Privacy Policy Addendum for Drivers in South Korea
This addendum ("Addendum") supplements the Uber Privacy Notice and applies specifically to Drivers (individuals who provide transportation to riders directly or through partner transportation companies) using Uber services in South Korea, in accordance with the Personal Information Protection Act (PIPA). Uber services, including Uber apps, websites, content, products, or other services branded under the “Uber” brand, including the “Uber Taxi” brand, are provided by UT LLC. The Addendum also covers other data collections related to Uber services, such as the personal data of those who start but do not complete applications to be drivers.
The Addendum provides additional details on how your personal data is collected and processed when you use Uber services. For a complete understanding, please read this Addendum together with the Uber Privacy Notice: Drivers and Delivery People (“Uber Privacy Notice”).
In case of any conflict between the Uber Privacy Notice and this Addendum, this Addendum will prevail.
Table of contents
I. Who controls your personal data?
II. How and why we use your data
III. What data we collect
IV. Our legal basis for using your data
V. Processing of children's data
VI. Retention period of data
VII. Destruction of data
VIII. Third-party provision of data
IX. Additional use and provision of data
X. Delegation of data processing
XI. Overseas transfer of data
XII. Protection of data
XIII. Cookies and third-party technologies
XIV. Additional information of your data rights
XV. Remedies for infringing the rights and interests of data subjects
XVI. Contacts
XVII. Personal location information
XVIII. Updates to the addendum
I. Who controls your personal data?
UT LLC (“Company” or “We”) is the data controller responsible for your personal data when you use Uber services in South Korea.
II. How and why we use your data
We collect and use data to enable reliable and convenient transportation and other products and services. We also use the data we collect:
- To enhance the safety and security of our users and services
- For customer support
- For research and development
- To enable communications between users
- For marketing and advertising
- To send non-marketing communications to users
- In connection with legal proceedings
More specifically, we use the data we collect for purposes including:
- 1. Providing services and features
We use the data we collect to provide, personalize, maintain, and improve our products and services. This includes using the data to:
a. Create and update users’ accounts.
b. Enable transportation and other services/features such as:
- using location data to navigate rider pick-ups and drop-offs, calculate ETAs, and track the progress of rides.
- enabling features that involve data sharing, such as sharing driver name and vehicle information with riders to facilitate pick-ups, or features that enable ETA sharing and fare splitting.
- matching available drivers to users requesting services, including based on personal data such as location and proximity to other users, and user settings / preferences (such as preferred destinations), and non-personal data such as vehicle type requested. Please see here for more information.
- enabling accessibility features.
- enabling features that involve account linking, such as linking with third party reward programs.
c. Calculating prices and fares, including using location data and trip details (such as requested pick-up and drop-off addresses). We may also consider non-personal data or factors, including date and time, estimated distance and time, minimum base fares, tolls, taxes and fees, and surge pricing.
d. Offer, process or facilitate payments
e. Facilitate insurance, vehicle, invoicing, or financing solutions
f. Provide users with trip updates, generate receipts, and inform users of changes to our terms, services or policies.
g. Perform necessary operations to maintain our services, including to troubleshoot software bugs and internal problems.
- 2. Safety, fraud protection and security
We use personal data to help maintain the safety, security, and integrity of our services and users. This includes:
a. Verifying users’ accounts, identity or compliance with safety requirements. For example, we screen riders and drivers before enabling their use of our services and at subsequent intervals, including through reviews of background checks, where permitted by law, to help prevent use of our services by unsafe drivers and/or riders.
b. Using customer service information (including reports of safety incidents), device data (e.g., to detect speeding or harsh braking / acceleration), transaction, and usage data to identify potentially unsafe drivers and driving. This can lead to drivers receiving messages encouraging safer driving, and/or account deactivation following human review
c. Using account, device, location, usage, transaction, wireless carrier, and other data, including communications between users and metadata, to prevent, detect, and combat fraud, including by guest users.
d. Using user ratings and feedback to encourage compliance with our Community Guidelines and as grounds for deactivating drivers with low ratings or who otherwise violated such guidelines.
- 3. Customer support
We use the information we collect (including recordings of customer support calls with notice to and the consent of the user) to provide customer support, including to:
a. Direct questions to the appropriate customer support person
b. Investigate and address user concerns
c. Monitor and improve our customer support responses and processes
- 4. Research and development
We use data for analysis, machine learning, product development, research, and testing. This helps us make our services more convenient and easy-to-use, enhance the safety and security of our services, and develop new services and features.
