request transfer of certain information

• Withdraw consent where processing relies upon consent
   

These rights are subject to the conditions and exemptions contained within applicable data protection law.
 

To exercise your rights, please contact us.
 

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
 

Access to personal information is limited to people and service providers who reasonably require it for their role or service.
 

We may update this Privacy Notice from time to time to reflect changes to our services, technology, legal requirements or the way we process information.
 

The latest version will be published on our website.
 

Zombie Checkpoint is operated by:

Zombie Infection Ltd
 

For questions about this Privacy Notice, how we use your information or to exercise your data protection rights, please contact us using the contact details provided on our website.
 

If you have concerns about how we use your personal information, please contact us first so that we have an opportunity to investigate.
 

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection regulator.