Uber Privacy Notice
I. Introduction / II. Overview / III. Data collections and uses / IV. Choice and transparency / V. Updates to this notice
I. Introduction
When you use Uber, you trust us with your personal data. We’re committed to keeping that trust. That starts with helping you understand our privacy practices. This notice describes the personal data we collect, how it’s used and shared, and your choices regarding this data. We recommend that you read this along with our privacy overview, which highlights key points about our privacy practices. |
---|
II. Overview
A. ScopeThis notice applies to users of Uber’s services anywhere in the world, including users of Uber’s apps, websites, features, or other services. |
---|
This notice describes how Uber and its affiliates collect and use personal data. This notice applies to all users of our apps, websites, features, or other services anywhere in the world, unless covered by a separate privacy notice, such as the Uber Freight Privacy Notice or Careem Privacy Policy. This notice specifically applies to:
This notice also governs Uber’s other collections of personal data in connection with its services. For example, we may collect the contact information of individuals who use accounts owned by Uber for Business customers, or of owners or employees of restaurants or other merchants; personal data of those who start but do not complete applications to be drivers or delivery persons; or other personal data in connection with our mapping technology and features. All those subject to this notice are referred to as “users” in this notice. In addition, please note the following:
Our practices are subject to applicable laws in the places in which we operate. This means that we engage in the practices described in this notice in a particular country or region only if permitted under the laws of those places. Please contact us here or through the addresses below with any questions regarding our practices in a particular country or region. |
B. Data controller and transferUber B.V. and Uber Technologies Inc. are the data controllers for the personal data collected in connection with use of Uber’s services in the European Economic Area, the United Kingdom and Switzerland. Uber Technologies Inc. is the data controller for the personal data collected in connection with use of Uber’s services everywhere else. |
---|
Uber B.V. (Mr. Treublaan 7, 1097 DP, Amsterdam, the Netherlands) and Uber Technologies Inc. (1515 3rd Street, San Francisco, CA, 94158, USA) are the data controllers for the personal data collected in connection with use of Uber’s services in the European Economic Area, the United Kingdom and Switzerland. If you’re a driver in the UK, the Uber entity holding the relevant PHV operator license is a controller for complying with licensing requirements. Uber Technologies Inc. is the data controller for the personal data collected in connection with use of Uber’s services everywhere else. Uber operates, and processes personal data, globally. We may also transfer such data to countries other than the one where our users live or use Uber’s services. We do so in order to fulfill our agreements with users, such as our Terms of Use, or based on users’ prior consent, adequacy decisions for the relevant countries, or other transfer mechanisms as may be available under applicable law, such as the Standard Contractual Clauses. Questions, comments, and complaints about Uber’s data practices can be submitted here. You may also use this form to submit a question to Uber’s Data Protection Officer. |
III. Data collections and uses
A. The data we collectUber collects personal data:
|
---|
The following personal data is collected by or on behalf of Uber: 1. Data provided by users. This includes:
2. Data created during use of our services. This includes:
3. Data from other sources. These include:
Uber may combine the data collected from these sources with other data in its possession. |
B. How we use personal dataUber uses personal data to enable reliable and convenient transportation, delivery, and other products and services. We also use such data:
Uber does not sell or share user personal data with third parties for their direct marketing, except with users’ consent. |
---|
We use personal data we collect: 1. To provide our services. Uber uses data to provide, personalize, maintain, and improve our services.
