Instacart may transfer your personal data to servers or partners located in countries outside your own, including from Canada to the United States, where different privacy laws apply.
Canadian Instacart users' personal data is transferred to the United States, where it is subject to US surveillance laws and may not benefit from the same level of privacy protection as under Canada's PIPEDA.
Cross-platform context
See how other platforms handle Cross-Border Data Transfers and similar clauses.
Compare across platforms →If your data is transferred to the US from Canada, it becomes subject to US government access laws and may receive fewer legal protections than under Canadian privacy law.
(1) REGULATORY FRAMEWORK: Cross-border transfers from Canada to the US are governed by PIPEDA (S.C. 2000, c. 5, Schedule 1, Principle 4.1.3), which requires organizations to use contractual or other means to provide comparable protection to personal information transferred to third parties in other jurisdictions. Canada's Law 25 (Quebec) imposes heightened transfer restrictions including privacy impact assessments. The EU GDPR Chapter V framework (Arts. 44-49) applies if EU residents' data is involved, though the policy appears primarily US/Canada focused. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.