Privacy Policy Addendum for Riders in South Korea
This addendum (“Addendum”) supplements the Uber Privacy Notice and applies specifically to Riders (individuals who request or receive transportation, including those who receive transportation requested by another individual) using Uber services in South Korea, in accordance with the Personal Information Protection Act (PIPA). Uber services, including Uber apps, websites, content, products, or other services branded under the “Uber” brand, including the “Uber Taxi” brand, are provided by UT LLC. The Addendum also covers other data collections related to Uber services, such as the contact information for individuals using corporate accounts.
The Addendum provides additional details on how your personal data is collected and processed when you use Uber services. For a complete understanding, please read this Addendum together with the Uber Privacy Notice: Riders and Order Recipients.
In case of any conflict between the Uber Privacy Notice and this Addendum, this Addendum will prevail.
Table of contents
I. Who controls your personal data?
II. How and why we use your data
III. What data we collect
IV. Our legal basis for using your data
V. Processing of children's data
VI. Retention period of data
VII. Destruction of data
VIII. Third-party provision of data
IX. Additional use and provision of data
X. Delegation of data processing
XI. Overseas transfer of data
XII. Protection of data
XIII. Cookies and third-party technologies
XIV. Additional information of your data rights
XV. Remedies for infringing the rights and interests of data subjects
XVI. Contacts
XVII. Personal location information
XVIII. Updates to the addendum
I. Who controls your personal data?
UT LLC (“Company” or “We”) is the data controller responsible for your personal data when you use Uber services in South Korea.
II. How and why we use your data
We collect and use data to enable reliable and convenient transportation and other products and services. We also use the data we collect:
- To enhance the safety and security of our users and services
- For customer support
- For research and development
- To enable communications between users
- For marketing and advertising
- To send non-marketing communications to users
- In connection with legal proceedings
More specifically, we use the data we collect for purposes including:
- 1. Providing services and features
We use the data we collect to provide, personalize, maintain, and improve our products and services. This includes using the data to:
a. Create and update users’ accounts.
b. Enable transportation and other services/features such as:
- using location data to navigate rider pick-ups and drop-offs, calculate ETAs, and track the progress of rides.
- enabling features that involve data sharing, such as sharing driver name and vehicle information with riders to facilitate pick-ups, or features that enable ETA sharing and fare splitting.
- matching available drivers to users requesting services, including based on personal data such as location and proximity to other users, and user settings / preferences (such as preferred destinations), and non-personal data such as vehicle type requested. Please see here for more information.
- enabling accessibility features.
- enabling features that involve account linking, such as linking with third party reward programs.
c. Calculating prices and fares, including using location data and trip details (such as requested pick-up and drop-off addresses). We may also consider non-personal data or factors, including date and time, estimated distance and time, minimum base fares, tolls, taxes and fees, and surge pricing.
d. Offer, process or facilitate payments
e. Provide users with trip updates, generate receipts, and inform users of changes to our terms, services or policies.
f. Perform necessary operations to maintain our services, including to troubleshoot software bugs and internal problems.
- 2. Safety, fraud protection and security
We use personal data to help maintain the safety, security, and integrity of our services and users. This includes:
a. Verifying users’ accounts, identity or compliance with safety requirements. For example, we screen riders and drivers before enabling their use of our services and at subsequent intervals, including through reviews of background checks, where permitted by law, to help prevent use of our services by unsafe drivers and/or riders.
b. Using customer service information (including reports of safety incidents), device data (e.g., to detect speeding or harsh braking / acceleration), transaction, and usage data to identify potentially unsafe drivers and driving. This can lead to drivers receiving messages encouraging safer driving, and/or account deactivation following human review
c. Using account, device, location, usage, transaction, wireless carrier, and other data, including communications between users and metadata, to prevent, detect, and combat fraud, including by guest users.
d. Using user ratings and feedback to encourage compliance with our Community Guidelines and as grounds for deactivating drivers with low ratings or who otherwise violated such guidelines.
- 3. Customer support
We use the information we collect (including recordings of customer support calls with notice to and the consent of the user) to provide customer support, including to:
a. Direct questions to the appropriate customer support person
b. Investigate and address user concerns
c. Monitor and improve our customer support responses and processes
- 4. Research and development
We use data for analysis, machine learning, product development, research, and testing. This helps us make our services more convenient and easy-to-use, enhance the safety and security of our services, and develop new services and features.