Uber performs the above activities, including the collection and use of location data for purposes of these activities, on the grounds that they are necessary to fulfill our obligations to users under our Terms of Use or other agreements with users. 2. Safety and security. We use personal data to help maintain the safety, security, and integrity of our services and users. This includes:
Uber performs the above activities on the grounds that they are necessary to fulfill our obligations to users under our Terms of Use or other agreements with users, and/or for purposes of the legitimate safety and security interests of Uber or other parties, including users and members of the general public. 3. Customer support. Uber uses the information we collect (which may include call recordings) to provide customer support, including to investigate and address user concerns and to monitor and improve our customer support responses and processes. Uber performs the above activities on the grounds that they are necessary to fulfill our obligations to users under our Terms of Use or other agreements with users. 4. Research and development. We may use personal data for testing, research, analysis, product development, and machine learning to improve the user experience. This helps us make our services more convenient and easy-to-use, enhance the safety and security of our services, and develop new services and features. Uber performs the above activities on the grounds that they are necessary to fulfil our obligations to users under our Terms of Use or other agreements with users in improving our existing services and features, or for purposes of Uber’s legitimate interests developing new services and features. 5. Enabling communications between users. For example, a driver may message or call a rider to confirm a pickup location, a rider may contact a driver to retrieve a lost item, or a restaurant or delivery person may call a delivery recipient with information about their order. Uber performs the above activities on the grounds that they are necessary to fulfill our obligations to users under our Terms of Use or other agreements with users. 6. Marketing. Uber may use personal data to market our services to our users. This includes sending users communications about Uber services, features, promotions, sweepstakes, studies, surveys, news, updates, and events. We may do so through various methods, including email, text messages, push notifications, in app communications and ads, and ads on third party platforms. We may also inform users about products and services offered by Uber partners. For example, we may provide recommendations, promotions, or ads for Uber partners based on users’ past delivery orders. Although we inform users about products and services offered by Uber partners, we do not sell users’ personal data to, or share it with, such partners or others for purposes of their own direct marketing or advertising, except with users’ consent. We may use the data we collect, including in combination with advertising partners’ data, to personalize and improve the marketing communications (including ads) that we send on and off Uber’s apps and websites, including based on user location, use of Uber’s services, and user preferences and settings. For example, we share user data (such as hashed email address, usage information, and device or user identifiers) with Facebook and TikTok to personalize and improve our ads for Uber’s services. For information about how to opt out of certain marketing communications (including ads) from Uber and its advertising partners, please see the section titled “Marketing choices.” We may also send users communications regarding elections, ballots, referenda, and other political and notice processes that relate to our services. For example, Uber has notified some users by email of ballot measures or pending legislation relating to Uber’s services in those users’ areas. Uber performs the above activities on the grounds that they are necessary for purposes of Uber’s legitimate interests in informing users about Uber services and features or those offered by Uber partners, or on the basis of user consent. See the sections titled “Choice and transparency” and “Marketing choices” for information on your choices regarding Uber’s use of your data for marketing. 7. Non-marketing communications. Uber may use personal data to generate and provide users with receipts; inform them of changes to our terms, services, or policies; or send other communications that aren’t for the purpose of marketing the services or products of Uber or its partners. Uber performs the above activities on the grounds that they are necessary to fulfill our obligations to users under our Terms of Use or other agreements with users, or for purposes of Uber’s and it’s users legitimate interests in informing users about events that may have an impact on how they can use Uber services. 8. Legal proceedings and requirements. We may use personal data to investigate or address claims or disputes relating to use of Uber’s services, to satisfy requirements under applicable laws, regulations, or operating licenses or agreements, or pursuant to legal process or governmental request, including from law enforcement. Uber performs the above activities on the grounds that they are necessary for purposes of Uber’s legitimate interests in investigating and responding to claims and disputes relating to use of Uber’s services and features, and/or necessary for compliance with applicable legal requirements. 9. Automated decision-making We use personal data to make automated decisions relating to use of our services. This includes:
Click the links in this section for more information about these processes. To object to a deactivation resulting from these processes, please contact Uber customer support. Uber performs the above activities on the grounds that they are necessary to fulfill our obligations to users under our Terms of Use or other agreements with users, or on the grounds that they are necessary for purposes of the legitimate interests of Uber, its users and others. |
C. Cookies and third-party technologiesUber and its partners use cookies and other identification technologies on our apps, websites, emails, and online ads for purposes described in this notice, and Uber’s Cookie Notice. |
---|
Cookies are small text files that are stored on browsers or devices by websites, apps, online media, and advertisements. Uber uses cookies and similar technologies for purposes such as:
We may also allow others to provide audience measurement and analytics services for us, to serve advertisements on our behalf across the Internet, and to track and report on the performance of those advertisements. These entities may use cookies, web beacons, SDKs, and other technologies to identify the devices used by visitors to our websites, as well as when they visit other online sites and services. Please see our Cookie Notice for more information regarding the use of cookies and other technologies described in this section. |
D. Data sharing and disclosureSome of Uber’s services and features require that we share personal data with other users or at a user’s request. We may also share such data with our affiliates, subsidiaries, and partners, for legal reasons or in connection with claims or disputes. |
---|
Uber may share personal data: 1. With other users This includes sharing:
2. At the user’s request This includes sharing data with:
