Notice was last updated October 22, 2026, and an earlier version is linked
The page states that it was last updated on October 22, 2026, and offers a link to a previous version of the privacy notice. This analysis covers the October 22, 2026 text only; the earlier version is a separate document.
The previous version of the Privacy Notice is a separate linked document whose text is not supplied here.
Legal Rights & Agreement Rules · Context
The notice describes what personal data Uber collects, how it is used and shared, and your choices
Uber presents this notice as an explanation of its privacy practices for people who use Uber. It says it describes the personal data it collects, how that data is used and shared, and the choices people have about it, and it recommends reading the notice together with a separate privacy overview.
Details not recorded for this card
Supporting quotations
When you use Uber, you trust us with your personal data. We’re committed to keeping that trust. That starts with helping you understand our privacy practices.
This notice describes the personal data (“data”) we collect, how it’s used and shared, and your choices regarding this data. We recommend that you read this along with our
Not stated here
The linked privacy overview, which the notice says highlights key points, is a separate document and is not supplied here.
Legal Rights & Agreement Rules · Context
Drivers and delivery people are covered by a separate Uber privacy notice
The page links to a different Uber privacy notice addressed to drivers and delivery people. This notice, titled for riders and order recipients, is the one analyzed here.
The Drivers and Delivery People privacy notice is a separate linked document whose text is not supplied here.
Legal Rights & Agreement Rules · Context
The notice applies when you use Uber apps or websites to request or receive products or services
The notice covers people who use Uber’s apps or websites to request or receive products or services, including rides and deliveries. It describes how Uber collects and uses their data.
Details not recorded for this card
Supporting quotations
This notice applies when you use Uber’s apps or websites to request or receive products or services, including rides or deliveries.
This notice describes how we collect and use your data if you request or receive products or services through Uber’s apps or websites, except when you use
Legal Rights & Agreement Rules · Restriction or exception
Uber Freight, TrendyolGo and Careem Rides are outside this notice
The notice does not describe data collection and use when you use Uber Freight, the TrendyolGo app or website, or Careem Rides. For those services the notice points to separate linked policies.
A Rider is someone who requests or receives mobility services through their Uber account
The notice defines a “Rider” as a person who requests or receives mobility services, including rides, through their Uber account.
Details not recorded for this card
Supporting quotations
This notice specifically applies if you:
Request or receive mobility services, including rides
(a “Rider”)
Legal Rights & Agreement Rules · Context
An Order Recipient requests or receives delivery, pickup or return services, including through guest checkout
An “Order Recipient” is someone who requests or receives food, packages or other products and services for delivery, pickup or return, for example through Uber Courier or an Uber Eats or Postmates account. It also covers people who use guest checkout features to get delivery or pickup services without creating or signing into an account.
Details not recorded for this card
Supporting quotations
Request or receive food, packages or other products and services for delivery, pickup or return, including via
or through the guest checkout features that allow you to access delivery or pickup services without creating and/or signing into your account (an “Order Recipient”).
Legal Rights & Agreement Rules · Context
A Guest User receives Uber services that someone else requested, including business, family and gift-card cases
A “Guest User” receives services through Uber’s apps or websites that others requested. The notice says this includes people who receive rides or deliveries ordered by Uber Health, Central, Uber Direct or Uber for Business customers (together “Enterprise Customers”), or by friends, family members or other individual account owners, including via Uber Connect, and people who receive Uber gift cards.
Details not recorded for this card
Supporting quotations
Receive services through Uber’s apps or websites requested by others (a “Guest User”).
customers (collectively, “Enterprise Customers”), or by friends, family members or other individual account owners, including via
This also includes those who receive Uber gift cards.
Legal Rights & Agreement Rules · Restriction or exception
Service providers such as drivers are not covered here; “users” means requesters, receivers and providers
The notice does not describe how Uber collects and uses the data of people who use Uber to provide services, including drivers and delivery people. It uses the word “users” for everyone who uses Uber to request, receive or provide services, so a statement about “users” in the notice can reach beyond the Riders, Order Recipients and Guest Users it covers.
Details not recorded for this card
Supporting quotations
This notice does not describe Uber’s collection and use of your data if you use Uber to provide (instead of request or receive) services through Uber’s app or websites, including as a driver or delivery person.
Those who use Uber to either request, receive or provide services are referred to as “users” in this notice.
Not stated here
Which data the separate drivers and delivery people notice covers is not supplied here.
Legal Rights & Agreement Rules · Context
Practices depend on local law, so Uber’s data handling may differ when you travel; country notes follow
Uber says its privacy practices are subject to the laws of the places it operates, and the data processing those laws require, allow or prohibit varies. If you cross national, state or other borders, the practices in this notice may differ from those in your home country or territory. The notice then lists country- and region-specific notes.
