Privacy Policy

Uber · agreement dated September 17, 2026 · Official agreement

Read the agreement

40 of 158 cards in Legal Rights & Agreement Rules

Legal Rights & Agreement Rules · Context

Rider and order-recipient privacy notice, last updated September 17, 2026

This is Uber's privacy notice for riders and order recipients, marked last updated September 17, 2026. It says it describes the personal data ("data") Uber collects, how that data is used and shared, and the choices you have about it. Uber recommends reading it together with a separate privacy overview page that highlights key points.

Supporting quotations

Last updated: September 17, 2026
Uber Privacy Notice: Riders and Order Recipients
This notice describes the personal data (“data”) we collect, how it’s used and shared, and your choices regarding this data.

Qualifications & exceptions

  • The privacy overview is recommended reading alongside this notice; the notice does not say the overview changes its terms.

Not stated here

  • The linked privacy overview page is not supplied with this source, so its contents are not analyzed here.

Legal Rights & Agreement Rules · Context

Drivers and delivery people have a separate notice; an earlier version of this notice is linked

The top of the notice links to a separate Uber privacy notice for drivers and delivery people and to a previous version of this privacy notice. Neither linked document is reproduced in this text, so this analysis covers only the rider and order-recipient notice dated September 17, 2026.

Supporting quotations

Uber Privacy Notice: Drivers and Delivery People
Previous version of the Privacy Notice

Not stated here

  • The drivers and delivery people notice and the previous version are not supplied; any differences from this notice are not analyzed.

Legal Rights & Agreement Rules · Context

Covers using Uber apps or websites to request or receive services, except Uber Freight, TrendyolGo and Careem Rides

The notice applies when you use Uber's apps or websites to request or receive products or services, such as rides or deliveries. It expressly does not cover use of Uber Freight, the TrendyolGo app or website, or Careem Rides; those are linked to their own privacy pages.

Supporting quotations

This notice applies when you use Uber’s apps or websites to request or receive products or services, including rides or deliveries.
This notice describes how we collect and use your data if you request or receive products or services through Uber’s apps or websites, except when you use
Uber Freight
TrendyolGo App/website
Careem Rides

Not stated here

  • The Uber Freight, TrendyolGo and Careem Rides privacy pages are linked but not supplied, so how those services handle data is not analyzed here.

Legal Rights & Agreement Rules · Context

Drivers and delivery people providing services are covered by a different notice

This notice does not describe how Uber collects and uses data about people who use Uber to provide services, such as drivers and delivery people; a separate linked notice covers them. In this notice, "users" means everyone who uses Uber to request, receive or provide services.

Supporting quotations

This notice does not describe Uber’s collection and use of your data if you use Uber to provide (instead of request or receive) services through Uber’s app or websites, including as a driver or delivery person.
Those who use Uber to either request, receive or provide services are referred to as “users” in this notice.

Not stated here

  • The drivers and delivery people notice is linked but not supplied.

Legal Rights & Agreement Rules · User right or choice

Argentina: the Agency of Access to Public Information takes data protection complaints

For use in Argentina, the notice says the Agency of Access to Public Information, as the regulating body of Law 25.326, receives complaints and reports from people who believe a violation of the local data protection rules has affected their rights.

Supporting quotations

In addition, please note the following if you use Uber in:
Argentina
The Agency of Access to Public Information, in its role of Regulating Body of Law 25.326, is responsible for receiving complaints and reports presented by any data subjects who believe their rights have been impacted by a violation of the local data protection regulation.

Qualifications & exceptions

  • Law 25.326 is named but its contents are not supplied in this notice.

Legal Rights & Agreement Rules · User right or choice

Australia: you can raise privacy compliance concerns with Uber or the Information Commissioner

If you use Uber in Australia, you may contact Uber through a linked inquiry page about its compliance with the Australian Privacy Principles. Uber says its customer service and/or privacy teams will address these contacts within a reasonable timeframe, without stating a specific deadline. You may also contact the Office of the Australian Information Commissioner with concerns about that compliance.

