Uber Privacy Notice: Drivers and Delivery People
When you use Uber, you trust us with your personal data. We’re committed to keeping that trust. That starts with helping you understand our privacy practices.
This notice describes the personal data (“data”) we collect, how it’s used and shared, and your choices regarding this data. We recommend that you read this along with our privacy overview, which highlights key points about our privacy practices.
I. Overview
II. Data collections and uses
A. The data we collect
B. How we use data
C. Core automated processes
D. Cookies and related technologies
E. Data sharing and disclosure
F. Data retention and deletion
III. Choice and transparency
IV. Legal information
A. Data controllers and Data Protection Officer
B. Our legal bases for using your data
C. Legal framework for data transfers
D. Updates to this Privacy Notice
I. Overview
A. Scope
This notice applies when you use Uber’s apps or websites to request or receive products or services, including rides or deliveries.
This notice describes how we collect and use your data if you request or receive products or services through Uber’s apps or websites, except when you use Uber Freight, Careem or Uber Taxi (South Korea).
This notice specifically applies if you:
- Provide, or start or complete an application to provide, transportation to riders via their Uber account or through partner transportation companies (a “Driver”)
- Provide, or start or complete an application to provide, shopping or delivery services, including via (Uber Eats or Postmates (a “Delivery Person”)
- Are an owner or employee of restaurants or merchants on the Uber Eats or Postmates platforms (a “Merchant”)
This notice also governs Uber’s collection and use of account data from administrators of Uber Health, Central, Uber Direct or Uber for Business customers (“Enterprise Business Customers”).
This notice does not describe Uber’s collection and use of your data if you use Uber to request and receive (instead of provide) services through Uber’s app or websites, including as a rider or order recipient. Uber’s notice describing our collection and use of such data is available here. Those who use Uber to either request, receive or provide services are collectively referred to as “users” in this notice.
Our privacy practices are subject to applicable laws in the places in which we operate. The types of data processing that such laws require, allow, or prohibit vary globally. Therefore, if you travel across national, state or other geographic borders, Uber's data processing practices described in this notice may differ from those in your home country or territory.
In addition, please note the following if you use Uber in:
- Argentina
The Agency of Access to Public Information, in its role of Regulating Body of Law 25.326, is responsible for receiving complaints and reports presented by any data subjects who believe their rights have been impacted by a violation of the local data protection regulation.
- Australia
You may contact Uber here regarding our compliance with the Australian Privacy Principles. Such contacts will be addressed by Uber’s customer service and/or relevant privacy teams within a reasonable timeframe. You may also contact the Office of the Australian Information Commissioner here with concerns regarding such compliance.
- Brazil
Please go here for information regarding Uber’s privacy practices as relates to Brazil’s General Data Protection Law (Lei Geral de Proteção de Dados - LGPD).
- Colombia, Honduras and Jamaica
“Riders” and “drivers” as used in this notice are known respectively as “lessees” and “lessors.”
- European Economic Area (“EEA”), United Kingdom (“UK”), and Switzerland
Due to data protection and other laws in these regions, including the European Union’s General Data Protection Regulation (“GDPR”), Uber does not perform some of the data collections and uses described in this notice in the EEA, UK or Switzerland. Such data collections and uses are indicated with an asterisk (*). If you use Uber outside of these regions, your data may be collected and used for the purposes indicated with an asterisk.
- Kenya
- Mexico
- Nigeria
- Quebec, Canada
You may contact Uber here with questions about Uber’s use of your data for purposes of automated decision making, including regarding the factors considered in connection with such decision, to request correction of any personal data relating to such decisions, and to request review of any such decisions by Uber personnel.
- Switzerland
Uber Switzerland GmbH (Dreikönigstrasse 31A, 8002 Zurich, Switzerland) is Uber’s appointed representative for purposes of the Federal Act on Data Protection and may be contacted here or by mail as relates to that act.
- United States
Please go here for information regarding Uber’s privacy practices as relates to US state privacy laws, including the California Consumer Privacy Act. If you use Uber in Nevada or Washington, please go here for information regarding Uber’s practices as relates to collection and use of consumer health data under those states’ privacy laws.
