Uber Privacy Notice
I. Introduction / II. Overview / III. Data collection and uses / IV. Choice and transparency / V. Updates to this notice
I. Introduction
When you use Uber, you trust us with your personal data. We’re committed to keeping that trust. That starts with helping you understand our privacy practices. This notice describes the personal data we collect, how it’s used and shared, and your choices regarding this data. We recommend that you read this along with our Privacy overview, which highlights key points about our privacy practices. |
---|
II. Overview
A. ScopeThis notice applies to users of Uber’s services anywhere in the world, including users of Uber’s apps, websites, features or other services. |
---|
This notice describes how Uber and its affiliates collect and use personal data. This notice applies to all users of our apps, websites, features or other services anywhere in the world, unless covered by a separate privacy notice, such as the Uber Freight Privacy Notice or Careem Privacy Policy. This notice specifically applies to:
This notice also governs Uber’s other collection of personal data in connection with its services. For example, we may collect the contact information of individuals who use accounts owned by Uber for Business customers, or of owners or employees of restaurants or other merchants; personal data of those who start but do not complete applications to be drivers or couriers; or other personal data in connection with our mapping technology and features. All those subject to this notice are referred to as “users” in this notice. In addition, please note the following:
Our practices are subject to applicable laws in the places in which we operate. This means that we engage in the practices described in this notice in a particular country or region only if permitted under the laws of those places. Please contact us here or via the addresses below with any questions regarding our practices in a particular country or region. |
B. Data controller and transferUber B.V. and Uber Technologies Inc. are the data controllers for the personal data collected in connection with the use of Uber’s services in the European Economic Area, the United Kingdom and Switzerland. Uber Technologies Inc. is the data controller for the personal data collected in connection with the use of Uber’s services everywhere else. |
---|
Uber B.V. (Mr. Treublaan 7, 1097 DP, Amsterdam, the Netherlands) and Uber Technologies Inc. (1515 3rd Street, San Francisco, CA, 94158, USA) are the data controllers for the personal data collected in connection with the use of Uber’s services in the European Economic Area, the United Kingdom and Switzerland. If you’re a driver in the UK, the Uber entity holding the relevant PHV operator licence is a controller for complying with licensing requirements. For drivers in the UK that are qualified as workers, the relevant contracting Uber entity in the UK will act as joint controller with Uber B.V. and Uber Technologies Inc. solely for the personal data necessary to comply with worker rights. Uber Technologies Inc. is the data controller for the personal data collected in connection with the use of Uber’s services everywhere else. Uber operates and processes personal data globally. The exercise of data protection rights can be directed at any controller mentioned above, preferably via the designated channels, and will be handled by Uber as a group. We may also transfer such data to countries other than the one where our users live or use Uber’s services. We do so in order to fulfil our agreements with users, such as our Terms of Use, or based on users’ prior consent, adequacy decisions for the relevant countries, or other transfer mechanisms as may be available under applicable law, such as the Standard Contractual Clauses. Questions, comments and complaints about Uber’s data practices can be submitted here. You can also use this form to submit a question to Uber’s Data Protection Officer. |
III. Data collection and uses
A. The data we collectUber collects personal data:
|
---|
The following personal data is collected by or on behalf of Uber:
Uber may combine the data collected from these sources with other data in its possession. |
B. How we use personal dataUber uses personal data to enable reliable and convenient transport, delivery and other products and services. We also use such data:
Uber does not sell or share user personal data with third parties for their direct marketing, except with users’ consent. |
---|
We use personal data we collect:
Uber performs the above activities, including the collection and use of location data for purposes of these activities, on the grounds that they are necessary to fulfil our obligations to users under our Terms of Use or other agreements with users.
Where permitted by law, we may also use selfies to verify that users are wearing masks, helmets or other safety gear through the use of object verification technology, where permitted by law. In addition, where permitted by law, we may use facial recognition technology to process user profile photographs, identification photographs, or other user-submitted photographs for the sole purpose of preventing identity-borrowing or use of our services by unauthorised drivers or couriers.
Uber performs the above activities on the grounds that they are necessary to fulfil our obligations to users under our Terms of Use or other agreements with users, and/or for purposes of the legitimate safety and security interests of Uber or other parties, including users and members of the general public.
