Privacy Policy
Cheahseed Sdn Bhd
202601013374 (1675472-H)
Effective date: 25 June 2026
Last updated: 25 June 2026
1. Introduction and Who We Are
Cheahseed Sdn Bhd (202601013374 (1675472-H)) ("Cheahseed", "we", "us", or "our") is a company incorporated in Malaysia that provides funnel strategy, funnel design and build, fractional CFO services, financial modeling, and business growth consultancy to clients worldwide on a fully remote basis.
We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, how long we keep it, and what rights you have over it.
This Policy applies to:
- All visitors to www.cheahseed.com
- All prospective clients who submit enquiries or book discovery calls
- All current and past clients of Cheahseed worldwide
- All individuals whose personal data we process in connection with our services
Please read this Policy carefully. By using the Site or engaging our services, you confirm that you have read and understood this Policy.
If you have any questions, contact us at [email protected] at any time.
2. Data Controller
The data controller responsible for your personal data is:
Cheahseed Sdn Bhd
Registration No: 202601013374 (1675472-H)
Incorporated in Malaysia
Email: [email protected]
Website: www.cheahseed.com
For clients located in the European Union or United Kingdom, Cheahseed acts as a data controller as defined under the EU General Data Protection Regulation (GDPR) and UK GDPR respectively.
3. What Personal Data We Collect
We collect the following categories of personal data:
3.1 Identity and contact data
First name and last name
Email address
Business name and job title
Country or region of residence
LinkedIn profile URL (where provided)
Phone number or WhatsApp number (where provided)
3.2 Business and financial data
Business type and industry
Approximate monthly revenue range
Current business challenges and goals
Existing funnel or website URLs (where provided)
Financial information shared during consultancy engagements (e.g. revenue, expenses, cost per acquisition, profit margins)
3.3 Communication data
Emails, messages, and notes exchanged between you and Cheahseed
Call notes and session summaries from discovery calls and consultancy sessions
Responses to pre-qualification forms and booking questionnaires
3.4 Technical and usage data
IP address and approximate geographic location
Browser type and version
Device type and operating system
Pages visited on the Site and time spent
Referring URL (how you found our Site)
Cookie identifiers (see Section 9)
3.5 Payment data
Where payment is processed, we collect billing name and email address. Payment card details are processed directly by our third-party payment provider and are never stored by Cheahseed.
3.6 Sensitive data We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or political opinions. Please do not share sensitive personal data with us unless specifically requested for a legitimate purpose.
4. How We Collect Your Personal Data
We collect personal data through the following means:
Directly from you:
When you visit and interact with our website
When you complete and submit an opt-in or enquiry form on the Site
When you complete our discovery call pre-qualification questionnaire
When you book a discovery call or strategy session via our calendar
When you engage Cheahseed as a client and communicate with us by email, Zoom, or other means
When you provide information during consultancy sessions
Automatically through technology:
Through cookies and similar tracking technologies on the Site (see Section 9)
Through our website analytics tools
Through our CRM platform (GoHighLevel)
From third parties:
Where you connect with us via LinkedIn, Facebook, or Instagram
Where a referral partner introduces you to us
Through advertising platforms where you have interacted with our ads
5. Why We Collect Your Data and Our Legal Basis for Processing
We process your personal data only for clear, legitimate purposes and always on a lawful basis.
Where you submit an enquiry, complete a booking form, or take steps to engage our services, we process your data on the basis of pre-contractual steps and our legitimate interests in responding to and assessing your enquiry. Once you become a client, processing is necessary for the performance of our contract with you — this covers delivering our consultancy and funnel services, conducting sessions, preparing and sharing deliverables such as financial models and funnel audits, and sending you service-related communications and materials.
Where you have opted in to receive marketing emails, educational content, or service updates from us, we process your data on the basis of your consent. You may withdraw this consent at any time by unsubscribing or contacting us at [email protected].
We process payment-related data to fulfil our contractual obligations to you and to comply with our legal obligations under Malaysian accounting and tax law. We maintain client records and session notes on the basis of our legitimate interests in managing our business and our legal obligations to retain certain records.
