Private Policy

Last Updated: April 2, 2026

Growth Engine Solutions

GROWTH ENGINE SOLUTIONS (“we,” “our,” or “us”) provides SEO and Google Business Profile (GBP) setup services to businesses in Malaysia and beyond. We are committed to protecting your personal data in compliance with the Personal Data Protection Act (PDPA) 2010 of Malaysia. This policy explains what data we collect, why we collect it, and how we protect it.

1
Personal Data We Collect

We collect only the personal data necessary to deliver our SEO and GBP services. This includes:

Contact Information	— Your name, email address, phone number, and business name.
Business Information	— Your business address, operating hours, website URL, business category, and photos provided for GBP setup.
Account Access	— Login credentials or access permissions you grant us for Google Business Profile, Google Search Console, Google Analytics, or other platforms, solely for the purpose of delivering agreed services.
Communication Records	— Emails, messages, and notes exchanged between you and our team in the course of providing services.
Payment Information	— Invoice records and payment confirmation details. We do not store full card or bank account numbers.
Website Analytics Data	— Aggregated and anonymized data about your website traffic and search performance, accessed through tools such as Google Analytics and Google Search Console on your behalf.

2
How We Collect Your Data

We collect information through the following means:

Directly from You	— When you engage our services, complete an onboarding form, or communicate with us via email, WhatsApp, or other channels.
From Third-Party Platforms	— When you grant us access to your Google Business Profile, Google Search Console, Google Analytics, or other platforms as part of service delivery.
Our Website	— If you contact us or submit an inquiry through our website, we may collect the information you provide. Our website may use cookies for basic analytics purposes.

3
Purpose of Processing

Your personal data is used solely for the following purposes:

To set up, optimize, and manage your Google Business Profile.
To perform SEO audits, keyword research, on-page optimization, and reporting.
To communicate with you regarding project updates, deliverables, and recommendations.
To comply with applicable legal, regulatory, and governmental requirements.
To improve our service quality based on aggregated, anonymized performance data.

4
Third-Party Tools and Data Sharing

In delivering our services, we use industry-standard third-party tools including but not limited to Google Analytics, Google Search Console, Google Business Profile, and SEO platforms such as Ahrefs. Your data may be processed by these platforms in accordance with their own privacy policies.

We do not sell your personal data. We may share your data only with:

Our team members	— Who require access to perform agreed services on your behalf.
Third-party platforms	— Such as Google, as required to deliver SEO and GBP services.
Legal authorities	— Where required by Malaysian law or court order.

Where any third-party tool involves the transfer of your data outside Malaysia (for example, to Google’s servers), we ensure such transfers are made through platforms that implement adequate data protection standards, consistent with Section 129 of the PDPA 2010.

5
Cookies

Our website may use cookies to analyze visitor behavior and improve user experience. We use the following types:

Strictly Necessary

Required for the website to function correctly.

Analytics

Help us understand how visitors use our website (e.g., via Google Analytics). These do not identify you personally.

You may disable cookies through your browser settings at any time. Doing so may affect some functionality of our website.

6
Security and Retention

We take appropriate measures to protect your personal data, including:

Storing documents and client data in access-controlled platforms.
Using secure, encrypted communication channels where possible.
Limiting access to your data to team members who need it to perform their duties.

We retain your personal data for as long as necessary. As a general guide:

Data Type	Retention Period
Client and project data	Duration of engagement + up to 7 years
Communication records	Up to 3 years
Website analytics data	Per platform settings (e.g., Google Analytics)

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized. In the event of a data breach likely to result in harm to you, we will notify you and the relevant authorities as required under applicable law.

7
Your Rights

Under the PDPA 2010, you have the following rights:

Access & Correction

Request a copy of your data or corrections to inaccuracies. We respond within 21 days. A reasonable fee may apply.

Withdraw Consent

Withdraw consent at any time. This may affect our ability to continue delivering certain services.

Prevent Processing

Request that we cease or restrict processing where it is causing or likely to cause damage or distress.

Inquiries & Complaints

Lodge a complaint about our data handling practices using the contact details in Section 8.

8
Contact Us

To exercise your rights or if you have any questions about this Privacy Policy, please contact us:

Growth Engine Solutions

Email	growth21engine@gmail.com
WhatsApp / Tel	011-5843 8539

9
Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Where changes are material, we will notify you by email or by a prominent notice on our website. The date at the top of this policy indicates when it was last revised.