Supporting quotations

Australia
regarding our compliance with the Australian Privacy Principles. Such contacts will be addressed by Uber’s customer service and/or relevant privacy teams within a reasonable timeframe.
You may also contact the Office of the Australian Information Commissioner
with concerns regarding such compliance.

Qualifications & exceptions

  • "A reasonable timeframe" is not defined in the notice.

Legal Rights & Agreement Rules · Context

Brazil: LGPD-specific privacy information is in a separate linked document

For Brazil, the notice points to a separate linked document for information on Uber's privacy practices under Brazil's General Data Protection Law (LGPD). That document is not part of this text.

Supporting quotations

Brazil
for information regarding Uber’s privacy practices as relates to Brazil’s General Data Protection Law (Lei Geral de Proteção de Dados - LGPD).

Not stated here

  • The linked Brazil LGPD document is not supplied, so any Brazil-specific practices or rights are not analyzed here.

Legal Rights & Agreement Rules · Context

Colombia, Honduras and Jamaica: riders are called "lessees" and drivers "lessors"

In Colombia, Honduras and Jamaica, the people this notice calls "riders" and "drivers" are known as "lessees" and "lessors" respectively. The notice gives the naming difference only; it does not say any practice changes.

Supporting quotations

Colombia, Honduras and Jamaica
“Riders” and “drivers” as used in this notice are known respectively as “lessees” and “lessors.”

Legal Rights & Agreement Rules · Context

Switzerland: Uber Switzerland GmbH is Uber's representative under the Federal Act on Data Protection

For users in Switzerland, Uber Switzerland GmbH (Stockerstrasse 33, 8002 Zürich) is Uber's appointed representative for purposes of the Swiss Federal Act on Data Protection. It can be contacted through a linked inquiry page or by mail about matters under that act.

Supporting quotations

In addition, for users in Switzerland, Uber Switzerland GmbH (Stockerstrasse 33 8002 Zürich, Switzerland) is Uber’s appointed representative for purposes of the Federal Act on Data Protection and may be contacted
or by mail as relates to that act.

Legal Rights & Agreement Rules · User right or choice

EEA, UK and Switzerland: you may contact your country's data protection authority about Uber

Under the note for the European Economic Area, United Kingdom and Switzerland, the notice says you also have the right to contact the data protection authority ("DPA") in your country, using a linked list of contact details, if you have concerns about how Uber handles your data.

Supporting quotations

You also have the right to contact the data protection authority (“DPA”) in your country via the contact information listed
if you have concerns regarding our handling of your data.

Legal Rights & Agreement Rules · User right or choice

Kenya: contact Uber or the Data Protection Commissioner about rights under the Data Protection Act 2019

If you use Uber in Kenya, you may contact Uber through a linked inquiry page with questions about its compliance with Kenya's Data Protection Act of 2019, or to ask to exercise your rights under that act. You may also contact the Office of the Data Protection Commissioner with concerns about that compliance or the exercise of your rights.

Supporting quotations

Kenya
with questions regarding Uber’s compliance with, or to request exercise of your rights under, Kenya’s Data Protection Act of 2019. You may also contact the Office of the Data Protection Commissioner
with concerns regarding such compliance or exercise of your rights.

Qualifications & exceptions

  • The rights under Kenya's Data Protection Act are referred to but not listed in this notice.

Legal Rights & Agreement Rules · Context

Saudi Arabia: the PDPL applies, and Uber Saudi Limited represents controller Uber Technologies Inc.

For processing within the Kingdom of Saudi Arabia, the notice says the Saudi Personal Data Protection Law (PDPL) applies. Under the PDPL, Uber Saudi Limited acts as the local representative of the data controller, Uber Technologies Inc.