We use website analytics data to improve our Site and services, which we do on the basis of legitimate interests or consent where required by applicable law in your jurisdiction. Where we need to protect our legal rights, enforce our Terms of Use, or comply with a legal obligation — such as responding to a court order or regulatory request — we process your data on that basis.
For clients in the EU and UK, where we rely on legitimate interests as our legal basis, we have assessed that our interests do not override your fundamental rights and freedoms. You have the right to object to any processing carried out on this basis — see Section 11 for how to do so.
For clients in Malaysia, our processing is carried out on the basis of your consent and the performance of our contractual obligations to you, in accordance with the Personal Data Protection Act 2010 (Malaysia).
6. How We Use Your Personal Data
Specifically, we use your personal data to:
- Contact you in response to your enquiry or booking
- Conduct pre-qualification and onboarding for new clients
- Deliver funnel strategy, design, financial modeling, and fractional CFO services
- Prepare, share, and store session notes, financial models, funnel audits, and other deliverables
- Send invoices and process payments
- Communicate with you about your project, including via email and video call
- Send you educational content, case studies, and service updates where you have opted in
- Analyze and improve our website and marketing activities
- Comply with our legal and regulatory obligations
- Protect against fraud, misuse, or unauthorised access to our services
We will never use your personal data for purposes incompatible with those stated in this Policy without first obtaining your consent.
7. Who We Share Your Personal Data With
We do not sell your personal data to any third party.
We share your personal data only with the following categories of recipients and only to the extent necessary:
7.1 Third-party service providers (data processors)
These organisations process your data on our behalf and under our instruction, and are permitted to use it only for the purposes we specify.
We use GoHighLevel, based in the United States, as our primary CRM platform for managing client relationships, funnel pages, opt-in forms, calendar bookings, and email and SMS delivery. Video calls for discovery calls and consultancy sessions are conducted via Zoom and Google Meet, both operated by US-based entities. We use Google Drive and Gmail for file storage and email communication, and Google Analytics to analyse website traffic and improve our content.
Where payment processing is required, we use Stripe or an equivalent payment processor, based in the United States. For advertising and lead generation, we may use Meta (Facebook and Instagram), also US-based. Where design collaboration is required, we use Canva, which is based in Australia.
All third-party providers are contractually required to process your data securely and only for the purposes we specify. Where providers are located outside Malaysia and your home jurisdiction, we take reasonable steps to ensure adequate data protection safeguards are in place.
7.2 Professional advisers We may share data with our lawyers, accountants, or auditors where necessary for legal or compliance purposes. These parties are bound by professional confidentiality obligations.
7.3 Legal and regulatory authorities We may disclose your data to law enforcement, regulators, or courts where required to do so by applicable law or to protect our legal rights.
7.4 Business transfers In the event of a merger, acquisition, or sale of Cheahseed's business assets, your personal data may be transferred to the successor entity. We will notify you of any such transfer and your rights in respect of it.
We do not share your personal data with any other third parties without your explicit consent.
8. International Data Transfers
Cheahseed operates globally. Your personal data may be transferred to and processed in countries outside your home jurisdiction, including Malaysia, the United States, and other countries where our service providers operate.
9. Cookies and Tracking Technologies
Our Site uses cookies and similar technologies to enhance your experience and to help us understand how the Site is used.
9.1 What are cookies? Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device and remember certain information about your visit.
9.2 Types of cookies we use
We use four categories of cookies on the Site. Essential cookies are required for the Site to function correctly and cannot be disabled — these include session cookies and security cookies. Analytics cookies, such as those placed by Google Analytics, help us understand how visitors use the Site so we can improve our content and user experience. Marketing cookies, including the Meta Pixel and Google Ads cookies, track your interactions with our advertising and help us measure the effectiveness of our campaigns. Finally, functional cookies remember your preferences — such as language or region settings — to provide a more personalised experience when you return to the Site.