Uber performs the above activities on the grounds that they are necessary to fulfil our obligations to users under our Terms of Use or other agreements with users.
Uber performs the above activities on the grounds that they are necessary to fulfil our obligations to users under our Terms of Use or other agreements with users in improving our existing services and features, or for purposes of Uber’s legitimate interests developing new services and features.
Uber performs the above activities on the grounds that they are necessary to fulfil our obligations to users under our Terms of Use or other agreements with users.
We may use the data we collect, including in combination with advertising partners’ data, to personalise and improve the marketing communications (including ads) that we send on and off Uber’s apps and websites, including based on user location, use of Uber’s services, and user preferences and settings. For example, we share user data (such as hashed email address, usage information, and device or user identifiers) with Facebook and TikTok to personalise and improve our ads for Uber’s services. For information about how to opt out of certain marketing communications (including ads) from Uber and its advertising partners, please see the section titled “Marketing choices” We may also send users communications regarding elections, ballots, referenda, and other political and notice processes that relate to our services. For example, Uber has notified some users by email of ballot measures or pending legislation relating to Uber’s services in those users’ areas. Uber performs the above activities on the grounds that they are necessary for purposes of Uber’s legitimate interests in informing users about Uber services and features or those offered by Uber partners, or on the basis of user consent. See the sections entitled “Choice and transparency” and “Marketing choices” for information on your choices regarding Uber’s use of your data for marketing.
Uber performs the above activities on the grounds that they are necessary to fulfil our obligations to users under our Terms of Use or other agreements with users, or for purposes of Uber’s and its users’ legitimate interests in informing users about events that may have an impact on how they can use Uber services.
Uber performs the above activities on the grounds that they are necessary for the purposes of Uber’s legitimate interests in investigating and responding to claims and disputes relating to the use of Uber’s services and features, and/or necessary for compliance with applicable legal requirements.
We use personal data to make automated decisions relating to the use of our services. This includes:
Click the links in this section for more information about these processes. To object to a deactivation resulting from these processes, please contact Uber customer support. Uber performs the above activities on the grounds that they are necessary to fulfil our obligations to users under our Terms of Use or other agreements with users, or on the grounds that they are necessary for the purposes of the legitimate interests of Uber, its users and others. |
C. Cookies and third-party technologiesUber and its partners use cookies and other identification technologies on our apps, websites, emails and online ads for purposes described in this notice and Uber’s Cookie Notice. |
---|
Cookies are small text files that are stored on browsers or devices by websites, apps, online media and advertisements. Uber uses cookies and similar technologies for purposes such as:
We may also allow others to provide audience measurement and analytics services for us, to serve advertisements on our behalf across the Internet, and to track and report on the performance of those advertisements. These entities may use cookies, web beacons, SDKs and other technologies to identify the devices used by visitors to our websites, as well as when they visit other online sites and services. Please see our Cookie Notice for more information regarding the use of cookies and other technologies described in this section. |
D. Data sharing and disclosureSome of Uber’s services and features require that we share personal data with other users or at a user’s request. We may also share such data with our affiliates, subsidiaries and partners for legal reasons or in connection with claims or disputes. |
---|
Uber may share personal data:
This includes sharing:
This includes sharing data with:
Questions or comments from users submitted through public forums such as Uber blogs and Uber social media pages may be viewable by the public, including any personal data included in the questions or comments submitted by a user.
If a user requests transport or places an order using an account owned by another party, we may share their order or trip information, including location data, with the owner of that account. This occurs, for example, when:
We share personal data with our subsidiaries and affiliates to help us provide our services or conduct data processing on our behalf. For example, Uber processes and stores such data in the United States on behalf of its international subsidiaries and affiliates.
Uber provides personal data to vendors, consultants, marketing partners, research firms and other service providers or business partners. These include:
Uber may share users’ personal data if we believe it’s required by applicable law, regulation, operating licence or agreement, legal process or governmental request, or where the disclosure is otherwise appropriate due to safety or similar concerns. This includes sharing personal data with law enforcement officials, public health officials, other government authorities, airports (if required by the airport authorities as a condition of operating on airport property) or other third parties as necessary to enforce our Terms of Service, user agreements or other policies, to protect Uber’s rights or property or the rights, safety or property of others, or in the event of a claim or dispute relating to the use of our services. In the event of a dispute relating to the use of another person’s credit card, we may be required by law to share your personal data, including trip or order information, with the owner of that credit card. For more information, please see Uber’s Guidelines for Law Enforcement Authorities - United States, Guidelines for Law Enforcement Authorities - outside the US and Guidelines for Third-Party Data Requests and Service of Legal Documents. This also includes sharing personal data with others in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing or acquisition of all or a portion of our business by or into another company.