Supporting quotations

Kingdom of Saudi Arabia
The Saudi Personal Data Protection Law (PDPL) applies to our processing of personal data within the Kingdom of Saudi Arabia. In accordance with the PDPL, Uber Saudi Limited acts as the local representative of the data controller i.e. Uber Technologies Inc.

Legal Rights & Agreement Rules · User right or choice

Saudi Arabia: rights to be informed, access, correct or destroy data, and to withdraw consent where applicable

For Saudi Arabia, the notice lists rights to be informed about, access, correct, or request destruction of your personal data, and to withdraw consent where applicable. You can exercise these rights or contact Uber's Data Protection Officer through a linked inquiry page. Questions, comments and requests about the notice can also be mailed to Uber Saudi Limited in Riyadh or to Uber Technologies, Inc. in San Francisco.

Supporting quotations

You have the right to be informed, access, correct, or request the destruction of your personal data. You may also withdraw consent where applicable.
To exercise these rights or contact Uber’s Data Protection Officer (DPO), please click
Please refer to our Privacy Notice for further information about your rights.
If you have any questions, comments and requests related to the Privacy Notice, you may also contact Uber by mail to:
Local Office: Uber Saudi Limited, Building No. 6247, Al Olaya St., Al Muruj Dist., Riyadh 12281 - 2783, Kingdom of Saudi Arabia (Short Address: RHGA6247).
Global HQ: Uber Technologies, Inc., 1725 3rd Street, San Francisco, CA 94158.

Qualifications & exceptions

  • Withdrawal of consent is available only "where applicable"; the notice does not say here which processing relies on consent.

Legal Rights & Agreement Rules · User right or choice

Saudi Arabia: you may complain to SDAIA if you believe the PDPL was violated

If you believe your data was handled in violation of the Saudi PDPL, the notice says you have the right to lodge a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA) through a linked contact page.

Supporting quotations

If you believe your data has been handled in violation of the PDPL, you have the right to lodge a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA)

Legal Rights & Agreement Rules · Context

Mexico: privacy practices under Mexican law and Uber Money processing are in separate linked documents

For Mexico, the notice links to a separate document about Uber's privacy practices under Mexico's Personal Data Protection Law and another about how Uber Money processes personal data. Neither document is part of this text.

Supporting quotations

Mexico
for information regarding Uber’s privacy practices as relates to Mexico’s Personal Data Protection Law (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), and
for information regarding Uber Money's processing of personal data.

Not stated here

  • The linked Mexico privacy document and the Uber Money processing document are not supplied and are not analyzed here.

Legal Rights & Agreement Rules · User right or choice

Nigeria: contact Uber or the Data Protection Commission about rights under the Data Protection Act 2023

If you use Uber in Nigeria, you may contact Uber through a linked inquiry page about its compliance with Nigeria's Data Protection Act of 2023 or to ask to exercise your rights under it. You may also contact the Nigeria Data Protection Commission with concerns about that compliance.

Supporting quotations

Nigeria
regarding Uber’s compliance with, or to request exercise of your rights under Nigeria’s Data Protection Act of 2023. You may also contact the Nigeria Data Protection Commission
with concerns regarding such compliance.

Qualifications & exceptions

  • The rights under Nigeria's Data Protection Act are referred to but not listed in this notice.

Legal Rights & Agreement Rules · User right or choice

Peru: exercise rights under Peruvian data protection law or reach the DPO online or by mail

If you use Uber in Peru, you may use a linked inquiry page to exercise your rights under Peruvian data protection law or to contact Uber's Data Protection Officer. You may also write to the data controller, Uber Technologies, Inc., 1725 3rd Street, San Francisco, CA 94158, United States.

Supporting quotations

Peru
to exercise your rights under Peruvian Data Protection Law or contact Uber's Data Protection Officer (DPO). You may also contact the data controller by mail at: Uber Technologies, Inc., 1725 3rd Street, San Francisco, CA 94158, United States.

Qualifications & exceptions

  • The rights under Peruvian law are referred to but not listed in this notice.