Details not recorded for this card
Supporting quotations
Our privacy practices are subject to applicable laws in the places in which we operate. The types of data processing that such laws require, allow, or prohibit vary globally. Therefore, if you travel across national, state or other geographic borders, Uber's data processing practices described in this notice may differ from those in your home country or territory.
In addition, please note the following if you use Uber in:
Legal Rights & Agreement Rules · Context
Argentina: complaints go to the Agency of Access to Public Information
For people using Uber in Argentina, the notice says the Agency of Access to Public Information is responsible for receiving complaints and reports from data subjects who believe a violation of local data protection regulation has affected their rights.
Details not recorded for this card
Supporting quotations
Argentina
The Agency of Access to Public Information, in its role of Regulating Body of Law 25.326, is responsible for receiving complaints and reports presented by any data subjects who believe their rights have been impacted by a violation of the local data protection regulation.
Qualifications & exceptions
Applies if you use Uber in Argentina.
Legal Rights & Agreement Rules · User right or choice
Australia: you may contact Uber or the privacy regulator about Australian Privacy Principles compliance
People using Uber in Australia may contact Uber about its compliance with the Australian Privacy Principles; customer service or privacy teams address such contacts within a reasonable timeframe. They may also contact the Office of the Australian Information Commissioner with concerns about that compliance.
Details not recorded for this card
Supporting quotations
Australia
Such contacts will be addressed by Uber’s customer service and/or relevant privacy teams within a reasonable timeframe.
You may also contact the Office of the Australian Information Commissioner
Qualifications & exceptions
Applies if you use Uber in Australia.
Not stated here
The notice gives no specific length for a “reasonable timeframe”.
Legal Rights & Agreement Rules · Context
Brazil: information on LGPD practices is in a separate document
For Brazil, the notice sends readers to a separate document about Uber’s privacy practices under Brazil’s General Data Protection Law (LGPD) rather than describing them here.
Details not recorded for this card
Supporting quotations
Brazil
for information regarding Uber’s privacy practices as relates to Brazil’s General Data Protection Law (Lei Geral de Proteção de Dados - LGPD).
Qualifications & exceptions
Applies if you use Uber in Brazil.
Not stated here
The linked Brazil document is a separate linked document whose text is not supplied here.
Legal Rights & Agreement Rules · Context
Colombia, Honduras and Jamaica: “riders” and “drivers” are known as “lessees” and “lessors”
In Colombia, Honduras and Jamaica, the notice says the terms “Riders” and “drivers” used in the notice are known respectively as “lessees” and “lessors”.
Details not recorded for this card
Supporting quotations
Colombia, Honduras and Jamaica
“Riders” and “drivers” as used in this notice are known respectively as “lessees” and “lessors.”
Qualifications & exceptions
Applies in Colombia, Honduras and Jamaica.
Legal Rights & Agreement Rules · Restriction or exception
In the EEA, UK and Switzerland Uber does not perform some listed collections and uses; they are marked with an asterisk
Because of data protection and other laws, including the GDPR, Uber says it does not perform some of the data collections and uses described in this notice in the European Economic Area, United Kingdom or Switzerland. The notice marks those collections and uses with an asterisk (*). If you use Uber outside those regions, your data may be collected and used for the purposes marked with an asterisk.
Details not recorded for this card
Supporting quotations
European Economic Area (“EEA”), United Kingdom (“UK”), and Switzerland
Due to data protection and other laws in these regions, including the European Union’s General Data Protection Regulation (“GDPR”), Uber does not perform some of the data collections and uses described in this notice in the EEA, UK or Switzerland. Such data collections and uses are indicated with an asterisk (*). If you use Uber outside of these regions, your data may be collected and used for the purposes indicated with an asterisk.
Qualifications & exceptions
Applies to use in the EEA, UK and Switzerland.
Not stated here
The notice does not list in one place every item carrying an asterisk; each is marked where it appears.
Switzerland: Uber Switzerland GmbH is Uber’s appointed representative under the Federal Act on Data Protection
For users in Switzerland, Uber Switzerland GmbH is Uber’s appointed representative for purposes of the Swiss Federal Act on Data Protection and may be contacted through the linked form or by mail about that act.
Details not recorded for this card
Supporting quotations
In addition, for users in Switzerland, Uber Switzerland GmbH (Stockerstrasse 33 8002 Zürich, Switzerland) is Uber’s appointed representative for purposes of the Federal Act on Data Protection and may be contacted
Qualifications & exceptions
Applies to users in Switzerland.