Uber may share a user’s personal data other than as described in this notice if we notify the user and they consent to the sharing. |
E. Data retention and deletionUber retains user data for as long as necessary for the purposes described above. Users can request deletion of their accounts at any time. Uber may retain user data after a deletion request due to legal or regulatory requirements or for reasons stated in this policy. |
---|
Uber retains user data for as long as necessary for the purposes described above. This means that we retain different categories of data for different periods of time depending on the type of data, the category of user to whom the data relates and the purposes for which we collected the data. Following an account deletion request, Uber deletes the user’s account and data, unless they must be retained for legal or regulatory requirements, for purposes of safety, security and fraud prevention, or because of an issue relating to the user’s account such as an outstanding credit or an unresolved claim or dispute. Because we are subject to legal and regulatory requirements relating to drivers and couriers, this generally means that we retain their account and data for a minimum of 7 years after a deletion request. For riders and order recipients, their data is generally deleted within 90 days of a deletion request, except where retention is necessary for the above reasons. |
IV. Choice and transparency
Uber enables users to access and/or control data that Uber collects, including through:
Uber also enables users to request access to or copies of their data, changes or updates to their accounts, or deletion of their accounts, or to request that Uber restricts its processing of user personal data. |
---|
The Settings > Privacy menu in the Uber app allows riders and order recipients to set or update their preferences regarding location data collection and sharing, emergency data sharing, and notifications.
Riders and order recipients can enable/disable Uber to collect location data from their mobile devices through their device settings, which can be accessed via the Settings > Privacy > Location menu.
Riders can enable/disable Uber to share their real-time location data from their mobile devices with their drivers through their device settings, which can be accessed via the Settings > Privacy > Location menu.
Riders can enable Uber to share real-time location data from their mobile devices with emergency police, fire and ambulance services. Such data may include approximate location at the time the emergency call was placed; the car’s make, model, colour and number plate information; the rider’s name and phone number; pick-up and drop-off locations; and driver’s name.
Uber provides users with trip status notifications and updates relating to activity on their account. These notifications are a necessary part of using the Uber app and cannot be disabled. However, users may choose the method by which they receive these notifications through the Settings > Privacy menu.
Users can enable Uber to send push notifications about discounts and news from Uber. Push notifications can be enabled or disabled through the Settings > Privacy menus in the Uber app.
Users can opt in to receiving communications from certain restaurants while placing an order in the Uber Eats app. Those who opt in can choose to stop receiving such communications through the Settings > Account > Data Sharing menus in the Uber Eats app.
Most mobile device platforms (iOS, Android, etc.) have defined certain types of device data that apps cannot access without the device owner’s permission, and these platforms have different methods for how that permission can be obtained. Please check the available settings on your device or check with your provider.
After every trip, drivers and riders are able to rate each other on a scale of 1 to 5. An average of those ratings is associated with a user’s account and is displayed to other users to whom they provide services or from whom they receive services. For example, rider ratings are available to drivers from whom they request transport, and driver ratings are available to riders. This two-way system holds everyone accountable for their behaviour. Accountability helps create a respectful, safe environment for drivers and riders. Riders can see their average rating in the main menu of the Uber app. Drivers can see their average rating after tapping their profile photo in the Uber Driver app. Couriers may also be rated by order recipients, restaurants and merchants. Click here for more information.
Users can opt out of certain marketing communications (including ads) and use of their data for marketing in the following ways:
Uber provides users with a variety of ways to find out about, control, and submit questions and comments about Uber’s handling of their personal data.
Users can submit the above requests here. |
V. Updates to this notice
We may occasionally update this notice. |
---|
We may occasionally update this notice. If we make significant changes, we will notify users in advance of the changes through the Uber apps or through other means, such as email. We encourage users to periodically review this notice for the latest information on our privacy practices. Use of our services after an update constitutes consent to the updated notice to the extent permitted by law. |
Company