- 5. Enabling communications between users
For example, a driver may message or call a rider to confirm a pickup location, or a rider may contact a driver to retrieve a lost item.
- 6. Marketing and Advertising
We use data (other than guest users’ data) to market its services, and those of our partners.
a. We specifically use account, approximate location, device and usage data, and trip history to provide ads and marketing communications that are personalized based on users’ observed or inferred location, interests and characteristics. This includes using this data to:
send emails, text messages, push notifications, and in-app messages or other communications marketing or advertising our products, services, features, offers, promotions, sweepstakes, news and events. For example, we may send push notifications suggesting a user’s favorite destinations, or in-app messages offering discounts or promo for products or merchants similar to those a user has previously purchased.
display our advertising on third party apps or websites.
b. We also measure the effectiveness of Company’s ads, and of third party ads displayed in Company’s apps or in connection with our services.
- 7. Non-marketing communications
We may use the data we collect to generate and provide users with receipts; inform them of changes to our terms, services, or policies; or send other communications that aren’t for the purpose of marketing the services or products of us or our partners.
- 8. Legal proceedings and requirements
We may use the personal data we collect to investigate or address claims or disputes relating to use of our services, or as otherwise allowed by applicable law, or as requested by regulators, government entities, and official inquiries.
- 9. Automated decision-making
We use personal data to make automated decisions relating to use of our services. This includes matching available drivers to users requesting services. Users can be matched based on availability, proximity, and other factors.
III. What data we collect
We collect the following data from these sources:
1. Data provided by users
This includes:
a. User profile: We collect data when users create or update their accounts for the Uber services. This may include their name, email, phone number, login name and password, address, profile picture, accessibility preferences, payment or banking information (including related payment verification information). We may use the photos submitted by users to verify their identities, such as through facial recognition technologies. For more information, please refer to the “How and why we use your data” section of the Addendum.
b. Demographic data: We may collect demographic data about users, including through user surveys.
c. User content: We collect the information users submit when they contact our customer support service, provide ratings or compliments for other users, or otherwise contact us. This may include feedback, photographs or other recordings collected by users. Please see here for more information about how ratings provided by other users are determined and used.
2. Data created during use of our services
This includes:
a. Location data: We collect precise or approximate location data from riders’ mobile devices if they enable us to do so via their device settings. We collect such data from the time a ride is requested until it is finished, and any time the app is running in the foreground (app open and on-screen). Please refer to section III. Choice and transparency of the Uber Privacy Notice above for information on how riders can enable precise location data collection. Riders may use the Uber app without enabling collection of location data from their mobile devices. However, this may affect certain features in the Uber app. For example, a rider who has not enabled precise location data will have to manually enter their pickup address. In addition, precise location data collected from a driver’s device during a trip is linked to the rider’s account, even if the rider has not enabled precise location data to be collected from their device. This data is used for purposes such as receipt generation, customer support, fraud detection, insurance, and litigation.
b. Transaction information: We collect transaction information related to the use of our services, including the type of services requested or provided, trip details such as date and time, requested pick-up and drop-off point, and payment transaction information (such as amount charged and payment method). Additionally, if someone uses your promotion code, we may associate your name with that person.
c. Usage data: We collect data about how users interact with Uber services. This includes data such as access dates and times, app features or pages viewed, app crashes and other system activity, type of browser, and third-party sites or services used before interacting with Uber services. In some cases, we collect this data through cookies, pixels, tags, and similar tracking technologies that create and maintain unique identifiers.
d. Device data: We may collect data about the devices used to access our services, including the hardware models, device IP address, operating systems and versions, software, preferred languages, unique device identifiers, advertising identifiers, serial numbers, device motion data, and mobile network data.
e. Communications data: We enable users to communicate with each other and with Company through Uber services, including mobile apps and websites. For example, we enable drivers and riders to call, text, or send other files to each other (generally without disclosing their telephone numbers to each other). To provide this service, we receive some data regarding the calls, texts, or other communications, including the date and time of the communications and the content of the communications. We may also use this data for customer support services (including to resolve disputes between users), for safety and security purposes, to improve our products and services, and for analytics.
3. Data from other sources
For items collected from these other sources, please refer to section II.A.3. From other sources of the Uber Privacy Notice.