Legal Rights & Agreement Rules · Context

Taiwan: cross-border transfer measures and a payment data privacy notice are in separate linked documents

For Taiwan, the notice links to a document on the measures Uber adopts for cross-border data transfers under Taiwan's Personal Data Protection Act and its regulations, and to a separate Taiwan Payment Data Privacy Notice describing how Uber collects, uses and shares payment-related personal data. Neither document is part of this text.

Supporting quotations

Taiwan
for information on the measures adopted by Uber when conducting cross-border data transfers in accordance with Taiwan’s Personal Data Protection Act and its relevant regulations, as well as other related information.
for information on the Taiwan Payment Data Privacy Notice, which describes how we collect, use and share your payments related personal data.

Not stated here

  • The Taiwan cross-border transfer document and the Taiwan Payment Data Privacy Notice are not supplied and are not analyzed here.

Legal Rights & Agreement Rules · Context

Türkiye: additional information under Turkish data protection law (KVKK) is in a linked document

For Türkiye, the notice links to a document with additional information about Uber's privacy practices and its processing of personal data under the Turkish Law on the Protection of Personal Data No. 6698 ("KVKK"). That document is not part of this text.

Supporting quotations

Türkiye
for additional information regarding Uber's privacy practices in Türkiye and the processing of personal data under the Turkish Law on the Protection of Personal Data No. 6698 ("KVKK").

Not stated here

  • The linked Türkiye document is not supplied and is not analyzed here.

Legal Rights & Agreement Rules · Context

United States: state privacy law (including CCPA) and consumer health data information are on separate pages

For the United States, the notice points to a separate page about Uber's privacy practices under US state privacy laws, including the California Consumer Privacy Act. If you use Uber in Nevada or Washington, it points to another document about Uber's collection and use of consumer health data under those states' privacy laws. Neither page is part of this text, so US state-law rights are not described here.

Supporting quotations

United States
for information regarding Uber’s privacy practices as relates to US state privacy laws, including the California Consumer Privacy Act. If you use Uber in Nevada or Washington, please go
for information regarding Uber’s practices as relates to collection and use of consumer health data under those states’ privacy laws.

Not stated here

  • The US state privacy law page and the Nevada/Washington consumer health data document are not supplied; any state-specific rights or practices they describe are not analyzed here.

Legal Rights & Agreement Rules · Procedure

Questions about Uber's practices in a particular country or region go through its privacy inquiry page

After the country and region notes, the notice invites you to contact Uber through a linked inquiry page with any questions about its practices in a particular country or region.

Supporting quotations

with any questions regarding our practices in a particular country or region.

Legal Rights & Agreement Rules · Company practice

Uber uses data, including in-vehicle recordings and messages, to enforce its terms and community guidelines

Uber uses data to enforce its Terms and Conditions, Community Guidelines and other policies and standards communicated to you. The data used includes account data, communications, data from other sources (driver data), device data, identity verification data, in-vehicle recordings, location, trip/order and usage data.

Supporting quotations

e. Enforcing Uber’s Terms and Conditions, Community Guidelines, and other policies and standards that are communicated to you.
Account
Communications
Data from other sources (driver data)
Device
Identity verification
In-vehicle recordings
Location
Trip/order
Usage

Legal Rights & Agreement Rules · User right or choice

Depending on where you are, you may complain to your country's data protection authority

Depending on your location, you may have the right to file a complaint about Uber's handling of your data with the data protection authority in your country.

Supporting quotations

In addition, depending on your location, you may have the right to file a complaint relating to Uber’s handling of your data with the data protection authority in your country.

Legal Rights & Agreement Rules · Context

Uber Technologies, Inc. is the data controller globally, alone or jointly with affiliates, subject to listed exceptions

Uber Technologies, Inc. ("UTI") says it is the sole controller of the data Uber processes when you use its services globally, except where it is a joint controller with other Uber affiliates. The notice then lists regional exceptions.

