Candidate Privacy Notice

At Canva, we’re on a mission to create the world’s best team. We respect your privacy and security, and want to always ensure we’re living by our values of Making Complex Things Simple as well as Being a Good Human, so this notice explains how we collect, use, store and transform your data, as well as your privacy rights throughout our recruitment process.

In this notice, when we talk about “Data,” we mean information about you (or that could identify you) that we may collect during recruitment or talent acquisition activities. This may include (but is not limited to) your contact details, work history, compensation details, evaluative materials, working rights, information you provide in forms or we received from third parties (such as criminal background checks).We’ll process your Data for Canva’s talent acquisition purposes (including assessing your skills, capabilities and experience in consideration of your suitability for employment with Canva), (if successful) to establish the relationship between you and Canva, and to update you about Canva careers.

Some Data we process comes from you, e.g., when you complete forms, or provide contact details to Canva. Other Data comes from third parties e.g., recruitment agencies or public sources such as LinkedIn. Your Data will be seen by hiring managers, the Talent Acquisition team and relevant Canva team members. If we cannot collect the required Data, we may be unable to process your application or include you in our talent community. If you join Canva, your Data will be kept in your personnel file, if you don’t, your application will be destroyed or de-identified after 24 months, or sooner upon your request, except where a longer period is legally required; we will keep some details so we can stay in touch regarding future opportunities, unless you ask us not to.

We're a global company, and your Data may, in some cases, go overseas to our other offices or service providers in places with different laws and protections. We’ll use appropriate technical and organisational measures and safeguards to protect your Data during transfers and at all other times it is in our care.

If you are based in the European Economic Area or the Philippines, the grounds on which Canva will process your Data are:

when you consent to Canva processing your Data including your sensitive personal information or criminal offence data about you (you can withdraw this at any time)
when processing is necessary to comply with our legal and regulatory obligations; and
when processing is necessary for Canva’s or a third party’s legitimate interests, unless this is overridden by your own interests, rights and freedoms, e.g., confirming candidate suitability for roles at Canva.

Some examples of the Data we process during the recruitment process include:

Creation of talent communities

Publicly available information advertised by individuals for the purpose of professional networking and work opportunities, e.g., LinkedIn profile.

Legitimate interest

Recruitment

Your application and our verification and review of information collected during the interview process and information about work adjustments (e.g., wheelchair access), if any.

Legitimate interest
Legal obligation
Consent

Contact

Your residential address, e-mail address and phone number.

Legitimate interest

Security and safety

CCTV images and office access records for in-person recruitment activities (e.g., onsite interviews). Third-party criminal background checks to ensure our team members and contacts are safe from threats and harm.

Legitimate interest
Consent

Sensitive personal information

We do not request or seek to collect this during talent acquisition, except for citizenship and right to work status. But it may be inadvertently collected.

Legal obligation
Consent

We sometimes rely on third-party products and services to assist us with our recruitment process. Such products and services are provided under the terms and conditions (including privacy notices) of the vendors that provide them. Canva does not control how these vendors use the personal data they collect.

California Supplement

This California Supplement is provided pursuant to the California Consumer Privacy Act of 2018 ("CCPA"). It applies to California residents that apply to Canva.We collect and process Data about you for the purposes listed above in the table and below in this supplement. The categories of Data we collect about you include:

Identifiers and personal details, such as your name;
Contact details, such as your phone number, residential address, and email address;
Professional or employment-related information, such as employment details, position, performance, work history, notice periods, work status, and other information you provide in application forms;
Education and background information, such as academic qualifications and details, professional admissions, work status and police and criminal record checks, and other information you provide in application forms;
Compensation and benefits information, such as information associated with your salary/compensation, benefits, vacation and time/off entitlements and similar information; and
Protected class information, such as your citizenship and right to work information.

Our business purposes for collecting and processing the above-listed Data include:

Managing our recruitment process and talent community;
Contacting you or others on your behalf, such as your emergency contacts;
Maintaining appropriate business records during the application/interview process;
Assessing and making hiring decisions about new team members; and
Complying with our obligations under applicable laws.

How to get in touch

We aim to be as transparent as possible with the data we keep, and are happy to answer questions, or remove data at your request, if it’s possible for us to do so. Depending on where you live, you may have certain rights in relation to your Data such as to request access to or a correction or deletion of your Data or to object to it being processed. The Data Controller of your Data is listed below. For questions or concerns about your Data, please contact us at privacy@canva.com (or in the Philippines dpo_csol@canva.com), we'd love to help. If we can’t resolve your concerns (we hope we can!), you may also raise your concerns to your local statutory authority. If you are in the Philippines, the local statutory authority is the National Privacy Commission.