This analysis describes what Canva's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
How other platforms handle this
the data controller responsible for Service Data we collect for Google Workspace and Google Workspace for Education is Google LLC, and the data controller responsible for Service Data we collect for Google Cloud Platform is Cloud Brasil Computação e Serviços de Dados Ltda.
If you are accessing the Website from a location outside the EEA, U.K., or Canada, you understand that we apply U.S. law and the U.S. advertising industry self-regulatory program to Tracking Technologies associated with the Website.
In the EU and EEA, the choice of Texas governing law shall not apply only where a mandatory consumer protection law explicitly prohibits such choice of law provisions.
"For the purposes of the GDPR and UK GDPR, Canva Pty Ltd is the controller of your personal data. Canva Pty Ltd's registered address is at 110 Kippax St, Surry Hills, NSW, Australia 2010.Excerpt from Canva's Privacy Policy
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The clause states: “For the purposes of the GDPR and UK GDPR, Canva Pty Ltd is the controller of your personal data. Canva Pty Ltd's registered address is at 110 Kippax St, Surry Hills, NSW, Australia 2010.”
ConductAtlas has identified this type of provision across 267 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Canva.