- 5. Enabling communications between users
For example, a driver may message or call a rider to confirm a pickup location, or a rider may contact a driver to retrieve a lost item.
- 6. Marketing and Advertising
We use data (other than guest users’ data) to market its services, and those of our partners.
a. We specifically use account, approximate location, device and usage data, and trip history to provide ads and marketing communications that are personalized based on users’ observed or inferred location, interests and characteristics. This includes using this data to:
send emails, text messages, push notifications, and in-app messages or other communications marketing or advertising our products, services, features, offers, promotions, sweepstakes, news and events. For example, we may send push notifications suggesting a user’s favorite destinations, or in-app messages offering discounts or promo for products or merchants similar to those a user has previously purchased.
display our advertising on third party apps or websites.
b. We also measure the effectiveness of Company’s ads, and of third party ads displayed in Company’s apps or in connection with our services.
- 7. Non-marketing communications
We may use the data we collect to generate and provide users with receipts; inform them of changes to our terms, services, or policies; or send other communications that aren’t for the purpose of marketing the services or products of us or our partners.
- 8. Legal proceedings and requirements
We may use the personal data we collect to investigate or address claims or disputes relating to use of our services, or as otherwise allowed by applicable law, or as requested by regulators, government entities, and official inquiries.
- 9. Automated decision-making
We use personal data to make automated decisions relating to use of our services. This includes matching available drivers to users requesting services. Users can be matched based on availability, proximity, and other factors.
III. What data we collect
We collect the following data from these sources:
1. Data provided by users
This includes:
a. User profile: We collect data when users create or update their accounts for the Uber services. This may include their name, email, phone number, login name and password, address, profile picture, payment or banking information (including related payment verification information), driver’s license and other government identification documents (which may include document numbers as well as birth date, gender, and photo, but in any event we do not collect your resident registration number or driver’s license number). This also includes vehicle or insurance information of drivers, emergency contact information, and user settings to provide services through Uber services. We may use the photos submitted by users to verify their identities, such as through facial recognition technologies. For more information, please refer to the “How and why we use your data” section of the Addendum.
b. Background check and identity verification: We collect background check and identity verification information for drivers. This may include information such as driver history, and right to work. This information may be collected by an authorized vendor on our behalf.
c. Demographic data: We may collect demographic data about users, including through user surveys.
d. User content: We collect the information users submit when they contact our customer support service, provide ratings or compliments for other users, or otherwise contact us. This may include feedback, photographs or other recordings collected by users. Please see here for more information about how ratings provided by other users are determined and used.
2. Data created during use of our services
This includes:
a. Location data: We collect precise and approximate location from drivers’ mobile devices data when the Uber app is running in the foreground (app open and on-screen) or background (app open but not on-screen) of their mobile device.
b. Transaction information: We collect transaction information related to the use of our services, including the type of services requested or provided, trip details such as date and time, requested pick-up and drop-off point, and payment transaction information (such as amount charged and payment method). Additionally, if someone uses your promotion code, we may associate your name with that person.
c. Usage data: We collect data about how users interact with Uber services. This includes data such as access dates and times, app features or pages viewed, app crashes and other system activity, type of browser, and third-party sites or services used before interacting with Uber services. In some cases, we collect this data through cookies, pixels, tags, and similar tracking technologies that create and maintain unique identifiers.
d. Device data: We may collect data about the devices used to access our services, including the hardware models, device IP address, operating systems and versions, software, preferred languages, unique device identifiers, advertising identifiers, serial numbers, device motion data, and mobile network data.
e. Communications data: We enable users to communicate with each other and with Company through Uber services, including mobile apps and websites. For example, we enable drivers and riders to call, text, or send other files to each other (generally without disclosing their telephone numbers to each other). To provide this service, we receive some data regarding the calls, texts, or other communications, including the date and time of the communications and the content of the communications. We may also use this data for customer support services (including to resolve disputes between users), for safety and security purposes, to improve our products and services, and for analytics.
3. Data from other sources
For items collected from these other sources, please refer to section II.A.3. From other sources of the Uber Privacy Notice.