Supporting quotations

Uber Technologies, Inc. is the sole controller of the data processed by Uber when you use Uber’s services globally, except where it is a joint controller with other Uber affiliates.
Uber Technologies, Inc. (“UTI”) is controller of the data processed by Uber when you use Uber’s services globally, except that:

Cross-references

Legal Rights & Agreement Rules · Context

Other Uber entities are controllers for Mexico and EEA/UK payments, EEA/UK/Swiss use, South Korea and Türkiye Uber Eats

The listed exceptions are: UTI and UBR Pagos Mexico, S.A. de C.V. are controllers for users of Uber's payment and e-money services in Mexico; UTI and Uber B.V., together with Uber Payments BV, are joint controllers for those services in the EEA, and with Uber Payments UK Ltd. in the UK; UTI and Uber B.V. are joint controllers for all other uses of Uber in the EEA, UK and Switzerland; UT LLC is the controller when you use Uber in South Korea; and UTI and TYG Turkey Elektronik Ticaret Hizmetleri ve Yatırımları A.Ş. are joint controllers when you use Uber Eats in Türkiye.

Supporting quotations

UTI and UBR Pagos Mexico, S.A. de C.V., are controllers of the data of users of Uber’s payment and e-money services in Mexico.
UTI and Uber B.V. are together with Uber Payments BV joint controllers of the data of users of Uber’s payment and e-money services in the EEA, and with Uber Payments UK Ltd. for users of those services in the UK.
UTI and Uber B.V. are joint controllers of the data processed in connection with all other uses of Uber’s services in the EEA, UK and Switzerland.
UT LLC is the controller of the data processed when you use Uber services in South Korea.
UTI and TYG Turkey Elektronik Ticaret Hizmetleri ve Yatırımları A.Ş. are joint controllers of the data processed when you use Uber Eats services in Türkiye.

Legal Rights & Agreement Rules · Procedure

You can contact Uber's Data Protection Officer online or by mail to Uber B.V. in Amsterdam

You may contact Uber's Data Protection Officer through uber.com/privacy-dpo, or by mail to Uber B.V. (Burgerweeshuispad 301, 1076 HR Amsterdam, the Netherlands), about issues relating to Uber's processing of your personal data and your data protection rights.

Supporting quotations

You may also contact Uber's Data Protection Officer at
or by mail to Uber B.V. (Burgerweeshuispad 301, 1076 HR Amsterdam, the Netherlands) regarding issues relating to Uber's processing of your personal data and your data protection rights.

Legal Rights & Agreement Rules · Context

Contract basis: core service uses such as pricing, accounts, support, payments and receipts rely on your contract

When you set up an Uber account or request a ride or delivery, you enter a contract defined by Uber's terms and conditions. Uber relies on this contract basis when it must use your data to provide the services you request and meet its responsibilities under that contract. The uses listed are calculating prices and fares, creating or updating your account, customer support, enabling communications with your driver or delivery person, enabling services and features, maintaining its services, personalizing your account, processing payments, and providing trip or delivery updates, receipts and notices of changes.

Supporting quotations

Contract
When you set up your Uber account and/or request a ride or delivery from Uber, we are entering into a contract defined by our
This legal basis applies when we must use your data in order to provide the services you request and meet our responsibilities under that contract.
Calculating rider/recipient prices and driver/delivery person fares
Creating or updating your account
Customer support
Enabling communications between you and your driver or delivery person
Enabling services and features
Performing necessary operations to maintain our services
Personalizing your account
Processing payments
Providing you with trip or delivery updates, generating receipts, and informing you of changes to our terms, services or policies
The chart below indicates the legal bases that Uber has under those laws when they do apply, and it uses your data for the purposes described in this notice.

Qualifications & exceptions

  • The legal-basis chart applies under laws that require a legal basis (for example in the EEA, UK, Switzerland, Brazil, Türkiye and Nigeria) when they apply.