Please contact us here with any questions regarding our practices in a particular country or region.
II. Data collections and uses
A. The data we collect
Uber collects data:
1. That you provide
2. When you use our services
3. From other sources
Please go here for a summary of the data we collect and how we use it.
Uber collects the following data:
1. Data you provide: This includes:
Data category | Data types |
|---|---|
a. Account information. We collect data when you create or update your Uber account. |
|
b. Background check information. This includes information submitted to Uber, or Uber service providers, during the Driver/Delivery Person application process. |
|
c. Demographic data. We collect demographic data if necessary to enable certain features. For example:
|
|
d. Identity verification information. This refers to the data that we collect to verify your account or identity. |
|
e. User content. This refers to the data that we collect when you:
Please go here (Drivers) and here for more information about how ratings provided by other users are determined and used. |
|
2. Data collected when you use our services: This includes:
Data category | Data types |
|---|---|
a. Location data. We collect this information from your device when the Uber app is running in the foreground (app open and on-screen) or background (app open but not on-screen). |
|
b. Trip/delivery information. This refers to the details we collect about your trip or delivery. |
|
c. Usage data. This refers to data about how you interact with Uber’s apps and websites. |
|
d. Device data. This refers to data about the device(s) you use to access Uber. |
|
e. Communications data. This refers to the data we collect when you communicate with riders and order recipients through Uber’s apps. |
|
f. Biometric data. This refers to data that allows you to be identified based on your physical or biological characteristics. For example, biometric data is generated when we use facial verification technology to confirm that your account is not being used by anyone other than you, or to prevent creation of fraudulent accounts. |
|
3. Data from other sources: These include:
Data category | Data types |
|---|---|
a. Law enforcement officials, public health officials and other government authorities. |
|
b. Marketing partners and service providers. This includes banks in connection with cash back programs,* and data resellers.* |
|
c. Insurance or vehicle solutions providers. |
|
d. Transportation companies. Uber may receive your data from transportation companies, such as fleets you work for. |
|
e. Uber business partners (account creation and access, and APIs). Uber may receive your data from business partners through which you create or access your Uber account, such as payment providers, social media services, or apps or websites that use Uber’s APIs or whose APIs Uber uses. |
|
f. Uber business partners (debit or credit cards). Uber may receive your data from business partners in connection with debit or credit cards issued by a financial institution in partnership with Uber to the extent disclosed in the terms and conditions for the card. |
|
g. Users or others providing information in connection with customer support issues, claims or disputes. |
|
h. Users participating in Uber’s referral programs. For example, if you are referred to Uber by another user, we receive your data from that user. |
|
B. How we use data
Uber uses data to enable reliable and convenient transportation, delivery, and other products and services. We also use data:
- To enhance the safety and security of our users and services, and to prevent and detect fraud
- For marketing and advertising
- To enable communications between users
- For customer support
- For research and development
- To send non-marketing communications to users
- In connection with legal proceedings
1. To provide our services. Uber uses data to provide, personalize, maintain, and improve our services.
Data uses | Data used includes |
|---|---|
a. Creating and updating your account. |
|
b. Enabling services and features. This includes:
|
|
c. Calculating rider/recipient prices and driver/delivery person fares. |
|
d. Processing payments and enabling payment and e-money products such as Uber Money. |
|
e. Personalizing your account. For example, we may present you with personalized trip or delivery opportunities, including those based on your location or previous trips or deliveries. This may include determining your eligibility to provide certain categories of trips, such as through Uber for teens or Uber Reserve, based on factors previous trips or deliveries. |
|
f. Generating receipts. |
|
g. Informing you of changes to our terms, services, or policies. |
|
h. Facilitating insurance, vehicle, invoicing or financing solutions. |
|
h. Performing necessary operations to maintain our services, including to troubleshoot software bugs and operational problems. |
|
2. For safety, security, and fraud prevention and detection. We use your data to help maintain the safety and security of our services and users.