Legal Rights & Agreement Rules · User right or choice
EEA, UK and Switzerland: you can contact your national data protection authority about Uber’s handling of your data
The notice says people in the EEA, UK and Switzerland also have the right to contact the data protection authority (DPA) in their country, using contact information listed on a linked page, if they have concerns about how Uber handles their data.
Details not recorded for this card
Supporting quotations
You also have the right to contact the data protection authority (“DPA”) in your country via the contact information listed
if you have concerns regarding our handling of your data.
Qualifications & exceptions
Stated in the EEA, UK and Switzerland part of the country notes.
Not stated here
The linked list of DPA contact details is a separate linked page not supplied here.
Legal Rights & Agreement Rules · User right or choice
Kenya: you may contact Uber or the Data Protection Commissioner about rights under Kenya’s Data Protection Act of 2019
People using Uber in Kenya may contact Uber with questions about its compliance with, or to request exercise of their rights under, Kenya’s Data Protection Act of 2019. They may also contact the Office of the Data Protection Commissioner with concerns about compliance or the exercise of those rights.
Details not recorded for this card
Supporting quotations
Kenya
with questions regarding Uber’s compliance with, or to request exercise of your rights under, Kenya’s Data Protection Act of 2019. You may also contact the Office of the Data Protection Commissioner
Qualifications & exceptions
Applies if you use Uber in Kenya.
Legal Rights & Agreement Rules · Context
Saudi Arabia: the PDPL applies and Uber Saudi Limited is the local representative of the data controller
The notice says Saudi Arabia’s Personal Data Protection Law (PDPL) applies to Uber’s processing of personal data within the Kingdom, and that under the PDPL Uber Saudi Limited acts as the local representative of the data controller, Uber Technologies Inc.
Details not recorded for this card
Supporting quotations
Kingdom of Saudi Arabia
The Saudi Personal Data Protection Law (PDPL) applies to our processing of personal data within the Kingdom of Saudi Arabia. In accordance with the PDPL, Uber Saudi Limited acts as the local representative of the data controller i.e. Uber Technologies Inc.
Qualifications & exceptions
Applies to processing of personal data within the Kingdom of Saudi Arabia.
Legal Rights & Agreement Rules · User right or choice
Saudi Arabia: rights to be informed, access, correct and request destruction, with a complaint route to SDAIA
The notice lists rights to be informed, to access, to correct, or to request the destruction of personal data, plus a right to withdraw consent where applicable. It points to a form for exercising them or contacting Uber’s Data Protection Officer, and says a person who believes their data has been handled in violation of the PDPL may lodge a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA).
Details not recorded for this card
Supporting quotations
You have the right to be informed, access, correct, or request the destruction of your personal data. You may also withdraw consent where applicable. Please refer to our Privacy Notice for further information about your rights.
To exercise these rights or contact Uber’s Data Protection Officer (DPO), please click
If you believe your data has been handled in violation of the PDPL, you have the right to lodge a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA)
Qualifications & exceptions
Applies to the Saudi Arabia notes; consent can be withdrawn only “where applicable”.
Legal Rights & Agreement Rules · Procedure
Saudi Arabia: Privacy Notice questions can be sent by mail to Uber Saudi Limited or Uber Technologies, Inc.
For questions, comments and requests related to the Privacy Notice, the notice also gives two mailing addresses: a local office, Uber Saudi Limited in Riyadh, and Uber’s global headquarters, Uber Technologies, Inc., in San Francisco.
Details not recorded for this card
Supporting quotations
If you have any questions, comments and requests related to the Privacy Notice, you may also contact Uber by mail to:
Local Office: Uber Saudi Limited, Building No. 6247, Al Olaya St., Al Muruj Dist., Riyadh 12281 - 2783, Kingdom of Saudi Arabia (Short Address: RHGA6247).
Global HQ: Uber Technologies, Inc., 1725 3rd Street, San Francisco, CA 94158.
Qualifications & exceptions
Applies to the Saudi Arabia notes.
Legal Rights & Agreement Rules · Context
Mexico: Mexican law and Uber Money processing are covered in separate documents
For Mexico, the notice sends readers to a separate document about Uber’s privacy practices under Mexico’s Personal Data Protection Law (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), and to another about Uber Money’s processing of personal data.
Details not recorded for this card
Supporting quotations
Mexico
for information regarding Uber’s privacy practices as relates to Mexico’s Personal Data Protection Law (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), and
for information regarding Uber Money's processing of personal data.
Qualifications & exceptions
Applies if you use Uber in Mexico.
Not stated here
The two linked Mexico documents are separate linked documents whose text is not supplied here.
Legal Rights & Agreement Rules · User right or choice
Nigeria: you may contact Uber or the Data Protection Commission about rights under the 2023 Act
People using Uber in Nigeria may contact Uber regarding its compliance with, or to request exercise of their rights under, Nigeria’s Data Protection Act of 2023, and may also contact the Nigeria Data Protection Commission with concerns about compliance.
