Privacy Policy

Last updated: 7 September 2026

The Canva community programmes in Pakistan, the United Arab Emirates and Saudi Arabia, and the Affinity campus programme, are run by Lift Solutions (Private) Limited ("Lift", "we"), a Canva-recognised community partner. When you register for a workshop, apply to a programme, give feedback or fill in a community form on itslift.com, your data is collected and held by Lift, not by Canva. Canva does not endorse the views expressed at community events and does not receive event revenue.

This policy explains what we collect, why, who can see it, how long we keep it and how to exercise your rights. It applies to every page under itslift.com/canva, /uae, /ksa, /affinity, /e, /r, /f and /forms. Lift's own business website is covered by the separate LIFT privacy policy.

1. What we collect

Only what the form you fill in asks for. Depending on the form, that can include:

Contact details: name, email address, WhatsApp or phone number, city.
Background: university or organisation, department, year of study, current role, links you choose to share (LinkedIn, Instagram, portfolio, a video).
Programme answers: your Canva or Affinity experience, what you want to learn, availability, and free-text answers such as why you are applying.
Workshop registration: the fields above plus gender, how you heard about the session, and whether you consent to appearing in photos or video. Some venues require an identity number for entry; where a form asks for it, it is used only for that purpose.
Volunteers (City Leads, Ambassadors, Trainers): a profile photo if you add one, a postal address and shirt size for kit dispatch, and the agreements you sign on the portal.
Attendance and feedback: check-in at the door, your rating and any testimonial you give, and whether you allow it to be featured.
Technical: standard server logs and, on public pages, anonymous usage analytics (Google Analytics).

2. Why we use it

To process your registration or application and tell you the outcome.
To run the session you registered for: confirmations, reminders, check-in, certificates and follow-up.
To operate the volunteer programmes: onboarding, kit dispatch, recognition and reporting on programme impact (in aggregate).
To tell you about upcoming sessions and programmes, only if you ticked the box saying we may. You can withdraw at any time.
To keep the forms and portal secure (rate limiting, spam protection, access logs).

3. Who can see it

Lift staff and the volunteer City Leads and Ambassadors who run the programme in your city, through a permissioned portal where each person sees only the workshops and applicants for their own city. Canva's community team can see aggregate numbers and, where needed to run the programme with us, individual records. We do not sell your data and we do not share it with advertisers.

Service providers that process data on our behalf: Hostinger (hosting and database, servers currently located in Malaysia), Resend (sending programme email, including delivery and open tracking), and Google Analytics (anonymous usage statistics on public pages). Your data may therefore be stored outside your country.

4. Photos and video

Workshops are documented for programme reporting and approved communications. The registration form asks whether you consent to appearing in photos or video; if you say no, we do our best to keep you out of published material, and you can tell the organiser on the day.

5. How long we keep it

Workshop registrations and feedback: up to 24 months after the session, then deleted or anonymised for statistics.
Programme applications: up to 24 months after the decision, so we can consider you for a later intake unless you ask us not to.
Volunteer records: for the length of your role plus 12 months, except signed agreements, which we keep as long as the law requires.
Access and security logs: 90 days.

6. Your rights

You can ask us at any time to tell you what we hold about you, to correct it, to delete it, or to stop contacting you. Email yasin@canva.com from the address you registered with and we will respond within 14 days. Deleting your data may mean we cannot keep your place at a session or in a programme.

7. Security

Data is transmitted over HTTPS and stored in a database that only the portal and named administrators can reach. Portal access is by individual accounts with roles, sessions expire, and administrative actions are logged. No system is perfectly secure; if we ever become aware of a breach affecting your data, we will tell you.

8. Young people

Sessions are open to students of all ages. If you are under 18, please register with a parent or guardian's knowledge; some forms ask for a guardian's details where a venue requires them.

9. Changes

We will post any changes on this page and update the date at the top. Substantial changes will also be announced to the community.

10. Contact

Lift Solutions (Private) Limited, Islamabad, Pakistan. Data questions: yasin@canva.com. Business questions: hello@itslift.com.