The sources include:
a. User feedback, such as ratings, feedback, or compliments.
b. Users participating in our referral programs. For example, when a user refers another person, we receive the referred person’s personal data from that user.
c. Uber account owners who request services for or on behalf of other users, or who enable such users to request or receive services through their accounts. This includes owners of corporate accounts (such as Uber for Business customers).
d. Users or others providing information in connection with claims or disputes.
e. Our business partners through which users create or access their Uber services account, such as payment providers, social media services, or apps or websites that use our (or our affiliates’) APIs or whose APIs we (or our affiliates) use.
f. Vendors who help us verify users’ identity, background information, and eligibility to work, for regulatory, safety, and security purposes.
g. Insurance, vehicle, or financial services providers for drivers.
h. Partner transportation companies (for drivers who use our services through an account associated with such a company).
i. Publicly available sources.
j. Marketing service providers or data resellers whose data Company uses for marketing or research.
k. Law enforcement officials, public health officials, and other government authorities.
We may combine the data collected from these sources with other data in our possession.
IV. Our legal basis for using your data
We notify you of the processing of personal data necessary for the provision of Uber services and process such personal information with your consent. We rely on Article 15(1)(1) and (4) of the PIPA for such processing.
In addition, based on Article 15(1)(1) of the PIPA, we process personal data with your consent for the purposes of:
- sending you marketing messages;
- personalizing marketing communications relating to Uber products and services; and
- measuring the effectiveness of the marketing communications.
Otherwise, we may process personal data based on the following legal grounds:
Contractual necessity (Article 15(1)(4) of the PIPA): When you set up your Uber account and/or request a ride from Uber, we are entering into a contract defined by our Terms & Conditions to provide you those services. This legal basis applies when we must use your data in order to provide the services you request and meet our responsibilities under that contract.
Legitimate interests (Article 15(1)(6) of the PIPA): This legal basis applies when we need to use your data for purposes that benefit us or others (including other Uber users) in ways that do not seriously harm your privacy rights.
Legal obligation (Article 15(1)(2) of the PIPA): This legal basis applies when we are required to use your data to comply with applicable laws and regulations.
V. Processing of children's data
We do not intentionally process the data of children under 14 years of age, nor does it knowingly do so.
VI. Retention period of data
For the retention period of your data, please refer to section II.F. Data retention and deletion of the Uber Privacy Notice. We retain your data in accordance with applicable laws and regulations as follows:
- Records regarding labelling and advertising: six (6) months (Article 6(1)1 of Decree of the Act on the Consumer Protection in Electronic Commerce)
- Records regarding execution or withdrawal of a contract: five (5) years (Article 6(1)2 of Decree of the Act on the Consumer Protection in Electronic Commerce)
- Records regarding the payment of a price and the supply of goods and services: five (5) years (Article 6(1)3 of Decree of the Act on the Consumer Protection in Electronic Commerce)
- Records regarding customer services or dispute resolution: three (3) years (Article 6(1)4 of Decree of the Act on the Consumer Protection in Electronic Commerce)
- Log records, IP address: three (3) months (Article 15-2(2) of the Protection of Communications Secrets Act)
- Records regarding processing of personal credit information: three (3) years (Article 20(2) of the Credit Information Use and Protection Act)
VII. Destruction of data
We regularly review data to ensure that information whose purpose, as outlined in the Addendum, has been fulfilled, or whose retention period under applicable laws has expired, is destroyed in accordance with relevant laws and our policies.
Destruction Process: Upon the need for data destruction, We identify the pertinent data and proceed with its disposal following approval from the Chief Privacy Officer.
Destruction Method: We employ all reasonable and feasible measures to ensure data is irrecoverable upon deletion. This includes, but is not limited to:
- Electronic Files: Permanent deletion using technical methods that render files irrecoverable.
- Physical Records: Shredding or incineration of print-outs, documents, and other recording media.