The sources include:
a. User feedback, such as ratings, feedback, or compliments.
b. Users participating in our referral programs. For example, when a user refers another person, we receive the referred person’s personal data from that user.
c. Uber account owners who request services for or on behalf of other users, or who enable such users to request or receive services through their accounts. This includes owners of corporate accounts (such as Uber for Business customers).
d. Users or others providing information in connection with claims or disputes.
e. Our business partners through which users create or access their Uber services account, such as payment providers, social media services, or apps or websites that use our (or our affiliates’) APIs or whose APIs we (or our affiliates) use.
f. Vendors who help us verify users’ identity, background information, and eligibility to work, for regulatory, safety, and security purposes.
g. Insurance, vehicle, or financial services providers for drivers.
h. Partner transportation companies (for drivers who use our services through an account associated with such a company).
i. Publicly available sources.
j. Marketing service providers or data resellers whose data Company uses for marketing or research.
k. Law enforcement officials, public health officials, and other government authorities.
We may combine the data collected from these sources with other data in our possession.
IV. Our legal basis for using your data
We notify you of the processing of personal data necessary for the provision of Uber services and process such personal information with your consent. We rely on Article 15(1)(1) and (4) of the PIPA for such processing.
In addition, based on Article 15(1)(1) of the PIPA, we process personal data with your consent for the purposes of:
- sending you marketing messages;
- personalizing marketing communications relating to Uber products and services; and
- measuring the effectiveness of the marketing communications.
Otherwise, we may process personal data based on the following legal grounds:
Contractual necessity (Article 15(1)(4) of the PIPA): When you set up your Uber account and/or use the Uber services, including the Driver App, we are entering into a contract defined in your relevant Partner Terms to provide you those services. This legal basis applies when we must use your data in order to provide the services you request and meet our responsibilities under that contract.
Legitimate interests (Article 15(1)(6) of the PIPA): This legal basis applies when we need to use your data for purposes that benefit us or others (including other Uber users) in ways that do not seriously harm your privacy rights.
Legal obligation (Article 15(1)(2) of the PIPA): This legal basis applies when we are required to use your data to comply with applicable laws and regulations.
V. Processing of children's data
We do not intentionally process the data of children under 14 years of age, nor does it knowingly do so.
VI. Retention period of data
For the retention period of your data, please refer to section II.F. Data retention and deletion of the Uber Privacy Notice. We retain your data in accordance with applicable laws and regulations as follows:
- Records regarding labelling and advertising: six (6) months (Article 6(1)1 of Decree of the Act on the Consumer Protection in Electronic Commerce)
- Records regarding execution or withdrawal of a contract: five (5) years (Article 6(1)2 of Decree of the Act on the Consumer Protection in Electronic Commerce)
- Records regarding the payment of a price and the supply of goods and services: five (5) years (Article 6(1)3 of Decree of the Act on the Consumer Protection in Electronic Commerce)
- Records regarding customer services or dispute resolution: three (3) years (Article 6(1)4 of Decree of the Act on the Consumer Protection in Electronic Commerce)
- Log records, IP address: three (3) months (Article 15-2(2) of the Protection of Communications Secrets Act)
- Records regarding processing of personal credit information: three (3) years (Article 20(2) of the Credit Information Use and Protection Act)
VII. Destruction of data
We regularly review data to ensure that information whose purpose, as outlined in the Uber Privacy Notice, has been fulfilled, or whose retention period under applicable laws has expired, is destroyed in accordance with relevant laws and our policies.
Destruction Process: Upon the need for data destruction, we identify the pertinent data and proceed with its disposal following approval from the Chief Privacy Officer.
Destruction Method: We employ all reasonable and feasible measures to ensure data is irrecoverable upon deletion. This includes, but is not limited to:
- Electronic Files: Permanent deletion using technical methods that render files irrecoverable.
- Physical Records: Shredding or incineration of print-outs, documents, and other recording media.