Details not recorded for this card
Supporting quotations
Nigeria
regarding Uber’s compliance with, or to request exercise of your rights under Nigeria’s Data Protection Act of 2023. You may also contact the Nigeria Data Protection Commission
Qualifications & exceptions
Applies if you use Uber in Nigeria.
Legal Rights & Agreement Rules · User right or choice
Peru: you may contact Uber, its Data Protection Officer, or the data controller by mail
People using Uber in Peru may contact Uber to exercise rights under Peruvian data protection law or to contact Uber’s Data Protection Officer, and may contact the data controller by mail at Uber Technologies, Inc. in San Francisco.
Details not recorded for this card
Supporting quotations
Peru
to exercise your rights under Peruvian Data Protection Law or contact Uber's Data Protection Officer (DPO). You may also contact the data controller by mail at: Uber Technologies, Inc., 1725 3rd Street, San Francisco, CA 94158, United States.
Qualifications & exceptions
Applies if you use Uber in Peru.
Legal Rights & Agreement Rules · User right or choice
Quebec: you may ask about automated decisions, request correction of related data, and ask for review by Uber personnel
People using Uber in Quebec, Canada may contact Uber with questions about its use of their data for automated decision making, including the factors considered, to request correction of personal data relating to such decisions, and to request review of any such decisions by Uber personnel.
Details not recorded for this card
Supporting quotations
Quebec, Canada
with questions about Uber’s use of your data for purposes of automated decision making, including regarding the factors considered in connection with such decision, to request correction of any personal data relating to such decisions, and to request review of any such decisions by Uber personnel.
Qualifications & exceptions
Applies if you use Uber in Quebec, Canada.
Legal Rights & Agreement Rules · Restriction or exception
South Korea: Uber does not perform some listed collections and uses, and a separate addendum covers Korean law
Uber says it does not perform some of the data collections and uses described in this notice in South Korea, and refers readers to a separate page about its privacy practices under South Korea’s Personal Information Protection Act.
Details not recorded for this card
Supporting quotations
South Korea
Uber does not perform some of the data collections and uses described in this notice in South Korea.
for information regarding Uber’s privacy practices as relates to South Korea’s Personal Information Protection Act.
Qualifications & exceptions
Applies if you use Uber in South Korea.
Not stated here
The notice does not say which collections and uses Uber omits in South Korea; the linked Korea addendum is a separate linked page not supplied here.
Legal Rights & Agreement Rules · Context
Taiwan: cross-border transfer measures and a Payment Data Privacy Notice are in separate documents
For Taiwan, the notice points to separate documents describing the measures Uber adopts for cross-border data transfers under Taiwan’s Personal Data Protection Act, and a Taiwan Payment Data Privacy Notice describing how payments-related personal data is collected, used and shared.
Details not recorded for this card
Supporting quotations
Taiwan
for information on the measures adopted by Uber when conducting cross-border data transfers in accordance with Taiwan’s Personal Data Protection Act and its relevant regulations, as well as other related information.
for information on the Taiwan Payment Data Privacy Notice, which describes how we collect, use and share your payments related personal data.
Qualifications & exceptions
Applies if you use Uber in Taiwan.
Not stated here
The two linked Taiwan documents, including the Taiwan Payment Data Privacy Notice, are separate linked documents whose text is not supplied here.
Legal Rights & Agreement Rules · Context
Türkiye: additional privacy information under the Turkish data protection law (KVKK) is in a separate document
For Türkiye, the notice refers readers to a separate document with additional information about Uber’s privacy practices in Türkiye and its processing of personal data under Turkish Law on the Protection of Personal Data No. 6698 (KVKK).
Details not recorded for this card
Supporting quotations
Türkiye
for additional information regarding Uber's privacy practices in Türkiye and the processing of personal data under the Turkish Law on the Protection of Personal Data No. 6698 ("KVKK").
Qualifications & exceptions
Applies if you use Uber in Türkiye.
Not stated here
The linked Türkiye document is a separate linked document whose text is not supplied here.
Legal Rights & Agreement Rules · Context
United States: state privacy law information, including the California Consumer Privacy Act, is on a separate page
For the United States, the notice sends readers to a separate page about Uber’s privacy practices under US state privacy laws, including the California Consumer Privacy Act, rather than describing those state-law practices in this notice.
Details not recorded for this card
Supporting quotations
United States
for information regarding Uber’s privacy practices as relates to US state privacy laws, including the California Consumer Privacy Act. If you use Uber in Nevada or Washington, please go
Qualifications & exceptions
Applies if you use Uber in the United States.
