Updated 31 January 2020.
What does this policy cover?
- Information we collect and its use
We collect the following types of information about you:
(a) Information you provide us directly
We may ask for certain information such as a username, your first and last names, birthdate, phone number, profession and e-mail address when you request information from, or if you correspond with us. We also collect any messages you send us through the online chat, and may collect information you provide in design request as text or photos you upload to use in your designs. We use this information to operate, maintain, and provide the features and functionality of the Service to you, to correspond with you, and to address any issues you raise about the Service.
(b) Information we receive from third parties
We may receive information about you from third parties. For example, if you access our websites or Service through a third-party connection or log-in, for example, through Facebook Connect, by “following,” “liking,” etc., that third party may pass certain information about your use of its service to us. This information could include, but is not limited to, the user ID associated with your account (for example, your Facebook UID), an access token necessary to access that service, any information that you have permitted the third party to share with us, and any information you have made public in connection with that service. You should always review, and if necessary, adjust your privacy settings on third-party websites and services.
(c) Information we collect from you automatically
We will directly collect analytics data, or use third-party analytics tools, to help us measure traffic and usage trends for the Service. These tools collect information sent by your browser or mobile device, including the pages you visit and other information (in respect of which, please see the paragraph on log file information below) that assists us in improving the Service.
(d) Cookies information and information taken from similar technologies
When you visit us, we will send cookies — small text files containing a string of alphanumeric characters — to your computer that uniquely identifies your browser and lets us help you faster and enhance your navigation through the site. A cookie may also convey information to us about how you use the our site (e.g., the pages you view, the links you click and other actions you take on the site), and allow us or our business partners to track your usage of the site over time.
You can control or reset your cookies and similar technologies through your web browser, which will allow you to customize your cookie preferences and to refuse all cookies or to indicate when a cookie is being sent. However, some features of the Service may not function properly if the ability to accept cookies is disabled.
(e) Log file information
Log file information is automatically reported by your browser or mobile device each time you access the site. When you use our site, our servers automatically record certain log file information. These server logs may include anonymous information such as your web request, Internet Protocol (“IP”) address, browser type, referring / exit pages and URLs, number of clicks and how you interact with links on the site, domain names, landing pages, pages viewed, and other such information..
(f) Device identifiers
When you access the site by or through a mobile device (including but not limited to smart-phones or tablets), we may access, collect, monitor and/or remotely store one or more “device identifiers,” such as a universally unique identifier (“UUID”). Device identifiers are small data files or similar data structures stored on or associated with your mobile device, which uniquely identify your mobile device. A device identifier may be data stored in connection with the device hardware, data stored in connection with the device’s operating system or other software, or data sent to the device by us. A device identifier may convey information to us about how you browse and use the site. A device identifier may remain persistently on your device, to help you log in faster and enhance your navigation through the Site. Some features of the Site may not function properly if use or availability of device identifiers is impaired or disabled. Device Identifiers used by us include the Android Advertising ID and iOS Advertising Identifier.
(g) Location data
Location data will convey to us information about how you browse and use the site and enable us to offer you localized content.
- How we use your information
We use the information we collect about you for the purposes set out above which we have described in more detail below:
- For data analytics: We use information about you to help us improve the DreamSeat site and our users’ experience, including by monitoring aggregate metrics such as total number of visitors, traffic, and demographic patterns.
- To communicate with you about us: We use your contact information to get in touch with you and to send communications. For example, we may send you emails about technical issues, security alerts or administrative matters.
- To promote and drive engagement with our site and team: We use your contact information to get in touch with you about features and offers relating to the products that we think you would be interested in. We also use information we collect about you to make sure that you get the most relevant offers and promotions based on your use of the products, and your preferences. You can opt-out of getting these communications as described below.
- Customer happiness: We use information about you, information that you provide to our customer happiness team, and information about your interactions with the Service to resolve technical issues you experience with the Service, and to ensure that we can repair and improve the Service for all customers.
- For matters that you have specifically consent to: From time to time we may seek your consent to use your information for a particular purpose. Where you consent to our doing so, we will use it for that purpose. Where you no longer want us to use your information for that purpose you may withdraw your consent to this use.
Legal bases for processing information under the GDPR (for users in the EEA)
For users in the the European Economic Area (EEA) Canva processes your information in accordance with European laws and regulations such as the General Data Protection Regulation (GDPR). The GDPR governs how Canva may process your information, and the rights that EEA users have in relation to it.
This means that we will collect and use your information only where:
- We need it to provide you the Service and fulfil our obligations to you under our Terms of Service. This includes providing you with access to the information that you create in your designs or mockups.
- It is in our legitimate interests to provide a useful Service, to send you marketing and to enhance our products via research and development (but only where our legitimate interest isn’t overridden by your interest in protecting your data).
- You consent to us using your information in a certain way – for example, to hear about new features or offers.
- It is necessary for compliance with our legal obligations.
If you have consented to our use of your information you can withdraw that consent at any time. You can either withdraw your consent by emailing firstname.lastname@example.org. Where we are using your information because of a legitimate interest to do so, you have the right to object to that use.