Data uses | Data used includes |
|---|---|
a. Verifying your account, identity and compliance with Uber’s terms, safety requirements and Community Guidelines. This includes:
|
|
b. Preventing, detecting, and combating fraud. |
|
c. Predicting and helping avoid pairings of users that may result in increased risk of conflict,* or where one user has previously given the other a low (for instance, one star) rating. |
|
d. Identifying potentially unsafe Drivers and driving. This can lead to your receiving messages encouraging safer driving, and/or account deactivation following human review. |
|
e. Providing live support from safety experts during trips or deliveries. |
|
3. For marketing and advertising. Uber uses data (except Guest Users’ data) to market its services, and those of Uber partners.
Data uses | Data used includes |
|---|---|
a. Personalizing marketing communications and ads relating to Uber products and services, and those offered by other companies. For example, Uber may:
|
|
b. Measuring the effectiveness of the marketing communications and ads described above. |
|
4. To enable communications between users.
Data uses | Data used includes |
|---|---|
For example, a rider may message or call you to confirm a pickup location or retrieve a lost item. |
|
5. For customer support.
Data uses | Data used includes |
|---|---|
This includes investigating and addressing user concerns, monitoring and improving our customer support responses and processes, and identifying potential participants in research studies relating to customer support issues. |
|
6. For research and development.
Data uses | Data used includes |
|---|---|
We use data for analysis, research and product development, including training machine learning models. This helps us make our services more convenient and easy-to-use, enhance the safety and security of our services, and develop new services and features. |
|
7. For non-marketing communications.
Data uses | Data used includes |
|---|---|
This includes surveys and communications regarding elections, ballots, referenda and other political processes that relate to our services. For example, we may notify you of ballot measures or pending legislation relating to Uber’s services where you live. |
|
8. For legal proceedings and requirements.
Data uses | Data used includes |
|---|---|
We use data to investigate or address claims or disputes relating to use of Uber’s services; to satisfy requirements under applicable laws, regulations, operating licenses, agreements or insurance policies; or pursuant to legal process or governmental request, including from law enforcement. |
|
C. Core automated processes
Uber uses automated processes to enable certain parts of our services, including functions essential to our business such as matching, pricing and fraud prevention and detection.
Uber relies on automated processes to enable essential parts of our services, including matching (pairing users requesting and providing transportation and/or delivery services), pricing (determining the amount you are owed for providing such services), safety and fraud detection and prevention. These processes allow Uber to provide a seamless and safe experience to millions of users globally every day.
This section describes how automated matching, pricing, safety, and fraud prevention and detection work, including how they impact your Uber experience and the personal and non-personal data used to enable these processes.
You may contact Uber here if you have questions or concerns regarding these processes.
- 1. Matching
Uber uses algorithms and machine learning models to efficiently match riders and Drivers, or Delivery People and order recipients.
The matching process is triggered when riders or delivery recipients request transportation or deliveries through Uber. Our algorithms then evaluate various factors to determine the best match for a given trip or delivery request based on the available Drivers/Delivery People in the area. These factors include your location, proximity to the rider/order recipient, requested destination, traffic conditions, and historical data (including, in some markets, whether you and the rider have previously reported having negative experiences with each other).
The trip or delivery request is then communicated to you and other Drivers/Delivery Persons matched through this process. Once a ride or delivery is accepted, we send confirmation of the match to the Driver/Delivery Person and the rider/order recipient.
We continually refine our matching process to provide the best experience to all users on our platform, and may consider different factors depending on where you use Uber.
Additional information on Uber’s matching process is available here.
- 2. Pricing
When you provide transportation or a delivery, Uber uses algorithms to determine the amount you’re paid. If you are in a city where the fare is calculated per minute and per mile, you’ll earn a base fare plus additional money for the time and distance you travel (these rates vary by city). If you are in a city where Uber provides an upfront fare that you can review before determining whether to accept the ride or delivery, such fares are calculated based on factors including the current driving conditions, similar destinations, demand for rides at that time, surcharges and reimbursement for tolls, surge pricing and promotions. Uber’s service fees are subtracted from all fares.
Additional information on Uber’s pricing process is available here (Drivers) and here (Delivery People).
- 3. Safety, security, and fraud prevention and detection
Uber uses algorithms and machine learning models to prevent and detect safety incidents or fraud against Uber or our users. This includes efforts to monitor for account takeovers, unauthorized account sharing, altered or false document submissions, duplicate or fake accounts and other suspicious user behaviors.