VIII. Third-party provision of data
We share personal data with third parties only with your explicit prior consent, pursuant to Article 17(1)(1) (Consent) of the PIPA, as detailed below:
Recipient | Personal Information Provided | Purpose of Use | Retention Period |
|---|---|---|---|
Uber Technologies, Inc. | Please refer to the "What data we collect" section of the Addendum. | Please refer to the “How and why we use your data” section of the Addendum | Please refer to the “Retention period of data” section of the Addendum |
| User profile and trip information | Supporting UT LLC for customer and internal operations support | Same as above |
Rider |
| Enabling services and features Enabling communications between you and your rider | Until the purposes outlined in the "How and why we use your data" section of the Addendum are fulfilled. |
Rider |
| Issuance of receipts and payment process | Same as above |
Emergency services |
| In the event of an emergency or after certain incidents. | Same as above |
Transportation companies |
| Enabling services and features | Same as above |
We share personal data with third parties without your prior consent, as outlined below:
Legal Basis | Recipient | Personal Information Provided | Recipient's Purpose of Use |
|---|---|---|---|
PIPA: Article 15(1)(2) & Article 17(1)(2) Income Tax Act: Article 165 | National Tax Service | Name, Resident Registration Number, Details of medical expenses eligible for deduction | Issuance of supporting documents for the National Tax Service's year-end tax adjustment simplification service |
Criminal Procedure Act: Article 215 PIPA: Article 18(2)(2) | The competent police agency, prosecutor’s office | The information within the scope of the request | Request via a warrant for seizure, search, and verification |
Passenger Transport Service Act: Article 79(1) PIPA: Article 18(2)(2) | Ministry of Land, Infrastructure and Transport, Seoul Metropolitan Government, and other transport-related government agencies | Information regarding the vehicle and taxi driver eligibility | Confirmation of compliance with the Passenger Transport Service Act |
IX. Additional use and provision of data
Pursuant to Article 15(3) or 17(4) of the PIPA, we may additionally use or provide your data without your consent, in consideration of the matters set forth in Article 14-2 of the Enforcement Decree of the PIPA. When doing so, we will consider the following:
Whether the purpose of it is related to the original purpose of collection: We will consider if the purpose of the additional use or provision is reasonably related in nature or tendency to the original purpose of collection.
Whether it is foreseeable in light of the circumstances of data collection or practices of data processing: Based on the purpose and items of the collected data, the relationship between you and us, the current and future state of technology, and established data processing practices over a certain period, we will consider whether the use and provision of data are included as an essential part of our service, and whether information about the third parties who receive data has been additionally provided during the service provision process.
Whether it unfairly infringes upon the interests of the data subject: We will consider if the infringement upon your interests is substantial and unjust.
Whether protective measures such as pseudonymization or encryption have been taken: We will consider appropriate protective measures to minimize privacy infringement concerns, depending on the circumstances and necessity of the additional use or provision of the data.
X. Delegation of data processing
We delegate the processing of data as described below, and the delegatees may process your data only in accordance with the purpose of the delegation. Delegatees may sub-delegate the processing of data to other sub-delegatees in the course of providing the delegated services. You can find the detailed information in their respective privacy policies, linked below.
Delegatee | Description of delegated services |
|---|---|
Uber Technologies, Inc. (Privacy Policy) | Develop and operate a technical platform necessary to provide Uber services |
Oracle Cloud Infrastructure (Privacy Policy) | Cloud Infrastructure and storage |
Google LLC (Privacy Policy) | Cloud Infrastructure, storage and email services |
Aligned Energy LLC (Privacy Policy) | Data center colocation services |
Compass Data Centers (Privacy Policy) | Data center colocation services |
QTS Data Centers (Privacy Policy) | Data center colocation services |
Twilio, Inc. (Privacy Policy) | Messaging platform |
Salesforce.com, Inc. (Privacy Policy) | Platform for sales and customer support |
Tmap Mobility Co., Ltd. (Privacy Policy) | Collection/processing/operation of POI and search data |
Innovative Systems, Inc. (Privacy Policy) | Sanctions screening |
Aegis BPO Malaysia Sdn Bhd | Customer center support |
DirectSend (Privacy Policy) | Messaging service (such as sending KakaoTalk messages) |
Kakao Corp. (Privacy Policy) | Messaging service (such as sending KakaoTalk messages) |
NHN Cloud Corp. (Privacy Policy) | Messaging service (such as sending KakaoTalk messages) |
Lotte Global Logistics Co,.Ltd (Privacy Policy) | Parcel delivery |
Innored (Privacy Policy) | Media agency |
KPR & Associates, Inc. (Privacy Policy | Media agency |
NHN KCP Corporation (Privacy Policy) | Payment service provider |
XI. Overseas transfer of data
Pursuant to Article 28-8(1)(1) (Consent) of the PIPA, we transfer your data to overseas third-parties as follows. If you prefer not to have your personal information transferred overseas, please delete your account via the Data Protection Center or reach out to our Privacy and Cybersecurity team at privacykorea@uber.com.
