Strava · Strava Privacy Policy · View original document ↗

Cross-Border Data Transfers

Medium severity Common · 84 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Strava Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Strava transfers your personal data internationally, including to the United States, using Standard Contractual Clauses and other mechanisms to comply with data protection laws.

This analysis describes what Strava's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

If you live in the EU or UK, your personal data is transferred to countries with different privacy protections, and the legal mechanisms Strava uses to do this can affect your rights and remedies.

Consumer impact (what this means for users)

Strava collects highly sensitive personal data including precise GPS location, health metrics, and fitness activity, which is used for AI model training, advertising, and publicly accessible features like the Global Heatmap. Consumers should be aware that even with default settings, their anonymized or aggregated activity data may contribute to public features visible to anyone. You can adjust your privacy controls in Strava account settings at https://www.strava.com/settings/privacy to limit data visibility and opt out of certain data uses.

Cross-platform context

See how other platforms handle Cross-Border Data Transfers and similar clauses.

Compare across platforms →

Monitoring

Strava has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

Cross-border transfers rely on Standard Contractual Clauses (SCCs) and potentially other GDPR Chapter V transfer mechanisms. Post-Schrems II, compliance teams must verify that transfer impact assessments have been conducted, supplementary measures are adequate, and that SCCs are updated to the 2021 European Commission standard form. UK GDPR transfer rules also apply separately.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Provision details

Document information
Document
Strava Privacy Policy
Entity
Strava
Document last updated
May 5, 2026
Tracking information
First tracked
March 20, 2026
Last verified
March 20, 2026
Record ID
CA-P-00272005
Document ID
CA-D-00272
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
1156b534024a76b2999d213a6517d7a26b1f94ff6ca875c1bf876df9c09a8db7
Analysis generated
March 20, 2026 06:26 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Strava
Document: Strava Privacy Policy
Record ID: CA-P-00272005
Captured: 2026-03-20 06:26:06 UTC
SHA-256: 1156b534024a76b2…
URL: https://conductatlas.com/platform/strava/strava-privacy-policy/cross-border-data-transfers/
Accessed: June 10, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Strava's Cross-Border Data Transfers clause do?

If you live in the EU or UK, your personal data is transferred to countries with different privacy protections, and the legal mechanisms Strava uses to do this can affect your rights and remedies.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 84 platforms. See the full comparison.

Is ConductAtlas affiliated with Strava?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Strava.