For example, Uber uses identity verification tools, like Real-Time ID Check, to help verify that your account is being used by you and not someone pretending to be you. The Real-Time ID Check process requires Drivers/Delivery People to occasionally take a real-time selfie before going online. Where permitted by law, we may also use facial recognition technology to compare your selfie to your profile photo to verify that you are the person using your account, and that it is not being used by other people.
We also use automated processes to validate your ID documents and profile photo associated with your account. These include checks to verify that (1) the driver’s license you submit at or after onboarding is valid, unaltered, and not associated with any other account; and (2) the profile photo you submit is of a real person and isn’t digitally altered, manipulated or associated with any other account.*
If these processes flag your documents or photos as potentially fraudulent or not a match, specialized customer support agents will manually review them. If these agents determine that the documents or photos are invalid, don’t match or are otherwise noncompliant, your account may be deactivated. You have the right to appeal deactivation of your account. Please go here for more information on Uber’s deactivation process.
Uber also uses tools that look for patterns that may indicate fraudulent or unsafe behavior, such as those which vary significantly from typical user behavior. To do this, Uber performs real-time monitoring of information collected from or generated by users, including location data, payment information and Uber usage. We also examine historical data and compare it against real-time data to help detect suspicious behavior.
Uber may limit your access to our services, or require that you undertake a particular action such as verifying your identity before allowing such access, if Uber detects potential fraudulent or unsafe activity.
You may contact Uber Support here if you have questions or concerns about these processes.
E. Data sharing and disclosure
We share your data with other users where necessary to provide our services or features, at your request, or with your consent. We also share data with our affiliates, subsidiaries, service providers and partners; for legal reasons; or in connection with claims or disputes.
Uber may share data:
1. With other users
This may include sharing data with:
Recipient | Data shared |
|---|---|
Your rider or order recipient. |
|
Restaurants/Merchants from which you provide deliveries. |
|
People who refer you to Uber. We may share your data as necessary to determine their referral earnings. |
|
Enterprise Business Customers. If you provide a ride or delivery for an Enterprise Business Customer, we will share your data with that customer. |
|
2. Upon request or with your consent
This may include sharing data with:
Recipient | Data shared |
|---|---|
Uber business partners. We share data with companies whose apps or websites you access through Uber, including for purposes of promotions, contests or specialized services. | Depending on the app or website you access through Uber, and for what purpose, may include:
|
Emergency services. We enable you to share your data with police, fire, and ambulance services in the event of an emergency or after certain incidents. For more information, please go to the “Choice and transparency” and “Emergency data sharing” sections below. |
|
Insurance companies. If you are involved in an incident, or report or submit a claim to an insurance company relating to Uber’s services, Uber will share data with that insurance company for the purpose of adjusting or handling that claim. | Data necessary to adjust or handle the claim, which may include:
|
3. With Uber service providers and business partners
These include the third parties, or categories of third parties, listed below. Where a third party is identified, please go to their linked privacy notices for information regarding their collection and use of personal data.
Accountants, consultants, lawyers, and other professional service providers.
Ad and marketing partners and providers, including ad and marketing publishers (such as social media platforms), ad networks and advertisers, ad technology vendors, measurement and analytics providers, and other service providers. Uber uses these vendors to reach or better understand current and potential users of Uber services and measure and improve ad effectiveness.
This also includes ad intermediaries, such as Google, The Trade Desk, and others. We share data including advertising or device identifier, hashed email address, approximate location, and ad interaction data with these intermediaries to enable their services and for such other purposes as are disclosed in their privacy notices. You may opt out from ad personalization here. For more information regarding these intermediaries’ privacy practices, including how to submit requests to them relating to their handling of personal data, please go to their privacy notice linked above.
- Cloud storage providers.
- Customer support platform and service providers.
- Google, in connection with the use of Google Maps in Uber’s apps.
- Identity verification and risk solutions providers.
- Payment processors and facilitators, including PayPal and Hyperwallet.
- Providers of bikes and scooters that can be rented through Uber apps, such as Lime and Tembici.
