Candidate Privacy Notice

At Canva, we’re on a mission to create the world’s best team. We respect your privacy and security, and want to always ensure we’re living by our values of Making Complex Things Simple as well as Being a Good Human, so this notice explains how we collect, use, store and transform your data, as well as your privacy rights throughout our recruitment process.

In this notice, when we talk about “Data,” we mean information about you (or that could identify you) that we may collect during recruitment or talent acquisition activities. This may include (but is not limited to) your contact details, work history, compensation details, evaluative materials, working rights, information you provide in forms or we received from third parties (such as criminal background checks).

We’ll process your Data for Canva’s talent acquisition purposes (including assessing your skills, capabilities and experience in consideration of your suitability for employment with Canva), (if successful) to establish the relationship between you and Canva, and to update you about Canva careers. Some Data we collect comes from you, e.g., when you complete forms, or provide contact details to Canva. Other Data comes from third parties e.g., recruitment agencies or public sources such as LinkedIn. Your Data will be seen by hiring managers, the Talent Acquisition team and relevant Canva team members. Some of this Data (e.g., name, email and phone number) is essential. If we cannot collect this information, we will be unable to include you in our talent community. Other Data, such as your work history, compensation details or working rights, is required to evaluate your suitability for employment with Canva. If we cannot collect. this Data, we may be unable to process your application. If you join Canva, your Data will be kept in your personnel file, if you don’t, your application will be destroyed or de-identified when we no longer need it, or sooner upon your request, except where we are required by law to keep it. We will keep some details so we can stay in touch regarding future opportunities, unless you ask us not to.

We're a global company, and your Data may, in some cases, go overseas to our other offices or service providers in places with different laws and protections. A list of these places is set out at the end of this notice. We’ll use appropriate technical and organisational measures and safeguards to protect your Data during transfers and at all other times it is in our care.

If you are based in the European Economic Area or the Philippines, the grounds on which Canva will process your Data are:

  1. when you consent to Canva processing your Data including your sensitive personal information or criminal offence data about you (you can withdraw this at any time)
  2. when processing is necessary to comply with our legal and regulatory obligations; and
  3. when processing is necessary for Canva’s or a third party’s legitimate interests, unless this is overridden by your own interests, rights and freedoms, e.g., confirming candidate suitability for roles at Canva.

Some examples of the Data we process during the recruitment process include:

Creation of talent communities

Publicly available information advertised by individuals for the purpose of professional networking and work opportunities, e.g., LinkedIn profile.

  • Legitimate interest

Recruitment

Your application and our verification and review of information collected during the interview process and information about work adjustments (e.g., wheelchair access), if any.

  • Legitimate interest
  • Legal obligation
  • Consent

Contact

Your residential address, e-mail address and phone number.

  • Legitimate interest

Security and safety

CCTV images and office access records for in-person recruitment activities (e.g., onsite interviews). Third-party criminal background checks to ensure our team members and contacts are safe from threats and harm.

  • Legitimate interest
  • Consent

Sensitive personal information

We do not request or seek to collect this during talent acquisition, except for citizenship and right to work status. But it may be inadvertently collected.

  • Legal obligation
  • Consent

We sometimes rely on third-party products and services to assist us with our recruitment process. Such products and services are provided under the terms and conditions (including privacy notices) of the vendors that provide them. Canva does not control how these vendors use the personal data they collect.

California Supplement

This California Supplement is provided pursuant to the California Consumer Privacy Act of 2018 ("CCPA"). It applies to California residents that apply to Canva.

We collect and process Data about you for the purposes listed above in the table and below in this supplement. The categories of Data we collect about you include:

  • Identifiers and personal details, such as your name;
  • Contact details, such as your phone number, residential address, and email address;
  • Professional or employment-related information, such as employment details, position, performance, work history, notice periods, work status, and other information you provide in application forms;
  • Education and background information, such as academic qualifications and details, professional admissions, work status and police and criminal record checks, and other information you provide in application forms;
  • Compensation and benefits information, such as information associated with your salary/compensation, benefits, vacation and time/off entitlements and similar information; and
  • Protected class information, such as your citizenship and right to work information.

Our business purposes for collecting and processing the above-listed Data include:

  • Managing our recruitment process and talent community;
  • Contacting you or others on your behalf, such as your emergency contacts;
  • Maintaining appropriate business records during the application/interview process;
  • Assessing and making hiring decisions about new team members; and
  • Complying with our obligations under applicable laws.

Where your data goes

In order to operate our global talent community, we may send your Data to our other offices located in Austria, China, Czech Republic, New Zealand, Philippines, United Kingdom and the United States.

Your Data may also be held by some of our service providers (such as Beamery, Lever and BrightHire), which are located in the United States.

How to get in touch

We aim to be as transparent as possible with the data we keep, and are happy to answer questions, or remove data at your request, if it’s possible for us to do so.

Depending on where you live, you may have certain rights in relation to your Data such as to request access to or a correction or deletion of your Data or to object to it being processed. The Data Controller of your Data is listed below. For questions or concerns about your Data, please contact us at privacy@canva.com(opens in a new tab or window) (or in the Philippines dpo_csol@canva.com(opens in a new tab or window)), we'd love to help. If we can’t resolve your concerns (we hope we can!), you may also raise your concerns to your local statutory authority. If you are in the Philippines, the local statutory authority is the National Privacy Commission. In Australia, this is the OAIC at https://www.oaic.gov.au/about-us/contact-us(opens in a new tab or window).

Philippines

CANVA SOLUTIONS, INC.

5/F Coherco Corporate Center

116 V.A. Rufino St., Legaspi Village, Makati City

Metro Manila, Philippines

dpo_csol@canva.com

United Kingdom

European Data Protection Office UK (EDPO UK)

8 Northumberland Avenue, London

WC2N 5BY, United Kingdom

European Union

European Data Protection Office (EDPO)

Avenue Huart Hamoir 71, 1030

Brussels, Belgium