Your Data Rights
Last updated: 20 May 2026 · Level 1 Virtual Solutions Ltd (trading as Batra Kard) · ICO: ZC136917
Under UK GDPR (Articles 13 and 14), you have specific rights over the personal data we hold about you. This page explains each right, what it means in practice, and how to exercise it. We respond to all requests within one calendar month of receiving them.
Take action right now from your dashboard
Most data requests can be fulfilled instantly without contacting us. Sign in and use the self-service tools below.
Download My Data exports your profile in XLSX format. Delete My Account starts a 30-day grace period before permanent erasure.
Right to Access (Subject Access Request)
You can request a copy of all personal data we hold about you. The easiest way is to sign in to your dashboard and click "Download My Data", which produces an instant XLSX export of your profile and card data. Alternatively, email [email protected] with the subject line "Subject Access Request" and we'll respond within one calendar month.
Right to Rectification
If any data we hold is inaccurate or incomplete, you have the right to have it corrected. Most profile information, such as your name, job title, phone number, and social links, can be updated directly from your dashboard at any time. For fields you can't edit yourself, email us and we'll correct the record promptly.
Right to Erasure (Right to be Forgotten)
You can request deletion of your account and all associated personal data. In your dashboard, go to Settings and use the "Delete Account" option. This starts a 30-day grace period during which you can cancel the deletion if you change your mind. After 30 days, your account, card data, and personal information are permanently and irreversibly deleted from our systems.
We may retain certain data for longer where required by law, such as transaction records for tax compliance. In those cases we'll tell you what we're keeping and why.
Right to Restrict Processing
You can ask us to pause how we use your data while a dispute or complaint is resolved. This right applies in specific circumstances, for example if you contest the accuracy of data we hold or you've objected to processing and we're assessing whether our legitimate interests override yours. Email [email protected] to make this request.
Right to Data Portability
Where we process your data by automated means on the basis of your consent or a contract with you, you can request a copy in a machine-readable format. Your dashboard's "Download My Data" button exports your data as an XLSX file, which can be opened in Excel, Google Sheets, or any compatible application. You can also email us to request a JSON export.
Right to Object
You can object to us processing your personal data where we rely on legitimate interests as our lawful basis. If you object, we'll stop processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for legal claims. Email [email protected] to raise an objection.
Rights Related to Automated Decision-Making
UK GDPR gives you rights where decisions about you are made solely by automated processing and produce significant effects. We don't use automated decision-making or profiling in a way that produces legal or similarly significant effects on you. All account-related decisions (for example, account suspension) involve human review.
How to Exercise Your Rights
For any request not covered by the self-service dashboard tools, contact us at [email protected]. Please include enough information for us to identify your account, typically your registered email address. We'll confirm receipt within 3 working days and respond in full within one calendar month. We don't charge a fee for legitimate requests.
In complex cases we may extend this period by a further two months. If we do, we'll let you know within the initial one-month window and explain why.
Response Timeframe
We aim to respond to all data rights requests within one calendar month of receiving them, as required by UK GDPR Article 12. The clock starts from the day we receive your request or, if we ask for clarification, from the day you provide the information we need.
Right to Complain to the ICO
If you're unhappy with how we've handled your data or a rights request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
- Online: ico.org.uk/make-a-complaint
- Phone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We'd always prefer you contact us first so we can try to resolve your concern directly, but you're entitled to go straight to the ICO if you prefer.
Our ICO registration number is ZC136917 .
Level 1 Virtual Solutions Ltd, trading as Batra Kard. ICO registration: ZC136917. See also: Privacy Policy · Terms of Service · Cookie Policy