- Research partners, including those performing surveys or research projects in partnership with Uber or on Uber’s behalf.
- Social media companies, including Meta and TikTok, in connection with Uber’s use of their tools in Uber’s apps and websites.
- Service providers that assist Uber to enhance the safety and security of Uber apps and services.
- Service providers that provide us with artificial intelligence and machine learning tools and services.
- Third-party vehicle suppliers, including fleet and rental partners.
4. With Uber subsidiaries and affiliates
We share data with our subsidiaries and affiliates to help us provide our services or conduct data processing on our behalf.
5. For legal reasons or in the event of a claim or dispute
Uber may share your data if we believe it’s required by applicable law, regulation, operating license or agreement, legal process or governmental request, insurance policy, or where the disclosure is otherwise appropriate due to safety or similar concerns.
This includes sharing data with law enforcement officials, public health officials, other government authorities, insurance companies, or other third parties as necessary to enforce our terms of service, user agreements, or other policies; to protect Uber’s rights or property or the rights, safety or property of others; or in the event of a claim or dispute relating to the use of our services. In the event of a dispute relating to use of another person’s credit card, we may be required by law to share a user’s data, including ride or delivery information, with the owner of that credit card.
For more information, please see Uber’s Guidelines for United States Law Enforcement, Guidelines for Law Enforcement Authorities - Outside the United States, and Guidelines for Third Party Data Requests and Service of Legal Documents.
We may also share data with others in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company.
F. Data retention and deletion
Uber retains your data for as long as necessary for the purposes described above. Users may request account deletion through the Uber apps and websites.
Uber retains your data for as long as necessary for the purposes described above, which varies depending on data type, the category of user to whom the data relates, the purposes for which we collected the data, and whether the data must be retained after an account deletion request for the purposes described below.
For example, we retain data:
- For the life of your account if such data is necessary to provide our services (such as account data), plus an additional 7 years for purposes of Uber’s legal and regulatory requirements
- For defined periods as necessary, including as necessary to meet tax, insurance, legal or regulatory requirements (for example, we retain transaction information for 7 years)
You may request that we delete your account here or through the Privacy menus in the Uber app.
Following an account deletion request, we delete your account and data, except as necessary for purposes of safety, security, fraud prevention or compliance with legal requirements, or because of issues relating to your account (such as an outstanding credit or an unresolved claim or dispute).
If you request account deletion, we will generally delete your data within 90 days of an account deletion request, except where retention is necessary for purposes of safety, security, fraud prevention or compliance with legal requirements (including in connection with actual or potential tax, litigation or insurance claims). This generally means that we may retain certain data of yours for 7 years after a deletion request.
III. Choice and transparency
Uber enables you to access and/or control data that Uber collects, including through:
- Privacy settings
- Device permissions
- In-app ratings pages
- Marketing and advertising choices
You may also request access to or copies of your data, make changes or updates to your account, request account deletion, or request that Uber restrict its processing of your data.
1. Privacy settings
You can set or update your preferences regarding location data collection and sharing, emergency data sharing, and notifications in Uber’s Privacy Center, which is accessible via the Privacy menu in the Uber apps.
- Emergency data sharing
You may enable Uber to share your data with authorities if you call the emergency number from your Driver app. When this setting is on, we will automatically share your live location and trip and contact details.
- Third-party app access
You may authorize third-party applications to access your Uber account data to enable additional features. You can review/withdraw access by third-party applications here.
2. Device permissions
Most mobile device platforms (such as iOS and Android) have defined certain types of device data that apps cannot access without the device owner’s permission, and these platforms have different methods for how that permission can be obtained. You should check the available settings on your devices, or check with your provider.
3. In-app ratings pages
After every trip, Drivers and riders can rate each other on a scale from 1 to 5. An average of the ratings you receive is displayed to your riders.
You can find your average rating in the Account section of the Uber app, and also access a breakdown of your average rating in Uber’s Privacy Center.
4. Marketing and advertising choices
- Personalized marketing communications from Uber
- Data tracking
You can choose here whether Uber may collect data regarding your visits and actions on third-party apps or websites, for purposes of personalized ads.