Not stated here
The linked US state privacy page is a separate linked page whose text is not supplied here; what it says about state-law rights is unknown from this notice.
Nevada and Washington: consumer health data practices are described in a separate policy and notice
If you use Uber in Nevada or Washington, the notice directs you to a separate document about Uber’s practices for collecting and using consumer health data under those states’ privacy laws.
Details not recorded for this card
Supporting quotations
for information regarding Uber’s practices as relates to collection and use of consumer health data under those states’ privacy laws.
Qualifications & exceptions
Applies if you use Uber in Nevada or Washington.
Not stated here
The linked consumer health data privacy policy and notice is a separate linked document whose text is not supplied here.
Legal Rights & Agreement Rules · User right or choice
You can contact Uber with questions about its practices in a particular country or region
After the country notes, Uber invites readers to contact it through a linked form with any questions about its privacy practices in a particular country or region.
Details not recorded for this card
Supporting quotations
Please contact us
with any questions regarding our practices in a particular country or region.
Legal Rights & Agreement Rules · Company practice
Uber also uses data in connection with legal proceedings
Last in the list of additional uses, Uber says it uses data in connection with legal proceedings. A later table row on legal proceedings and requirements explains this use.
Details not recorded for this card
Supporting quotations
In connection with legal proceedings
Legal Rights & Agreement Rules · Company practice
Uber uses data to handle claims, comply with laws, licenses and insurance policies, and respond to legal process
Uber uses data to investigate or address claims or disputes relating to use of its services; to satisfy requirements under, or for compliance with, applicable laws, regulations, operating licenses, agreements or insurance policies; or pursuant to legal process or governmental request, including from law enforcement. The categories of data used are listed in the table continuing in the next section.
Details not recorded for this card
Supporting quotations
For legal proceedings and requirements.
Data uses
Data used includes
We use data to investigate or address claims or disputes relating to use of Uber’s services; to satisfy requirements under and/or for purposes of compliance with, applicable laws, regulations, operating licenses, agreements or insurance policies; or pursuant to legal process or governmental request, including from law enforcement.
Legal Rights & Agreement Rules · Company practice
Legal and compliance uses can draw on all eleven data categories, including in-vehicle recordings
For use of data in legal proceedings and requirements, the data used includes account, communications, data from other sources, demographics, device, identity verification, location, usage, user content, trip or order data, and in-vehicle recordings.
Details not recorded for this card
Supporting quotations
Account
Communications
Data from other sources
Demographics
Device
Identity verification
Location
Usage
User content
Trip/order
In-vehicle recordings
Legal Rights & Agreement Rules · Context
Uber points to separate law enforcement and third-party data request guidelines for more information
For more information on legal and law enforcement requests, the notice refers readers to Uber’s Guidelines for United States Law Enforcement and its Guidelines for Third Party Data Requests and Service of Legal Documents.
Both guidelines are separate linked documents whose text is not supplied here.
Legal Rights & Agreement Rules · User right or choice
Depending on your location, you may file a complaint with your country’s data protection authority
Depending on your location, you may have the right to file a complaint about Uber’s handling of your data with the data protection authority in your country.
Details not recorded for this card
Supporting quotations
In addition, depending on your location, you may have the right to file a complaint relating to Uber’s handling of your data with the data protection authority in your country.
Legal Rights & Agreement Rules · Context
Uber Technologies, Inc. is the controller of data processed when you use Uber globally, with joint-controller exceptions
Uber Technologies, Inc. (UTI) is the controller of the data processed by Uber when you use its services globally, except where it is a joint controller with other Uber affiliates or where the listed regional arrangements apply. The notice states the first rule twice, once as “sole controller” subject to joint control and once as controller subject to the listed exceptions.
Details not recorded for this card
Supporting quotations
Uber Technologies, Inc. is the sole controller of the data processed by Uber when you use Uber’s services globally, except where it is a joint controller with other Uber affiliates.
Uber Technologies, Inc. (“UTI”) is controller of the data processed by Uber when you use Uber’s services globally, except that:
Qualifications & exceptions
Subject to the regional controller arrangements listed next.
Legal Rights & Agreement Rules · Context
Mexico: UTI and UBR Pagos Mexico are controllers of data for Uber’s payment and e-money services
In Mexico, UTI and UBR Pagos Mexico, S.A. de C.V. are controllers of the data of users of Uber’s payment and e-money services.
Details not recorded for this card
Supporting quotations
UTI and UBR Pagos Mexico, S.A. de C.V., are controllers of the data of users of Uber’s payment and e-money services in Mexico.
Qualifications & exceptions
Applies to users of payment and e-money services in Mexico.