You can manage and control all non-essential cookies through your browser settings. For further guidance on managing cookies, visit www.allaboutcookies.org.
9.3 Managing cookies You can control and manage cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Site. Where required by law (including for EU/UK visitors), we will ask for your consent before placing non-essential cookies.
For more information on how to manage cookies, visit www.allaboutcookies.org.
10. How Long We Keep Your Personal Data
We retain your personal data only for as long as necessary for the purposes described in this Policy, or as required by applicable law, after which it is securely deleted or anonymised.
Enquiry and booking data from prospective clients who do not proceed to engagement is retained for 12 months from the date of last contact. For active and past clients, identity and contact data, financial and consultancy work product, and payment records are all retained for 7 years from the end of the engagement. This 7-year period reflects our obligations under the Malaysian Companies Act, tax law, and general legal best practice for professional services businesses. Email communications are retained for 3 years from the date of last communication.
Website analytics data collected through Google Analytics is retained for 26 months in line with Google's default settings. Records of marketing opt-ins and consent are retained for as long as your consent remains active, plus one additional year following withdrawal, to allow us to demonstrate compliance if required.
11. Your Rights
Depending on where you are located, you have the following rights in respect of your personal data.
Rights available to all users:
Right to access — request a copy of the personal data we hold about you
Right to correction — request that we correct inaccurate or incomplete data
Right to withdraw consent — withdraw any consent you have given at any time, without affecting the lawfulness of processing before withdrawal
Right to lodge a complaint — lodge a complaint with your local data protection authority
Additional rights for EU and UK clients (GDPR / UK GDPR):
Right to erasure — request deletion of your personal data where there is no legitimate reason for us to continue processing it
Right to restrict processing — request that we limit the way we use your data
Right to data portability — receive your data in a structured, machine-readable format
Right to object — object to processing based on legitimate interests or for direct marketing purposes
Additional rights for California residents (CCPA):
Right to know — request disclosure of the categories and specific pieces of personal information we have collected about you
Right to delete — request deletion of your personal information
Right to opt out of sale — Cheahseed does not sell personal information
Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights
Australian clients (Privacy Act 1988):
You have the right to access and seek correction of your personal information held by us
Singapore clients (PDPA 2012):
You have the right to withdraw consent and to access or correct your personal data
Malaysian clients (PDPA 2010):
You have the right to access and correct your personal data held by us by submitting a written request
To exercise any of your rights, contact us at: [email protected]
Please include your full name, email address, country of residence, and a clear description of your request. We may need to verify your identity before processing your request.
12. How We Protect Your Personal Data
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure.
These measures include:
- Encrypted data transmission via SSL/TLS on the Site
- Password-protected access to all platforms and tools used to store client data
- Two-factor authentication on key platforms including GoHighLevel and Google Workspace
- Access controls limiting which team members can access client data
- Regular review of third-party provider security practices
- Secure deletion of data at the end of the retention period
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to affect your rights, we will notify you and the relevant authorities as required by applicable law.
13. Marketing Communications
We will only send you marketing emails, newsletters, or promotional content where you have explicitly opted in to receive them.
You can withdraw your consent and unsubscribe at any time by:
- Clicking the unsubscribe link in any marketing email
- Contacting us at [email protected]
Unsubscribing from marketing communications will not affect service-related communications that are necessary for the delivery of our services to you as a client.
We do not share your email address or contact details with third parties for their own marketing purposes.
14. Children's Privacy
The Site and our services are not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us immediately at [email protected] and we will delete it promptly.
15. Links to Third-Party Sites
The Site may contain links to third-party websites. This Privacy Policy applies only to www.cheahseed.com and does not cover the privacy practices of any third-party site. We encourage you to review the privacy policies of any third-party site you visit.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, services, or applicable law. The updated version will always be published on this page with a revised effective date.
Where changes are material, we will notify existing clients by email. We encourage you to review this Policy periodically.
17. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us:
Cheahseed Sdn Bhd
Registration No: 202601013374 (1675472-H)
Email: [email protected]
Website: www.cheahseed.com