Recipient Name (Contact Information) | Country of Transfer | Date and Method of Transfer | Items Transferred | Recipient's Purpose of Use | Recipient's Retention and Use Period |
|---|---|---|---|---|---|
Uber Technologies, Inc. (uber.com/privacy-dpo) | US | As services are used, by electronic means | Items of personal information described in the "What data we collect" section of the Addendum | Purpose of personal information processing outlined in the "How and why we use your data" section of the Addendum | Retained for as long as necessary for the purposes. The exact duration varies based on the data type, the user category, the original collection purpose, and whether retention is required after an account deletion request for the purposes outlined below. |
Uber B.V. (https://help.uber.com/) | Netherlands | Same as above | User profile and trip information | Supporting UT LLC for customer and internal operations support | Same as above |
Uber Singapore Technology Pte Ltd (https://help.uber.com/) | Singapore | Same as above | Same as above | Same as above | Same as above |
Uber India Research and Development Pvt Ltd (https://help.uber.com/) | India | Same as above | Same as above | Same as above | Same as above |
Taiwan Yubo Co., Ltd. (https://help.uber.com/) | Taiwan | Same as above | Same as above | Same as above | Same as above |
Uber (Asia) Limited (https://help.uber.com/) | Hong Kong SAR | Same as above | Same as above | Same as above | Same as above |
Uber Japan Co., Ltd. (https://help.uber.com/) | Japan | Same as above | Same as above | Same as above | Same as above |
Pursuant to Article 28-8(1)3 (Contractual Necessity) of the PIPA, we transfer your data to overseas delegatees as follows. If you prefer not to have your personal information transferred overseas, please delete your account via the Data Protection Center or reach out to our Privacy and Cybersecurity team at privacykorea@uber.com.
Recipient Name (Contact Information) | Country of Transfer | Date and Method of Transfer | Items Transferred | Recipient's Purpose of Use | Recipient's Retention and Use Period |
|---|---|---|---|---|---|
Uber Technologies, Inc. (uber.com/privacy-dpo) | US | As services are used, by electronic means | Items of personal information described in the "What data we collect" section of the Addendum | Develop and operate a technical platform necessary to provide Uber services | As long as necessary for the purposes, which varies depending on data type, the category of user to whom the data relates, the purposes for which we collected the data, and whether the data must be retained after an account deletion request for the purposes described below. |
Oracle Cloud Infrastructure (https://www.oracle.com/legal/data-privacy-inquiry-form/) | US | Same as above | User profile and trip information | Cloud Infrastructure and storage | Same as above |
Google LLC (googlekrsupport@google.com) | US | Same as above | Same as above | Cloud Infrastructure, storage and email services | Same as above |
Aligned Energy LLC (privacy@aligneddc.com) | US | Same as above | Same as above | Data center colocation services | Same as above |
Compass Data Centers (help@compassdatacenters.com) | US | Same as above | Same as above | Data center colocation services | Same as above |
QTS Data Centers (privacy@qtsdatacenters.com) | US | Same as above | Same as above | Same as above | Same as above |
Twilio, Inc. (privacy@twilio.com) | US | Same as above | Same as above | Messaging platform | Same as above |
Salesforce.com, Inc. (privacy@salesforce.com) | US | Same as above | Same as above | Platform for sales and customer support | Same as above |
Computer Services, Inc. (privacy@csiweb.com) | US | Same as above | Same as above | Sanctions screening | Same as above |
Innovative Systems, Inc. (info@innovativesystems.com) | US | Same as above | Same as above | Sanctions screening | Same as above |
Aegis BPO Malaysia Sdn Bhd (privacy@startek.com) | Malaysia | Same as above | Same as above | Customer center support | Same as above |
XII. Protection of data
We have implemented reasonable physical, technical and administrative security standards to protect data from loss, misuse, alteration, destruction or damage as required under applicable law, including but not limited to the following:
- Establishment and implementation of an internal privacy management plan;
- Control and restriction of access rights to personal information;
- Encryption of personal information for safe storage and transmission where appropriate;
- Retention of personal information access records and preventative measures against any forgery and tampering;
- Installation and updates of security programs for personal information;
- Physical measures to protect the safety of personal information;
- Operation of a separate organization that only deals with the protection of personal information;
- Appropriate training of those who handle personal information;
- Establishment and implementation of standards for granting, changing, canceling, etc. of access rights to the personal information processing system;
- Installation and operation of an intrusion prevention system and intrusion detection system.
XIV. Additional information on your data rights
According to Article 41(1) of the Enforcement Decree of the PIPA, you may exercise your rights with us in writing, via email, facsimile, etc. You may also exercise your rights through a representative or an authorized agent. In such cases, a power of attorney must be submitted in the form specified in Annex No. 11 of the Notification on How to Process Personal Information, and we will verify the identity of the person exercising the rights as either the data subject or their authorized representative.