Not stated here

  • The linked terms and conditions are not supplied with this notice.

Legal Rights & Agreement Rules · Context

Legitimate interests cover trip-based ads, ad measurement, marketing personalization, fraud, safety and R&D

Uber relies on legitimate interests when it has a legitimate interest in using your data (such as safety, security and fraud prevention), the processing is necessary for that purpose, and the benefit is not outweighed by risks to your privacy, for example because you would not expect the use or because it would prevent you from exercising your rights. The uses listed are ads targeted on your current trip or delivery request, measuring marketing and ad effectiveness, non-marketing communications, personalizing marketing communications and ads for Uber and for other companies, predicting and helping avoid conflict-risk pairings, fraud prevention, live safety support, research and development, and verifying your account, identity or safety compliance.

Supporting quotations

Legitimate interests
This legal basis applies when Uber has a legitimate interest for using your data (such as for purposes of safety, security, and fraud prevention and detection), its processing of data is necessary for that purpose, and the benefit of such purpose is not outweighed by risks to your privacy (such as because you would not expect Uber’s use of your data, or because it would prevent you from exercising your rights).
Displaying ads that are targeted based on data about your current trip or delivery request
Measuring the effectiveness of the marketing communications and ads
Non-marketing communications
Personalizing marketing communications and ads relating to Uber products and services, and those offered by other companies
Predicting and helping avoid pairings of users that may result in increased risk of conflict
Preventing, detecting and combating fraud
Providing live support from safety experts during trips or deliveries
Research and development
Verifying your account, identity or compliance with safety requirements
The chart below indicates the legal bases that Uber has under those laws when they do apply, and it uses your data for the purposes described in this notice.

Qualifications & exceptions

  • The legal-basis chart applies under laws that require a legal basis (for example in the EEA, UK, Switzerland, Brazil, Türkiye and Nigeria) when they apply.

Legal Rights & Agreement Rules · Company practice

Transfers out of the EEA, UK and Switzerland use contract need, consent, adequacy, SCCs or the Data Privacy Framework

When Uber transfers user data from the EEA, UK and Switzerland, it relies on the necessity to fulfill its agreements with you, consent, adequacy decisions about the destination country, and transfer mechanisms such as the European Commission's Standard Contractual Clauses (and approved UK and Swiss equivalents), the EU-US Data Privacy Framework ("EU-US DPF"), the UK Extension to it, and the Swiss-US Data Privacy Framework. Uber says the data remains subject to the GDPR or equivalent laws after transfer. You can contact Uber about this or to request copies of applicable Standard Contractual Clauses.

Supporting quotations

When we transfer user data from the EEA, UK and Switzerland, we do so on the basis of the necessity to fulfill our agreements with you, consent, adequacy decisions regarding the country of transfer
Standard Contractual Clauses
adopted by the European Commission (and their approved equivalents for the UK and Switzerland), and the EU-US Data Privacy Framework (“EU-US DPF”), the UK Extension to the EU-US DPF, and the Swiss-US Data Privacy Framework (“Swiss-US DPF”), as set forth by the US Department of Commerce. Such data remains subject to the GDPR or equivalents after such transfer. Users may contact Uber regarding the above, or to request copies of applicable Standard Contractual Clauses,

Legal Rights & Agreement Rules · Company commitment

UTI is certified under the EU-US and Swiss-US Data Privacy Frameworks; their Principles govern if this notice conflicts

Uber Technologies, Inc. has certified to the US Department of Commerce that it follows the EU-US Data Privacy Framework Principles for personal data received from EEA countries and, through the UK Extension, from the UK and Gibraltar, and the Swiss-US Data Privacy Framework Principles for data received from Switzerland. If this notice conflicts with those Principles, the Principles govern. If either framework is invalidated, Uber says it will transfer the covered data under the other transfer mechanisms it describes.