VIII. Third-party provision of data
We share personal data with third parties only with your explicit prior consent, pursuant to Article 17(1)(1) (Consent) of the PIPA, as detailed below:
Recipient | Personal Information Provided | Purpose of Use | Retention Period |
|---|---|---|---|
Uber Technologies, Inc. | Please refer to the "What data we collect" section of the Addendum. | Please refer to the “How and why we use your data” section of the Addendum | Please refer to the “Retention period of data” section of the Addendum |
| User profile and trip information | Supporting UT LLC for customer and internal operations support | Same as above |
Driver |
| Until the purposes outlined in the "How and why we use your data" section of the Addendum are fulfilled. | |
Other Riders during shared rides |
| Same as above | |
The owner of any Uber account you use, such as when a rider uses their employer’s Uber for Business profile, or a rider uses an account linked to their Family profile, or a driver uses an account owned by or associated with an our partner transportation company |
| Same as above | |
People who refer you to Uber | Trip info (Trip count) | Same as above | |
Users with whom you use data-sharing features | Depending on the feature used, may include:
| Same as above | |
Our business partners, including, for example, other services, platforms, apps, or websites that integrate with our APIs; vehicle suppliers or services; those with an API or service with which we integrate; or our other business partners and their users in connection with promotions, contests, or specialized services | Items necessary to provide services through partnerships or promotions | To provide services through a partnership or promotion | Same as above |
Emergency services |
| Same as above |
IX. Additional use and provision of data
Pursuant to Article 15(3) or 17(4) of the PIPA, we may additionally use or provide your data without your consent, in consideration of the matters set forth in Article 14-2 of the Enforcement Decree of the PIPA. When doing so, we will consider the following:
Whether the purpose of it is related to the original purpose of collection: We will consider if the purpose of the additional use or provision is reasonably related in nature or tendency to the original purpose of collection.
Whether it is foreseeable in light of the circumstances of data collection or practices of data processing: Based on the purpose and items of the collected data, the relationship between you and us, the current and future state of technology, and established data processing practices over a certain period, we will consider whether the use and provision of data are included as an essential part of our service, and whether information about the third parties who receive data has been additionally provided during the service provision process.
Whether it unfairly infringes upon the interests of the data subject: We will consider if the infringement upon your interests is substantial and unjust.
Whether protective measures such as pseudonymization or encryption have been taken: We will consider appropriate protective measures to minimize privacy infringement concerns, depending on the circumstances and necessity of the additional use or provision of the data.
X. Delegation of data processing
We delegate the processing of data as described below, and the delegatees may process your data only in accordance with the purpose of the delegation. Delegatees may sub-delegate the processing of data to other sub-delegatees in the course of providing the delegated services. You can find the detailed information in their respective privacy policies, linked below.
Delegatee | Description of delegated services |
|---|---|
Uber Technologies, Inc. (Privacy Policy) | Develop and operate a technical platform necessary to provide Uber services |
Oracle Cloud Infrastructure (Privacy Policy) | Cloud Infrastructure and storage |
Google LLC (Privacy Policy) | Cloud Infrastructure, storage and email services |
Aligned Energy LLC (Privacy Policy) | Data center colocation services |
Compass Data Centers (Privacy Policy) | Data center colocation services |
QTS Data Centers (Privacy Policy) | Data center colocation services |
Twilio, Inc. (Privacy Policy) | Messaging platform |
Salesforce.com, Inc. (Privacy Policy) | Platform for sales and customer support |
Tmap Mobility Co., Ltd. (Privacy Policy) | Collection/processing/operation of POI and search data |
Innovative Systems, Inc. (Privacy Policy) | Sanctions screening |
Aegis BPO Malaysia Sdn Bhd | Customer center support |
DirectSend (Privacy Policy) | Messaging service (such as sending KakaoTalk messages) |
Kakao Corp. (Privacy Policy) | Messaging service (such as sending KakaoTalk messages) |
NHN Cloud Corp. (Privacy Policy) | Messaging service (such as sending KakaoTalk messages) |
Lotte Global Logistics Co,.Ltd (Privacy Policy) | Parcel delivery |
Innored (Privacy Policy) | Media agency |
KPR & Associates, Inc. (Privacy Policy | Media agency |
NHN KCP Corporation (Privacy Policy) | Payment service provider |
XI. Overseas transfer of data
Pursuant to Article 28-8(1)(1) (Consent) of the PIPA, we transfer your data to overseas third-parties as follows. If you prefer not to have your personal information transferred overseas, please delete your account via the Data Protection Center or reach out to our Privacy and Cybersecurity team at privacykorea@uber.com.