For minors aged 14 or older may exercise their rights concerning their data independently or through their legal representative.
XV. Remedies for infringing the rights and interests of data subjects
You may apply for a dispute resolution, consultation, etc. with the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency’s Privacy Infringement Reporting Center, etc. to seek remedies for data infringement.
- Personal Information Dispute Mediation Committee: (omitting country code) 1833-6972 (www.kopico.go.kr)
- Privacy Infringement Reporting Center: (omitting country code) 118 (privacy.kisa.or.kr)
- National Police Agency: (omitting country code) 182 (ecrm.police.go.kr)
XVI. Contacts
If you have questions about this Addendum or our use of your personal information, please contact our Privacy & Cybersecurity Team by email at privacykorea@uber.com, the department responsible for handling complaints and damage relief of data subjects related to the processing of personal information.
XVII. Personal location information
We process your personal location information as follows:
- Purpose of processing personal location information and retention period
We use only the minimum necessary personal location information to provide Location-Based Services. The purposes for which we use personal location information are as follows:
- Searching pick-up / drop-off locations and providing location points during trips, based on location
- Searching the vicinity and providing route guidance, based on location
- Providing our personalized services and advertisement, based on location
We destroy the personal location information and the materials confirming the use and provision of location information that we are required by the Act on the Protection and Use of Location Information to record and retain if we use your personal location information. This is done without delay upon your withdrawal from Uber services or once the purpose of the use has been achieved. However, if there is a legal obligation to retain the data, it will be preserved for the required period stipulated by relevant regulations.
- Grounds for and period of retaining data verifying the collection, use, and provision of personal location information
We automatically record and preserve data confirming the use and provision of location information to settle charges and handle customer complaints with other businesses or customers, and the data is kept for one year.
- Procedure and method for destroying personal location information
Please refer to the “Destruction of data” section of the Addendum.
- Provision of personal location information to third parties (including notification of provision to designated third parties)
We provide your personal location information to a third party designated by you in order to provide membership taxi and electronic call-taxi services. In the case of providing personal location information to a third party, you are notified immediately of the recipient, the date and time of provision, and the purpose of provision each time through the communication device that collected the personal location information. However, if it falls under any of the following subparagraphs, it will be notified to the communication device or e-mail address designated in advance by you.
- If the communication device that collected the personal location information does not have a function to receive text, voice or video
- If User has requested in advance to be notified by means such as online posting
- Protective measures for location information
Please refer to the “Protection of data” section of the Addendum.
- Rights and obligations of the legal guardian and methods of exercising such rights
Where the legal guardians of any of the following users (hereinafter referred to as "children of eight years old or younger, etc.") give consent to the collection, use or provision of personal location information regarding the children of eight years old or younger, etc. for the protection of their health or safety, we deem that the children of eight years old or younger, etc. themselves gave consent.
- A child of eight years old or younger
- A person under adult guardianship (adult ward)
- A person with a mental disorder defined in Article 2(2)(2) of the Act on Welfare of Persons with Disabilities, classified as a person with a severe disability defined in subparagraph 2 of Article 2 of the Act on the Employment Promotion and Vocational Rehabilitation of Persons with Disabilities (but limited to those registered as disabled persons under Article 32 of the Act on Welfare of Persons with Disabilities).
For the protection of the health or safety of children of eight years old or younger, etc., the legal guardian who intends to consent to the collection, use or provision of their personal location information must submit a written consent to us along with a document proving that he/she is the legal guardian.
The legal guardian can exercise all of the rights of the personal location information data subject if he/she agrees to the collection, use or provision of personal location information for children of eight years old or younger, etc.
- Contact information
Please refer to the “Contacts” section of the Addendum.
XVIII. Updates to the addendum
For updates to the Addendum, please refer to section II.D. Updates to this Privacy Notice of the Uber Privacy Notice.
You can find the previous notices and addenda below.
- This Privacy Notice was first effective on April 1, 2021.
- This Privacy Notice was amended on November 29, 2021.
- This Privacy Notice was amended on June 20, 2023.
- This Privacy Notice was amended on December 7, 2023.
- This Privacy Notice was amended on August 16, 2024.
- This Privacy Notice was amended on December 12, 2024.
- This current Addendum is effective as of September 30, 2025.
Select your preferred language
About