- Personalized ads
You can choose whether Uber uses your Uber trip, order or search history to personalize the ads you see on Uber or Uber Eats and Postmates. If you do not allow this, you’ll only see ads personalized based on your location, the time of day, and your current ride or delivery information.
- Cookies and related technologies
For information on how to control Uber’s use of cookies and related technologies, including for purposes of displaying personalized ads, please see our Cookie Notice.
- Notifications: discounts and news
You may enable Uber to send push notifications about discounts and news from Uber here.
5. User data requests
Uber provides a variety of ways to learn about, control, and submit questions and comments about Uber’s handling of your data. In addition to the methods indicated below, you may also submit data requests via our Privacy Inquiry Form here.
- Data access and portability
Depending on where you are located, you may have the right to access your data and to portability of your data.
Regardless of your location, you can access your data, including your profile data and ride or delivery history, through the Uber apps or website.
You can also use our Explore Your Data to view a summary of certain information about your account, such as your rating, ride or delivery count, rewards status, and how long you’ve been using Uber.
You can also use our Download Your Data feature to download a copy of the most requested data relating to use of Uber, including account, usage, communications, and device data.
- Changing or updating data
You can edit your name, phone number, email address, payment method, and profile picture through the Settings menu in Uber’s apps.
- Deleting data
You may request that Uber delete your account through Uber’s Privacy Center.
- Objections, restrictions and complaints
You may request that we stop using all or some of your data, or that we limit our use of your data. This includes objecting to our use of data that is based on Uber’s legitimate interests. Uber may continue to process data after such objection or request to the extent necessary to provide our services, or required or permitted by law.
In addition, depending on your location, you may have the right to file a complaint relating to Uber’s handling of your data with the data protection authority in your country.
IV. Legal Information
A. Data controllers and Data Protection Officer
Uber Technologies, Inc. is the sole controller of the data processed by Uber when you use Uber’s services globally, except where it is a joint controller with other Uber affiliates.
Uber Technologies, Inc. (“UTI”) is controller of the data processed by Uber when you use Uber’s services globally, except that:
- UTI and UBR Pagos Mexico, S.A. de C.V., are controllers of the data of users of Uber’s payment and e-money services in Mexico.
- UTI and Uber B.V. are together with Uber Payments BV joint controllers of the data of users of Uber’s payment and e-money services in the EEA, and with Uber Payments UK Ltd. for users of those services in the UK.
- UTI and Uber B.V. are joint controllers of the data processed in connection with all other uses of Uber’s services in the EEA, UK and Switzerland.
You may also contact Uber's Data Protection Officer at uber.com/privacy-dpo, or by mail to Uber B.V. (Burgerweeshuispad 301, 1076 HR Amsterdam, the Netherlands), regarding issues relating to Uber's processing of your personal data and your data protection rights.
B. Our legal bases for using your data
Depending on where you use our services, and our purpose for using your data, Uber relies on the following legal bases for processing your data:
- Necessity to perform our contract with you
- Consent
- Uber's legitimate interests
- Legal obligation
Data protection laws in some countries and areas, including the EEA, UK, Switzerland, Brazil and Nigeria, only allow Uber to use your data when certain circumstances defined under those laws apply. This is called having a “legal basis” for using your data. The applicability of these legal bases may depend on your location. The chart below indicates the legal bases that Uber has under those laws when they do apply, and it uses your data for the purposes described in this notice.
Legal basis | Description | Data uses |
|---|---|---|
Contract | This legal basis applies when we must use your data in order to enable your use of Uber’s platform, and meet our responsibilities under our Terms of Use. |
|
Consent | This legal basis applies when we notify you of how we will collect and use your data, and you voluntarily agree to that use of your data (in some cases, by enabling that collection and use through a device or Uber setting). Where we rely on consent, you have the right to withdraw your consent at any time, in which case we will cease that collection and use of your data. |
|
Legitimate interests | This legal basis applies when Uber has a legitimate purpose for using your data (such as for purposes of safety, security, and fraud prevention and detection), its processing of data is necessary for that purpose, and the benefit of such purpose is not outweighed by risks to your privacy (such as because you would not expect Uber’s use of your data, or because it would prevent you from exercising your rights). |
|
Legal obligation | This legal basis applies when we are required to use your data to comply with the law. |
|
C. Legal framework for data transfers
Uber operates, and processes user data, globally. We comply with applicable legal frameworks relating to the transfer of data.