Legal Rights & Agreement Rules · Context
EEA and UK: UTI, Uber B.V. and Uber Payments entities are joint controllers for payment and e-money services
In the EEA, UTI and Uber B.V. are together with Uber Payments BV joint controllers of the data of users of Uber’s payment and e-money services, and in the UK, with Uber Payments UK Ltd.
Details not recorded for this card
Supporting quotations
UTI and Uber B.V. are together with Uber Payments BV joint controllers of the data of users of Uber’s payment and e-money services in the EEA, and with Uber Payments UK Ltd. for users of those services in the UK.
Qualifications & exceptions
Applies to users of payment and e-money services in the EEA and UK.
Legal Rights & Agreement Rules · Context
EEA, UK and Switzerland: UTI and Uber B.V. are joint controllers for all other uses of Uber’s services
In the EEA, UK and Switzerland, UTI and Uber B.V. are joint controllers of the data processed in connection with all other uses of Uber’s services (that is, other than payment and e-money services).
Details not recorded for this card
Supporting quotations
UTI and Uber B.V. are joint controllers of the data processed in connection with all other uses of Uber’s services in the EEA, UK and Switzerland.
Qualifications & exceptions
Applies in the EEA, UK and Switzerland.
Legal Rights & Agreement Rules · Context
South Korea: UT LLC is the controller of data processed when you use Uber services
UT LLC is the controller of the data processed when you use Uber services in South Korea.
Details not recorded for this card
Supporting quotations
UT LLC is the controller of the data processed when you use Uber services in South Korea.
Legal Rights & Agreement Rules · Context
Türkiye: UTI and TYG Turkey are joint controllers of data processed for Uber Eats services
In Türkiye, UTI and TYG Turkey Elektronik Ticaret Hizmetleri ve Yatırımları A.Ş. are joint controllers of the data processed when you use Uber Eats services.
Details not recorded for this card
Supporting quotations
UTI and TYG Turkey Elektronik Ticaret Hizmetleri ve Yatırımları A.Ş. are joint controllers of the data processed when you use Uber Eats services in Türkiye.
Legal Rights & Agreement Rules · User right or choice
You may contact Uber’s Data Protection Officer online or by mail to Uber B.V. in Amsterdam
You may contact Uber’s Data Protection Officer through its privacy DPO page, or by mail to Uber B.V. in Amsterdam, the Netherlands, about issues relating to Uber’s processing of your personal data and your data protection rights.
Details not recorded for this card
Supporting quotations
You may also contact Uber's Data Protection Officer at uber.com/privacy-dpo, or by mail to Uber B.V. (Burgerweeshuispad 301, 1076 HR Amsterdam, the Netherlands) regarding issues relating to Uber's processing of your personal data and your data protection rights.
Not stated here
The linked Data Protection Officer page is a separate linked page not supplied here.
Legal Rights & Agreement Rules · Company practice
Uber relies on four legal bases for processing: contract, consent, legitimate interests and legal obligation
Depending on where you use Uber’s services and its purpose for using your data, Uber says it relies on these legal bases: necessity to perform its contract with you, consent, Uber’s legitimate interests, and legal obligation.
Details not recorded for this card
Supporting quotations
Depending on where you use our services, and our purpose for using your data, Uber relies on the following legal bases for processing your data:
Necessity to perform our contract with you
Consent
Uber's legitimate interests
Legal obligation
Qualifications & exceptions
Which basis applies depends on where you use Uber and Uber’s purpose.
Legal Rights & Agreement Rules · Context
Legal bases are required in the EEA, UK, Switzerland, Brazil, Türkiye and Nigeria; the chart shows them where they apply
Data protection laws in some countries and areas, including the EEA, UK, Switzerland, Brazil, Türkiye and Nigeria, only allow Uber to use your data when certain circumstances defined under those laws apply, called a “legal basis”. The applicability of the bases may depend on your location, and the chart indicates the bases Uber has under those laws when they apply.
Details not recorded for this card
Supporting quotations
Data protection laws in some countries and areas, including the EEA, UK, Switzerland, Brazil, Türkiye and Nigeria, only allow Uber to use your data when certain circumstances defined under those laws apply. This is called having a “legal basis” for using your data. The applicability of these legal bases may depend on your location. The chart below indicates the legal bases that Uber has under those laws when they do apply, and it uses your data for the purposes described in this notice.
Legal basis
Description
Data uses
Not stated here
The notice does not say whether each chart entry applies in each listed country; it says applicability may depend on your location.
Legal Rights & Agreement Rules · Company practice
Contract: Uber uses data it must have to provide the services you request, including pricing, payments and support
Uber says the contract basis applies when it must use your data to provide the services you request and meet its responsibilities under the contract formed by its terms and conditions when you set up an account or request a ride or delivery. The uses listed are calculating rider and recipient prices and driver and delivery person fares, creating or updating your account, customer support, enabling communications between you and your driver or delivery person, enabling services and features, performing necessary operations to maintain services, personalizing your account, processing payments, and providing trip or delivery updates, generating receipts and informing you of changes to terms, services or policies.