Supporting quotations

UTI has certified to the United States Department of Commerce that it adheres to (1) the EU-US Data Privacy Framework Principles regarding the processing of personal data received from EEA member countries in reliance on the EU-US DPF, and from the UK (and Gibraltar) in reliance on the UK Extension to the EU-US DPF; and (2) the Swiss-US Data Privacy Framework Principles regarding the processing of personal data received from Switzerland in reliance on the Swiss-US DPF. In the event of a conflict between this notice and the Principles mentioned above, the Principles shall govern. In the event that the EU-US DPF or the Swiss-US DPF are invalidated, Uber will transfer data that is subject to these certifications in reliance on the other data transfer mechanisms described above.

Not stated here

  • The DPF Principles themselves are not supplied in this notice.

Legal Rights & Agreement Rules · User right or choice

EEA, UK and Swiss residents can access DPF-covered data; Uber is responsible for onward transfers and subject to the FTC

For people in the EEA, UK or Switzerland, the notice says Uber's DPF certification applies to personal data originating from those places. You have the right to access your personal data covered by the certification, using the methods in the Choice and transparency section. Uber is responsible for transfers of personal data to third parties, subject to its certification, and points to its Data sharing and disclosure section for the recipients. Uber is subject to the investigatory and enforcement powers of the US Federal Trade Commission.

Supporting quotations

If you live in the EEA, UK or Switzerland, please note the following:
Scope. Uber’s DPF certification applies to personal data originating from the EEA, UK or Switzerland.
Access. You have the right to access your personal data that is subject to Uber’s DPF certification. For information on how to exercise this right, please see “Choice and transparency” above.
Onward transfer. Uber is responsible for the transfer of personal data, subject to its certification to third parties.
Investigation and enforcement. Uber is subject to the investigatory and enforcement powers of the US Federal Trade Commission.

Legal Rights & Agreement Rules · User right or choice

Unresolved DPF complaints go to EU, UK or Swiss regulator panels, local DPAs or, in some cases, binding arbitration

Under the EU-US DPF, its UK Extension and the Swiss-US DPF, Uber commits to cooperate with and follow the advice of the panel set up by EU data protection authorities, the UK Information Commissioner's Office and the Swiss Federal Data Protection and Information Commissioner on unresolved complaints about its handling of personal data received under those frameworks. You may contact Uber with questions about its compliance with the Principles, and you may refer a complaint to your local data protection authority, which Uber says it will work with to resolve. In certain circumstances, the DPF gives a right to invoke binding arbitration for complaints not resolved by other means, as described in Annex I to the DPF Principles. You can learn more about the frameworks and view Uber's certification, including the scope of data it covers, on linked DPF pages.

Supporting quotations

Questions and disputes. In compliance with the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF, Uber commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF.
with questions regarding our compliance with these Principles. You may also refer a complaint to your local data protection authority, and Uber will work with that authority to resolve that complaint. In certain circumstances, the DPF provides the right to invoke binding arbitration to resolve complaints not resolved by other means, as described in Annex I to the
You can learn more about the EU-US DPF and Swiss-US DPF
and view Uber’s certification, including the scope of data subject to our certification,

Qualifications & exceptions

  • Binding arbitration is available only "in certain circumstances" defined by the DPF, for complaints not resolved by other means.

Not stated here

  • Annex I to the DPF Principles and Uber's certification listing are linked but not supplied.

Legal Rights & Agreement Rules · Company commitment

Uber may update the notice and will notify you in advance of significant changes in the app or by email

Uber may occasionally update this notice. For significant changes, it says it will notify you in advance through the Uber apps or other means, such as email. Uber encourages you to review the notice periodically.

Supporting quotations

We may occasionally update this notice. If we make significant changes, we will notify you in advance of the changes through the Uber apps or through other means, such as email. We encourage you to periodically review this notice for the latest information on our privacy practices.

Qualifications & exceptions

  • Advance notice is promised only for "significant" changes, which the notice does not define.