Data Privacy Framework Statement

This Data Privacy Framework Statement is effective as of October 10, 2023.

Canva US Inc. (“Canva”) adheres to the EU-U.S. DPF Principles, as set forth by the U.S. Department of Commerce, regarding the processing of personal information transferred from the European Union to the United States in reliance on the EU-U.S. DPF, and from the United Kingdom (and Gibraltar) to the United States in reliance on the UK Extension to the EU-U.S. DPF. Canva similarly adheres to the Swiss-U.S. DPF Principles when processing personal information transferred from Switzerland in reliance on the Swiss-U.S. DPF.

To learn more about the DPF program, and to view the scope of Canva’s certification, please visit https://www.dataprivacyframework.gov(opens in a new tab or window) and to view the scope of Canva’s certification, please visit our page on the Data Privacy Framework List(opens in a new tab or window) with Canva’s certification. Canva is subject to the investigatory and enforcement powers of the Federal Trade Commission.

This Data Privacy Framework Statement (the “Statement”) supplements the Canva Privacy Policy(opens in a new tab or window), and unless specifically defined in this Statement, the terms in this Statement have the same meaning as the ones in Canva Privacy Policy. If there is any conflict between the terms in this Statement and the applicable DPF Principles, the applicable DPF Principles shall govern. Additional information on how Canva processes personal information in compliance with the DPF Principles may be found in the following sections of the Canva Privacy Policy:

Canva may also disclose personal information, in accordance with our Authority Request Policy(opens in a new tab or window), in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Canva may be liable in accordance with the DPF Principles for onward transfers of personal data governed by the DPF program to third parties processing personal data on our behalf.

Canva also commits to resolve complaints about your privacy and our collection or use of personal information transferred from the EU, United Kingdom (and Gibraltar) or Switzerland to the U.S. in compliance with the DPF Principles. If you have any questions about this Statement or wish to make a complaint, you may contact us at privacy@canva.com(opens in a new tab or window).

If you do not receive timely acknowledgment of your DPF related complaint from us, or if your complaint is not satisfactorily addressed, you may contact or visit the JAMS Data Privacy Framework Dispute Resolution Website(opens in a new tab or window) for more information and to file a complaint, at no cost to you. Under certain conditions(opens in a new tab or window), you may invoke binding arbitration for certain residual claims.