Details not recorded for this card
Supporting quotations
Contract
When you set up your Uber account and/or request a ride or delivery from Uber, we are entering into a contract defined by our
This legal basis applies when we must use your data in order to provide the services you request and meet our responsibilities under that contract.
Calculating rider/recipient prices and driver/delivery person fares
Creating or updating your account
Customer support
Enabling communications between you and your driver or delivery person
Enabling services and features
Performing necessary operations to maintain our services
Personalizing your account
Processing payments
Providing you with trip or delivery updates, generating receipts, and informing you of changes to our terms, services or policies
Not stated here
The linked terms and conditions are a separate linked document not supplied here.
Legal Rights & Agreement Rules · Company practice
Consent: Uber relies on your voluntary agreement for some ad personalization and sensitive data, which you can withdraw
Uber says the consent basis applies when it notifies you how it will collect and use your data and you voluntarily agree, in some cases by enabling the collection and use through a device or Uber setting. Where Uber relies on consent, you have the right to withdraw it at any time, in which case Uber will cease that collection and use. The uses listed are personalizing ads relating to products and services offered by other companies, and processing health data or other sensitive data depending on the region you live in.
Details not recorded for this card
Supporting quotations
Consent
This legal basis applies when we notify you of how we will collect and use your data, and you voluntarily agree to that use of your data (in some cases, by enabling that collection and use through a device or Uber setting).
Where we rely on consent, you have the right to withdraw your consent at any time, in which case we will cease that collection and use of your data.
Personalizing ads relating to products and services offered by other companies
Processing health data, or other sensitive data, depending on the region you live in
Not stated here
The same ad personalization use also appears under legitimate interests in the chart; the notice does not say where each basis applies.
Legitimate interests: safety, fraud, ads, research and verification uses, unless outweighed by privacy risks
Uber says the legitimate interests basis applies when it has a legitimate interest in using your data (such as safety, security, and fraud prevention and detection), its processing is necessary for that purpose, and the benefit of the purpose is not outweighed by risks to your privacy, for example because you would not expect the use or because it would prevent you from exercising your rights. The uses listed include ads targeted on your current trip or delivery request, measuring marketing and ad effectiveness, non-marketing communications, personalizing marketing communications and ads for Uber and other companies’ products, predicting and avoiding conflict-prone pairings, preventing and combating fraud, live safety support, research and development, and verifying your account, identity or safety compliance.
Details not recorded for this card
Supporting quotations
Legitimate interests
This legal basis applies when Uber has a legitimate interest for using your data (such as for purposes of safety, security, and fraud prevention and detection), its processing of data is necessary for that purpose, and the benefit of such purpose is not outweighed by risks to your privacy (such as because you would not expect Uber’s use of your data, or because it would prevent you from exercising your rights).
Displaying ads that are targeted based on data about your current trip or delivery request
Measuring the effectiveness of the marketing communications and ads
Non-marketing communications
Personalizing marketing communications and ads relating to Uber products and services, and those offered by other companies
Predicting and helping avoid pairings of users that may result in increased risk of conflict
Preventing, detecting and combating fraud
Providing live support from safety experts during trips or deliveries
Research and development
Verifying your account, identity or compliance with safety requirements
Not stated here
Personalizing ads for other companies’ products is listed here and under consent; the notice does not say where each basis applies.
Legal obligation: Uber uses data where the law requires it, including for legal requirements and proceedings
Uber says the legal obligation basis applies when it is required to use your data to comply with the law. The use listed is legal requirements and proceedings.
Details not recorded for this card
Supporting quotations
Legal obligation
This legal basis applies when we are required to use your data to comply with the law.
For legal requirements and proceedings
Legal Rights & Agreement Rules · Company practice
Uber processes data globally, including on US servers, where data protection laws may differ from where you live
Uber says it operates and processes user data globally, which may result in processing of your personal data in countries, including the United States, whose data protection laws may differ from those where you live or are located. This includes processing on Uber’s servers in the United States and transferring or enabling access to your data globally. It says it complies with applicable legal frameworks relating to the transfer of data.
Details not recorded for this card
Supporting quotations
Uber operates, and processes user data, globally. We comply with applicable legal frameworks relating to the transfer of data.
Uber operates, and processes user data, globally. This may result in processing of your personal data in countries, including the United States, whose data protection laws may differ from those where you live or are located.