Recipient Name (Contact Information) | Country of Transfer | Date and Method of Transfer | Items Transferred | Recipient's Purpose of Use | Recipient's Retention and Use Period |
|---|---|---|---|---|---|
Uber Technologies, Inc. (uber.com/privacy-dpo) | US | As services are used, by electronic means | Items of personal information described in the "What data we collect" section of the Addendum | Purpose of personal information processing outlined in the "How and why we use your data" section of the Addendum | Retained for as long as necessary for the purposes. The exact duration varies based on the data type, the user category, the original collection purpose, and whether retention is required after an account deletion request for the purposes outlined below. |
Uber B.V. (https://help.uber.com/) | Netherlands | Same as above | User profile and trip information | Supporting UT LLC for customer and internal operations support | Same as above |
Uber Singapore Technology Pte Ltd (https://help.uber.com/) | Singapore | Same as above | Same as above | Same as above | Same as above |
Uber India Research and Development Pvt Ltd (https://help.uber.com/) | India | Same as above | Same as above | Same as above | Same as above |
Taiwan Yubo Co., Ltd. (https://help.uber.com/) | Taiwan | Same as above | Same as above | Same as above | Same as above |
Uber (Asia) Limited (https://help.uber.com/) | Hong Kong SAR | Same as above | Same as above | Same as above | Same as above |
Uber Japan Co., Ltd. (https://help.uber.com/) | Japan | Same as above | Same as above | Same as above | Same as above |
Pursuant to Article 28-8(1)3 (Contractual Necessity) of the PIPA, we transfer your data to overseas delegatees as follows. If you prefer not to have your personal information transferred overseas, please delete your account via the Data Protection Center or reach out to our Privacy and Cybersecurity team at privacykorea@uber.com.
Recipient Name (Contact Information) | Country of Transfer | Date and Method of Transfer | Items Transferred | Recipient's Purpose of Use | Recipient's Retention and Use Period |
|---|---|---|---|---|---|
Uber Technologies, Inc. (uber.com/privacy-dpo) | US | As services are used, by electronic means | Items of personal information described in the "What data we collect" section of the Addendum | Develop and operate a technical platform necessary to provide Uber services | As long as necessary for the purposes, which varies depending on data type, the category of user to whom the data relates, the purposes for which we collected the data, and whether the data must be retained after an account deletion request for the purposes described below. |
Oracle Cloud Infrastructure (https://www.oracle.com/legal/data-privacy-inquiry-form/) | US | Same as above | User profile and trip information | Cloud Infrastructure and storage | Same as above |
Google LLC (googlekrsupport@google.com) | US | Same as above | Same as above | Cloud Infrastructure, storage and email services | Same as above |
Aligned Energy LLC (privacy@aligneddc.com) | US | Same as above | Same as above | Data center colocation services | Same as above |
Compass Data Centers (help@compassdatacenters.com) | US | Same as above | Same as above | Data center colocation services | Same as above |
QTS Data Centers (privacy@qtsdatacenters.com) | US | Same as above | Same as above | Same as above | Same as above |
Twilio, Inc. (privacy@twilio.com) | US | Same as above | Same as above | Messaging platform | Same as above |
Salesforce.com, Inc. (privacy@salesforce.com) | US | Same as above | Same as above | Platform for sales and customer support | Same as above |
Computer Services, Inc. (privacy@csiweb.com) | US | Same as above | Same as above | Sanctions screening | Same as above |
Innovative Systems, Inc. (info@innovativesystems.com) | US | Same as above | Same as above | Sanctions screening | Same as above |
Aegis BPO Malaysia Sdn Bhd (privacy@startek.com) | Malaysia | Same as above | Same as above | Customer center support | Same as above |
XII. Protection of data
We have implemented reasonable physical, technical and administrative security standards to protect data from loss, misuse, alteration, destruction or damage as required under applicable law, including but not limited to the following:
- Establishment and implementation of an internal privacy management plan;
- Control and restriction of access rights to personal information;
- Encryption of personal information for safe storage and transmission where appropriate;
- Retention of personal information access records and preventative measures against any forgery and tampering;
- Installation and updates of security programs for personal information;
- Physical measures to protect the safety of personal information;
- Operation of a separate organization that only deals with the protection of personal information;
- Appropriate training of those who handle personal information;
- Establishment and implementation of standards for granting, changing, canceling, etc. of access rights to the personal information processing system;
- Installation and operation of an intrusion prevention system and intrusion detection system.
XIV. Additional information on your data rights
According to Article 41(1) of the Enforcement Decree of the PIPA, you may exercise your rights with us in writing, via email, facsimile, etc. You may also exercise your rights through a representative or an authorized agent. In such cases, a power of attorney must be submitted in the form specified in Annex No. 11 of the Notification on How to Process Personal Information, and we will verify the identity of the person exercising the rights as either the data subject or their authorized representative.
