This analysis describes what Canva's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This clause operationalizes the company's compliance obligations under privacy regulations that grant individuals control over their personal data. The provision establishes the procedural mechanism through which users initiate the exercise of these rights and clarifies that availability of specific rights depends on applicable jurisdiction.
The updated privacy policy no longer explicitly discloses that Canva uses cookies to personalize ads, analyze website performance, or tailor content on partner sites. Previously, the policy stated these purposes and directed users to the cookie policy for more information and choice. The revised policy now mentions only that essential cookies are used to make Canva work. This change removes transparency about non-essential cookie uses and eliminates the cookie consent interface (Accept all cookies / Manage cookies buttons) that was previously presented in the privacy policy document itself.
View change record →The updated privacy policy no longer includes explicit language describing Canva's use of non-essential cookies for personalization, advertising tailoring, and website analytics. Previously, the policy stated that Canva would use these cookies only if users accepted. The removal of this disclosure means the policy no longer clearly explains these cookie categories or presents a consent interaction for non-essential cookies at the point where this information was previously disclosed. Depending on applicable cookie law and Canva's implementation, users may need to consult additional documentation such as a separate cookie policy to understand how non-essential cookies are managed.
View change record →The updated privacy policy no longer explicitly discloses optional cookie uses or provides cookie preference controls on the privacy policy page itself. Previously, Canva stated it would use non-essential cookies for personalization, ad targeting, and analytics only if users accepted, and offered 'Accept all cookies' and 'Manage cookies' options. The removal of this disclosure and consent mechanism may affect how users understand cookie practices and when consent is obtained. Users who previously accessed cookie preferences through the privacy policy will need to locate these controls elsewhere on the Canva platform if they remain available.
View change record →The provision authorizes users to request access to, correction of, or deletion of personal information held by Canva, and to request data portability or processing restrictions, with availability of rights determined by location. Users must initiate these requests through designated channels for the company to process the request.
Cross-platform context
See how other platforms handle User Rights and Access Requests and similar clauses.
Compare across platforms →Monitoring
Canva has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Depending on your location, you may have certain rights regarding your personal information, including the right to access, correct, or delete the personal information we hold about you, the right to data portability, the right to object to or restrict processing of your personal information, and the right to withdraw consent where we rely on consent to process your personal information. To exercise your rights, please submit a request to us via our privacy request portal or contact us at privacy@canva.com.— Excerpt from Canva's Canva Privacy Policy
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This clause operationalizes the company's compliance obligations under privacy regulations that grant individuals control over their personal data. The provision establishes the procedural mechanism through which users initiate the exercise of these rights and clarifies that availability of specific rights depends on applicable jurisdiction.
The provision authorizes users to request access to, correction of, or deletion of personal information held by Canva, and to request data portability or processing restrictions, with availability of rights determined by location. Users must initiate these requests through designated channels for the company to process the request.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Canva.