This Privacy Policy explains how CHEETAY collects, uses, discloses, and protects your personal data, and sets out your rights in relation to it. It applies to all CHEETAY members and visitors.
CHEETAY is operated by Shayaan Dar, an individual trading under the “helloshayaan” name, and is not incorporated as a registered company. References to “we”, “us”, “our”, and “CHEETAY” in this Policy are to Mr. Dar, who acts as the data controller responsible for your personal data.
Any question or request concerning this Policy or your personal data may be directed to shayaan@cheetayhq.com.
Information you provide. Your name, email address, Discord username, and time zone, together with the information you submit while using CHEETAY, including your check-in responses, session votes and questions, notes, to-do and pipeline entries within GRID, and any feedback you provide upon cancellation (including your stated reason, ratings, and comments).
Payment information. Payments are processed exclusively by Stripe. We do not receive or store your payment card details; we receive only the status of a payment, the plan to which you have subscribed, and the associated billing dates.
Information we generate. In the course of your membership we generate records concerning you, including session attendance, consistency scores, streaks, and progress over time. Such information is generated by automated means; however, no decision producing legal or similarly significant effects (such as the termination of a membership) is taken solely by automated means.
Social media metrics. Where you provide your Instagram, TikTok, or YouTube handles, our systems automatically collect publicly available metrics (such as follower, view, and post counts) on a daily basis in order to track your growth. This is limited to information publicly available on your profile and does not include passwords, private messages, or any information behind a login.
Technical information. Our hosting providers maintain standard server logs (including IP address and time of access). Your browser stores limited preferences locally, such as your display theme. We do not operate advertising trackers.
CHEETAY is not directed to children under the age of 13. We do not knowingly collect personal data from any person under 13, and such persons must not use CHEETAY or submit any personal data to us.
If we become aware that we have collected personal data from a child under 13, we will delete that data promptly. If you believe that a child under 13 has provided us with personal data, please contact us at shayaan@cheetayhq.com.
We process your personal data for the following purposes:
We do not sell your personal data and do not use it for third-party advertising. We disclose it only to the service providers identified in Section 7, and otherwise only where required by law or valid legal process, or in connection with a transfer of the CHEETAY business, in which case your personal data will remain subject to this Policy.
Where the EU or UK General Data Protection Regulation, or a similar law, applies, we rely on the following legal bases:
Provision of your core personal data is necessary in order to enter into and perform your membership; without it, we cannot provide the service. Provision of optional data, such as your social media handles, is voluntary.
CHEETAY is a club, and certain information is, by design, visible to other members:
We may use aggregate, group-level statistics to promote CHEETAY. We will obtain your consent before featuring you individually, including your name, likeness, or results.
We engage the following categories of service provider, each of which processes personal data on our behalf under appropriate contractual safeguards:
We identify the providers with which you interact directly. For security reasons, our internal providers are described by category on this public page; a full list is available on request. Members of our team have limited, role-based access to personal data, restricted to what is necessary to operate CHEETAY, and act under the direction of the operator.
CHEETAY is operated from Pakistan, and your personal data is processed there by the operator. Our service providers store data primarily on servers located in the United States. Accordingly, your personal data may be transferred to, and stored in, countries other than your country of residence.
Where personal data is transferred from the European Economic Area or the United Kingdom to a third country, such transfers are made subject to appropriate safeguards, including the European Commission’s Standard Contractual Clauses. The protections in this Policy apply irrespective of where your data is stored.
We retain your personal data for as long as your membership remains active. Following cancellation, we retain your member record — including join and cancellation dates, billing history, activity statistics, and cancellation feedback — in order to respond to billing enquiries and to restore your membership should you return.
Billing records that we are required to retain for tax purposes are kept for up to six (6) years. Other personal data is deleted upon your request, or once it is no longer required to operate or restore your membership.
Backups are retained in encrypted form and are overwritten on a rotating basis, such that deleted data is progressively removed from backups. To request earlier deletion, contact us as described in Section 11.
We implement appropriate technical and organisational measures to protect your personal data, including:
No method of transmission or storage is entirely secure. In the event of a personal data breach affecting you, we will notify you and, where required, the relevant supervisory authority, without undue delay and within any period required by applicable law.
Subject to applicable law, you have the right to:
To exercise any of these rights, contact shayaan@cheetayhq.com from the email address associated with your membership. We will respond within 30 days. Where our processing is based on consent, you may withdraw that consent at any time. If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with a data protection authority, you also have the right to lodge a complaint with that authority.
CHEETAY operates substantially by email, including check-ins, session votes, billing notices, and setup links. These are operational communications that form part of the membership and cannot be fully disabled while your membership is active. If you consider their frequency excessive, please contact us.
We do not currently operate a separate marketing mailing list. Should we introduce one, subscription will be on an opt-in basis and every message will include an unsubscribe facility.
If you have joined our waitlist or submitted a signup form but are not yet a member, we hold only your name and email address, which we use solely to contact you regarding membership of CHEETAY. To be removed, contact shayaan@cheetayhq.com.
We may amend this Policy from time to time. Where we do, we will update this page and the effective date shown above. Where a change materially affects the handling of your personal data, we will notify you directly, by email or via Discord, before it takes effect.