For minors aged 14 or older may exercise their rights concerning their data independently or through their legal representative.
XV. Remedies for infringing the rights and interests of data subjects
You may apply for a dispute resolution, consultation, etc. with the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency’s Privacy Infringement Reporting Center, etc. to seek remedies for data infringement.
- Personal Information Dispute Mediation Committee: (omitting country code) 1833-6972 (www.kopico.go.kr)
- Privacy Infringement Reporting Center: (omitting country code) 118 (privacy.kisa.or.kr)
- National Police Agency: (omitting country code) 182 (ecrm.police.go.kr)
XVI. Contacts
If you have questions about this Addendum or our use of your personal information, please contact our Privacy & Cybersecurity Team by email at privacykorea@uber.com, the department responsible for handling complaints and damage relief of data subjects related to the processing of personal information.
XVII. Personal location information
We process your personal location information as follows:
- Purpose of processing personal location information and retention period
We use only the minimum necessary personal location information to provide Location-Based Services. The purposes for which we use personal location information are as follows:
- Searching pick-up / drop-off locations and providing location points during trips, based on location
- Searching the vicinity and providing route guidance, based on location
- Providing our personalized services and advertisement, based on location
We destroy the personal location information and the materials confirming the use and provision of location information that we are required by the Act on the Protection and Use of Location Information to record and retain if we use your personal location information. This is done without delay upon your withdrawal from Uber services or once the purpose of the use has been achieved. However, if there is a legal obligation to retain the data, it will be preserved for the required period stipulated by relevant regulations.
- Grounds for and period of retaining data verifying the collection, use, and provision of personal location information
We automatically record and preserve data confirming the use and provision of location information to settle charges and handle customer complaints with other businesses or customers, and the data is kept for one year.
- Procedure and method for destroying personal location information
Please refer to the “Destruction of data” section of the Addendum.
- Provision of personal location information to third parties (including notification of provision to designated third parties)
We provide your personal location information to a third party designated by you in order to provide membership taxi and electronic call-taxi services. In the case of providing personal location information to a third party, you are notified immediately of the recipient, the date and time of provision, and the purpose of provision each time through the communication device that collected the personal location information. However, if it falls under any of the following subparagraphs, it will be notified to the communication device or e-mail address designated in advance by you.
- If the communication device that collected the personal location information does not have a function to receive text, voice or video
- If User has requested in advance to be notified by means such as online posting
- Protective measures for location information
Please refer to the “Protection of data” section of the Addendum.
- Rights and obligations of the legal guardian and methods of exercising such rights
Where the legal guardians of any of the following users (hereinafter referred to as "children of eight years old or younger, etc.") give consent to the collection, use or provision of personal location information regarding the children of eight years old or younger, etc. for the protection of their health or safety, we deem that the children of eight years old or younger, etc. themselves gave consent.
- A child of eight years old or younger
- A person under adult guardianship (adult ward)
- A person with a mental disorder defined in Article 2(2)(2) of the Act on Welfare of Persons with Disabilities, classified as a person with a severe disability defined in subparagraph 2 of Article 2 of the Act on the Employment Promotion and Vocational Rehabilitation of Persons with Disabilities (but limited to those registered as disabled persons under Article 32 of the Act on Welfare of Persons with Disabilities).
For the protection of the health or safety of children of eight years old or younger, etc., the legal guardian who intends to consent to the collection, use or provision of their personal location information must submit a written consent to us along with a document proving that he/she is the legal guardian.
The legal guardian can exercise all of the rights of the personal location information data subject if he/she agrees to the collection, use or provision of personal location information for children of eight years old or younger, etc.
- Contact information
Please refer to the “Contacts” section of the Addendum.
XVIII. Updates to the addendum
For updates to the Addendum, please refer to section II.D. Updates to this Privacy Notice of the Uber Privacy Notice.
You can find the previous notices and addenda below.
- This Privacy Notice was first effective on April 1, 2021.
- This Privacy Notice was amended on November 29, 2021.
- This Privacy Notice was amended on June 20, 2023.
- This Privacy Notice was amended on December 7, 2023.
- This Privacy Notice was amended on August 16, 2024.
- This Privacy Notice was amended on December 12, 2024.
- This current Addendum is effective as of September 30, 2025.
Select your preferred language
About