Your data rights at CardToDeal

1. The rights you have

If you are in the EU, the UK or India, data-protection law gives you strong rights over your personal data. CardToDeal, operated by Quiamo Digital Market Services LLP, honours these rights under both the EU General Data Protection Regulation (GDPR) and India's Digital Personal Data Protection Act 2023 (DPDP Act). This guide explains each right and how we handle it. For the underlying detail, read it alongside our Privacy Policy.

2. Right of access

You can ask whether we hold personal data about you and, if so, get a copy of it together with information about how it is used. Because CardToDeal processes card images in memory and does not store them or the extracted fields after a scan, the main data we may hold about you is limited account information and short-lived request logs. We will confirm what we have and provide a copy on request.

3. Right of rectification

If any personal data we hold about you is inaccurate or incomplete, you can ask us to correct or complete it. For data extracted from a scanned card, accuracy is your responsibility to verify at the point of scanning — our Terms of Service explain the extraction accuracy disclaimer — but any account data we store can be corrected on request.

4. Right of erasure ("right to be forgotten")

You can ask us to delete personal data we hold about you. For card scans there is usually nothing to delete: images are processed in memory and not stored without your consent. Where you have created an account or exported contacts, we will delete the associated personal data on request, unless we are legally required to keep it. Operational request logs are in any case retained for only 30 days, consistent with our Privacy Policy, and then deleted automatically.

5. Right to restriction

You can ask us to limit how we use your personal data in certain circumstances — for example while we check the accuracy of data you have disputed. While a restriction is in place we will store the data but not otherwise process it, except as the law allows.

6. Right to data portability

For data you have provided to us and that we process by automated means on the basis of consent or a contract, you can ask for a copy in a structured, commonly used, machine-readable format, and ask us to transmit it to another provider where technically feasible. In practice the extracted contact data is already returned directly to your browser, and any contacts you export to a CRM are exported in a standard format you can take with you.

7. Right to object (including to ads and marketing)

You can object to processing based on our legitimate interests, and you have an absolute right to object to the use of your personal data for direct marketing at any time. CardToDeal does not use scanned card data for marketing. For advertising, we serve Google AdSense to keep the tool free, and we run analytics and advertising measurement that is on by default — you can object and switch it off as described in "Opt out of analytics & advertising" below and in our Cookie Policy.

8. Opt out of analytics & advertising

CardToDeal runs analytics, advertising and marketing measurement (Google Analytics 4, Google Ads, the LinkedIn Insight Tag and campaign/UTM attribution) that is on by default under Google Consent Mode v2. This is how you exercise your right to object to, or withdraw consent for, that processing. Opting out does not affect core site use — the scanner and daily-limit checks keep working.

• "Cookie settings" → "Essentials only" — the fastest route. The "Cookie settings" link in the footer reopens the banner; choosing "Essentials only" sets analytics and ad storage to "denied" via Consent Mode v2 and persists your choice.
• Google Ads Settings — manage personalised advertising at adssettings.google.com.
• Google Analytics Opt-out Browser Add-on — stops GA4 measurement across the sites you visit.
• LinkedIn ad preferences — adjust ad and data settings in your LinkedIn account.

For the underlying cookie detail, see our Cookie Policy; for what we collect and the legal basis, see our Privacy Policy.

9. Rights regarding automated decisions

You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you. CardToDeal's extraction pipeline only converts a card image into text — it does not make decisions about people and produces no such effects. The extracted fields are returned for you to review and use as you see fit.

10. How to exercise your rights

To exercise any of these rights, email hello@cardtodeal.com with a short description of your request. We may ask for information to verify your identity so we do not disclose data to the wrong person. We respond to data-rights requests within 30 days; where a request is complex we will tell you and explain any extension. There is no charge for a reasonable request. If you are a business customer for whom we act as processor, see our Data Processing Addendum for how requests are routed.

11. Cookie & ad preferences

You can change your consent for analytics and advertising cookies at any time using the "Cookie settings" link in the footer of any CardToDeal page, which reopens the consent banner. Choosing "Essentials only" sets analytics and ad storage to "denied" via Consent Mode v2 and stops non-essential analytics and advertising from running. See section 8 above for all opt-out routes, and full detail in our Cookie Policy.