EU, EEA, UK, and Swiss users have legal rights under GDPR and equivalent laws to access, fix, delete, export, or object to the processing of their personal data, and can complain to their national privacy regulator if Canva does not respond appropriately.
This analysis describes what Canva's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This clause operationalizes statutory obligations under GDPR and equivalent data protection frameworks by identifying the rights holders are entitled to invoke and establishing the procedural mechanism (email contact) through which Canva processes such requests. The provision ensures the terms acknowledge and facilitate compliance with regional data protection law requirements.
If you are in the EU, EEA, UK, or Switzerland, you have legally enforceable rights over your personal data held by Canva, including rights to access, correct, delete, or export it, and to object to processing for marketing or legitimate interest purposes. If Canva does not respond to your request within the statutory timeframe, you can escalate to your national data protection authority.
How other platforms handle this
You may contact our privacy team with any requests of disclosure, correction, or deletion of your personal information. You may also request suspension of use or suspension of sharing of your personal information with certain third parties.
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have certain rights under applicable data protection law, including the right to access, correct, and delete your personal information, to object to or restrict certain processing, to data portability, and to lodge a complaint with your local supervisory authority. To exercise these rights, please contact us at privacy@canva.com.Excerpt from Canva's Privacy Policy
REGULATORY LANDSCAPE: This provision directly reflects obligations under GDPR Articles 15-22 (data subject rights) and equivalent UK GDPR provisions.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This clause operationalizes statutory obligations under GDPR and equivalent data protection frameworks by identifying the rights holders are entitled to invoke and establishing the procedural mechanism (email contact) through which Canva processes such requests. The provision ensures the terms acknowledge and facilitate compliance with regional data protection law requirements.
If you are in the EU, EEA, UK, or Switzerland, you have legally enforceable rights over your personal data held by Canva, including rights to access, correct, delete, or export it, and to object to processing for marketing or legitimate interest purposes. If Canva does not respond to your request within the statutory timeframe, you can escalate to your national …
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Canva.