- Sharing your information
We will not rent or sell your information to third parties outside DreamSeat and its group companies (including any parent, subsidiaries and affiliates) without your consent, except as noted in this section:
(a) Who we share your information with
Some of the third parties that e may share your personal information with include providers who assist us with functions such as:
- Customer support and customer management;
- Email services;
- Hosting and storage;
- Analytics; and
- Delivery of physical products;
(b) Sharing with other third parties
DreamSeat will also share your information with third parties in certain circumstances, such as where:
- we are required to do so as a result of a court order, subpoena or other legal requirement;
- we believe that it is necessary to protect you or DreamSeat, such as where we consider that there is a need to investigate potentially fraudulent or criminal activity;
- you have consented to our sharing it with a third party for a particular purpose;
We will also share your information with a third party in circumstances where we sell, divest or transfer DreamSeat or any combination of its products, services, assets and/or businesses to a third party. Information such as customer names and email addresses, User Content and other user information related to us may be among the items sold or otherwise transferred in these types of transactions. We will also sell, assign or otherwise transfer such information in the event of corporate divestitures, mergers, acquisitions, bankruptcies, dissolutions, reorganisations, liquidations, similar transactions or proceedings involving all or a portion of DreamSeat. You will be notified via email and/or a prominent notice if such a transaction takes place and be given notice of any material changes to the way we handle your data under this policy.
We may also aggregate or otherwise strip data of all personally identifying characteristics and may share that aggregated, anonymized data with third parties.
- How we transfer, store and protect your data
- Cross-border transfers of information (for users in the EEA)
For Users in the EEA, where we transfer your information to a third party provider that is not located in the EEA, and is not subject to an adequacy decision by the EU Commission, we will require those third party providers to enter into an agreement that provides appropriate safeguards for your information, including by using the EU Model Clauses.
- Keeping your information safe
DreamSeat cares about the security of your information, and uses appropriate safeguards to preserve the integrity and security of all information collected through the site. Your privacy settings may also be affected by changes to the functionality of third party sites and services that you add to the Canva Service, such as social networks. Canva is not responsible for the functionality or security measures of any third party.
- Compromise of information
In the event that any information under our control is compromised as a result of a breach of security, we will take reasonable steps to investigate the situation and where appropriate, notify those individuals whose information may have been compromised and take other steps, in accordance with any applicable laws and regulations.
- Your choices about your information
(a) You control your account information and settings
You can also stop receiving promotional email communications from us by clicking on the “unsubscribe link” provided in such communications. We make every effort to promptly process all unsubscribe requests.
You may not opt out of Service-related communications (e.g., account verification, purchase and billing confirmations and reminders, changes/updates to features of the Service, technical and security notices) although you can object to us providing these emails by emailing email@example.com.
If you have any questions about reviewing or modifying your account information, you can contact us directly at firstname.lastname@example.org.
(b) Opting out of collection of your information
Please refer to your mobile device or browser’s technical information for instructions on how to delete and disable cookies, and other tracking/recording tools. Depending on your type of device, it may not be possible to delete or disable tracking mechanisms on your mobile device. Note that disabling cookies and/or other tracking tools prevents us or its business partners from tracking your browser’s activities in relation to the Service, and for use in targeted advertising activities by DreamSeat, including via third parties’ websites. However, doing so may disable many of the features available through the Service.
(c) Rights in respect of your Information
The laws of some countries grant particular rights in respect of personal information. In certain circumstances.
Should you wish to make a request in respect of your personal information please contact us at email@example.com. You also have the right to object to our processing of personal data about you in order to send you marketing and we will stop processing data for that purpose.
In some circumstances DreamSeat will not be able to comply with a request that you make in respect of your personal data. For example, we may not be able to provide a copy of your information where it infringes on the rights of another User. We may also be required to retain certain information that you ask us to delete for various reasons, such as where there is a legal requirement to do so. In some cases, you may have shared your information with third parties, such as by publishing a design on a third party’s website. In that case we will not be able to delete the information, and you will need to contact that third party directly.
- How long we keep your information
We will retain your profile information and User Content for a commercially reasonable time, and for as long as we have a valid purpose to do so. In particular, we will retain your information for the purpose of complying with its legal and audit obligations, and for backup and archival purposes..
- Links to other websites and services
- California users’ Privacy Rights
Californian users have additional rights afforded to them under the California Consumer Privacy Act (CCPA).
Categories of personal information collected by DreamSeat
For more details about the personal information DreamSeat has collected in the past year, please see section 1 “Information we collect and its use”. For details on how we use that information, and who we share it with, please see section 2 “How we use your information” and section 3 “Sharing your information”.
DreamSeat does not “sell” (as defined in the CCPA) the personal information of our users.
Making a request in relation to your personal information
The CCPA gives California consumers various rights with respect to the personal information we collect, including the right to (subject to certain limitations):
- Request to access the personal information we have about you; and
- Request that we delete all of your personal information.
California users may make a request by contacting us at firstname.lastname@example.org.
- Changes to this Policy
We may update this policy from time to time to reflect our current practice and ensure compliance with applicable laws. When we post changes to this policy, we will revise the “Last Updated” date at the top of this policy. If we make any material changes to the way we collect, use, store and/or share your personal information, we will notify you by prominently posting notice of the changes on our website and/or sending an email to the email address associated with your account. We recommend that you check this page from time to time to inform yourself of any changes.
- How to contact us
- Email: email@example.com.