3. With the general public Questions or comments from users submitted through public forums such as Uber blogs and Uber social media pages may be viewable by the public, including any personal data included in the questions or comments submitted by a user. 4. With the Uber account owner If a user requests transportation or places an order using an account owned by another party, we may share their order or trip information, including location data, with the owner of that account. This occurs, for example, when:
5. With Uber subsidiaries and affiliates We share personal data with our subsidiaries and affiliates to help us provide our services or conduct data processing on our behalf. For example, Uber processes and stores such data in the United States on behalf of its international subsidiaries and affiliates. 6. With Uber service providers and business partners Uber provides personal data to vendors, consultants, marketing partners, research firms, and other service providers or business partners. These include:
7. For legal reasons or in the event of a dispute Uber may share users’ personal data if we believe it’s required by applicable law, regulation, operating license or agreement, legal process or governmental request, or where the disclosure is otherwise appropriate due to safety or similar concerns. This includes sharing personal data with law enforcement officials, public health officials, other government authorities, airports (if required by the airport authorities as a condition of operating on airport property), or other third parties as necessary to enforce our Terms of Service, user agreements, or other policies; to protect Uber’s rights or property or the rights, safety, or property of others; or in the event of a claim or dispute relating to the use of our services. In the event of a dispute relating to use of another person’s credit card, we may be required by law to share your personal data, including trip or order information, with the owner of that credit card. For more information, please see Uber’s Guidelines for Law Enforcement Authorities - United States, Guidelines for Law Enforcement Authorities - Outside the US, and Guidelines for Third Party Data Requests and Service of Legal Documents. This also includes sharing personal data with others in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company. 8. With consent Uber may share a user’s personal data other than as described in this notice if we notify the user and they consent to the sharing. |
E. Data retention and deletionUber retains user data for as long as necessary for the purposes described above. Users may request deletion of their accounts at any time. Uber may retain user data after a deletion request due to legal or regulatory requirements or for reasons stated in this policy. |
---|
Uber retains user data for as long as necessary for the purposes described above. This means that we retain different categories of data for different periods of time depending on the type of data, the category of user to whom the data relates, and the purposes for which we collected the data. Following an account deletion request, Uber deletes the user’s account and data, unless they must be retained due to legal or regulatory requirements, for purposes of safety, security, and fraud prevention, or because of an issue relating to the user’s account such as an outstanding credit or an unresolved claim or dispute. Because we are subject to legal and regulatory requirements relating to drivers and delivery persons, this generally means that we retain their account and data for a minimum of 7 years after a deletion request. For riders and delivery recipients, their data is generally deleted within 90 days of a deletion request, except where retention is necessary for the above reasons. |
IV. Choice and transparency
Uber enables users to access and/or control data that Uber collects, including through:
Uber also enables users to request access to or copies of their data, changes or updates to their accounts, or deletion of their accounts, or that Uber restricts its processing of user personal data. |
---|
1. Privacy settings The Settings > Privacy menu in the Uber app allows riders and delivery recipients to set or update their preferences regarding location data collection and sharing, emergency data sharing, and notifications.
Riders and delivery recipients can enable/disable Uber to collect location data from their mobile devices through their device settings, which can be accessed via the Settings > Privacy > Location menu.
Riders can enable/disable Uber to share their real-time location data from their mobile devices with their drivers through their device settings, which can be accessed via the Settings > Privacy > Location menu.
Riders may enable Uber to share real-time location data from their mobile devices with emergency police, fire, and ambulance services. Such data may include approximate location at the time the emergency call was placed; the car’s make, model, color, and license plate information; the rider’s name and phone number; pickup and dropoff locations; and the driver’s name.
Uber provides users with trip status notifications and updates related to activity on their account. These notifications are a necessary part of using the Uber app and cannot be disabled. However, users may choose the method by which they receive these notifications through the Settings > Privacy menu.
Users may enable Uber to send push notifications about discounts and news from Uber. Push notifications may be enabled or disabled through the Settings > Privacy menus in the Uber app.
Users may opt-in to receive communications from certain restaurants while placing an order in the Uber Eats app. Those who opt-in may choose to cease receiving such communications through the Settings > Account > Data Sharing menus in the Uber Eats app. 2. Device permissions Most mobile device platforms (iOS, Android, etc.) have defined certain types of device data that apps cannot access without the device owner’s permission, and these platforms have different methods for how that permission can be obtained. Please check the available settings on your device or check with your provider. 3. In-app ratings pages After every trip, drivers and riders are able to rate each other on a scale from 1 to 5. An average of those ratings is associated with a user’s account and is displayed to other users for whom they provide or receive services. For example, rider ratings are available to drivers from whom they request transportation, and driver ratings are available to their riders. This 2-way system holds everyone accountable for their behavior. Accountability helps create a respectful, safe environment for drivers and riders. Riders can see their average rating in the main menu of the Uber app. Drivers can see their average rating after tapping their profile photo in the Uber Driver app. Delivery persons may also be rated by delivery recipients, restaurants and merchants. Click here for more information. 4. Marketing choices Users may opt out of certain marketing communications (including ads) and use of their data for marketing in the following ways:
5. User personal data requests Uber provides users with a variety of ways to learn about, control, and submit questions and comments about Uber’s handling of their personal data.
Users may submit the above requests here. |
V. Updates to this notice
We may occasionally update this notice. |
---|
We may occasionally update this notice. If we make significant changes, we will notify users in advance of the changes through the Uber apps or through other means, such as email. We encourage users to periodically review this notice for the latest information on our privacy practices. Use of our services after an update constitutes consent to the updated notice to the extent permitted by law. |
Firma