Uber operates, and processes user data, globally. This may result in processing of your personal data in countries, including the United States, whose data protection laws may differ from those where you live or are located.
This includes processing of your data on Uber’s servers in the United States, and transferring or enabling access to your data globally, in order to:
- Provide you services wherever you request them
- Provide you access to your information, such as trip / order history, wherever you request it
- Provide access to and responses from Uber’s customer service agents
- Respond to requests for information by governments or law enforcement, as necessary
Uber is committed to protecting your personal data regardless of where you are located or where, or by whom, your personal data is processed. This includes implementing global measures to protect users’ data, including:
- Securing user data when in transit, including through encryption, and at rest.
- Mandating company-wide training regarding privacy and data security.
- Implementing internal policies and procedures to limit access to, and use of, users’ data.
- Limiting government and law enforcement access to user data, except where required by law; there are imminent threats to safety; or users have consented to the access. Please see Uber’s Government Transparency Report for more information regarding our practices relating to law enforcement requests.
When we transfer user data from the EEA, UK and Switzerland, we do so on the basis of the necessity to fulfill our agreements with you, consent, adequacy decisions regarding the country of transfer (available here, here or here, and transfer mechanisms such as the Standard Contractual Clauses adopted by the European Commission (and their approved equivalents for the UK and Switzerland), and the EU-US Data Privacy Framework (“EU-US DPF”), the UK Extension to the EU-US DPF, and the Swiss-US Data Privacy Framework (“Swiss-US DPF”), as set forth by the US Department of Commerce. Such data remains subject to the GDPR or equivalents after such transfer. Users may contact Uber regarding the above, or to request copies of applicable Standard Contractual Clauses here.
UTI has certified to the United States Department of Commerce that it adheres to (1) the EU-US Data Privacy Framework Principles regarding the processing of personal data received from EEA member countries in reliance on the EU-US DPF, and from the UK (and Gibraltar) in reliance on the UK Extension to the EU-US DPF; and (2) the Swiss-US Data Privacy Framework Principles regarding the processing of personal data received from Switzerland in reliance on the Swiss-US DPF. In the event of a conflict between this notice and the Principles mentioned above, the Principles shall govern. In the event that the EU-US DPF or the Swiss-US DPF are invalidated, Uber will transfer data that is subject to these certifications in reliance on the other data transfer mechanisms described above.
If you live in the EEA, UK or Switzerland, please note the following:
- Scope. Uber’s DPF certification applies to personal data originating from the EEA, UK or Switzerland.
- Access. You have the right to access your personal data that is subject to Uber’s DPF certification. For information on how to exercise this right, please see “Choice and transparency” above.
- Onward transfer. Uber is responsible for the transfer of personal data, subject to its certification to third parties. For information regarding the parties to whom Uber may transfer personal data, please see “Data sharing and disclosure” above.
- Request from law enforcement. Uber is required under applicable law to share user data, including that which may be subject to Uber’s certification, pursuant to legal process or governmental request, including from law enforcement.
- Investigation and enforcement. Uber is subject to the investigatory and enforcement powers of the US Federal Trade Commission.
- Questions and disputes. In compliance with the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF, Uber commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF. You may contact Uber here with questions regarding our compliance with these Principles. You may also refer a complaint to your local data protection authority, and Uber will work with that authority to resolve that complaint. In certain circumstances, the DPF provides the right to invoke binding arbitration to resolve complaints not resolved by other means, as described in Annex I to the DPF Principles.
You can learn more about the EU-U.S. DPF and Swiss-U.S. DPF here, and view Uber’s certification, including the scope of data subject to our certification here.
D. Updates to this Privacy Notice
We may occasionally update this notice. If we make significant changes, we will notify you in advance of the changes through the Uber apps or through other means, such as email. We encourage you to periodically review this notice for the latest information on our privacy practices.
Use of our services after an update constitutes consent to the updated notice to the extent permitted by law.
About