This includes processing of your data on Uber’s servers in the United States, and transferring or enabling access to your data globally, in order to:
Legal Rights & Agreement Rules · Company practice
Global access to your data serves services anywhere, your history, customer support and government requests
Uber says it transfers or enables global access to your data in order to provide you services wherever you request them, provide access to your information (such as trip or order history) wherever you request it, provide access to and responses from Uber’s customer service agents, and respond to requests for information from governments or law enforcement as necessary.
Details not recorded for this card
Supporting quotations
Provide you services wherever you request them
Provide you access to your information, such as trip/order history, wherever you request it
Provide access to and responses from Uber’s customer service agents
Respond to
by governments or law enforcement, as necessary
Not stated here
The linked law enforcement request guidelines are a separate linked document not supplied here.
Legal Rights & Agreement Rules · Company practice
EEA, UK and Swiss data transfers rely on contract necessity, consent, adequacy decisions, standard clauses or the DPF
When Uber transfers user data from the EEA, UK and Switzerland, it says it does so on the basis of the necessity to fulfill its agreements with you, consent, adequacy decisions regarding the country of transfer, and transfer mechanisms such as the European Commission’s Standard Contractual Clauses (and approved UK and Swiss equivalents) and the EU-US, UK Extension and Swiss-US Data Privacy Frameworks. Such data remains subject to the GDPR or equivalents after transfer. Users may contact Uber about this, or to request copies of applicable Standard Contractual Clauses.
Details not recorded for this card
Supporting quotations
When we transfer user data from the EEA, UK and Switzerland, we do so on the basis of the necessity to fulfill our agreements with you, consent, adequacy decisions regarding the country of transfer (available
adopted by the European Commission (and their approved equivalents for the UK and Switzerland), and the EU-US Data Privacy Framework (“EU-US DPF”), the UK Extension to the EU-US DPF, and the Swiss-US Data Privacy Framework (“Swiss-US DPF”), as set forth by the US Department of Commerce. Such data remains subject to the GDPR or equivalents after such transfer. Users may contact Uber regarding the above, or to request copies of applicable Standard Contractual Clauses,
Qualifications & exceptions
Applies to transfers of user data from the EEA, UK and Switzerland.
Not stated here
The adequacy decisions and the Standard Contractual Clauses are separate linked documents not supplied here.
Legal Rights & Agreement Rules · Company commitment
Uber is certified to the Data Privacy Framework Principles, which govern if they conflict with the notice
UTI and its subsidiary Uber AI solutions LLC have certified to the US Department of Commerce that they adhere to the EU-US Data Privacy Framework Principles (for personal data received from EEA member countries and, under the UK Extension, from the UK and Gibraltar) and the Swiss-US Data Privacy Framework Principles (for personal data from Switzerland). If this notice conflicts with those Principles, the Principles govern. If the EU-US DPF or the Swiss-US DPF is invalidated, Uber will transfer data subject to these certifications in reliance on the other transfer mechanisms described above.
Details not recorded for this card
Supporting quotations
UTI, and its subsidiary Uber AI solutions LLC, have certified to the United States Department of Commerce that they adhere to (1) the EU-US Data Privacy Framework Principles regarding the processing of personal data received from EEA member countries in reliance on the EU-US DPF, and from the UK (and Gibraltar) in reliance on the UK Extension to the EU-US DPF; and (2) the Swiss-US Data Privacy Framework Principles regarding the processing of personal data received from Switzerland in reliance on the Swiss-US DPF. In the event of a conflict between this notice and the Principles mentioned above, the Principles shall govern. In the event that the EU-US DPF or the Swiss-US DPF are invalidated, Uber will transfer data that is subject to these certifications in reliance on the other data transfer mechanisms described above.
Qualifications & exceptions
Applies to data received in reliance on the certified frameworks.
Legal Rights & Agreement Rules · User right or choice
EEA, UK and Switzerland residents: Uber’s certification covers data from those places and gives a right to access it
If you live in the EEA, UK or Switzerland, Uber says its Data Privacy Framework certification applies to personal data originating from the EEA, UK or Switzerland, and that you have the right to access your personal data that is subject to the certification, using the methods in the Choice and transparency section.
Details not recorded for this card
Supporting quotations
If you live in the EEA, UK or Switzerland, please note the following:
Scope. Uber’s DPF certification applies to personal data originating from the EEA, UK or Switzerland.
Access. You have the right to access your personal data that is subject to Uber’s DPF certification. For information on how to exercise this right, please see “Choice and transparency” above.
Legal Rights & Agreement Rules · Company commitment
For certified data, Uber answers for onward transfers, must share under legal process, and faces FTC enforcement
For EEA, UK and Swiss residents, Uber says it is responsible for the transfer of personal data subject to its certification to third parties, and points to its Data sharing and disclosure section for the parties involved. It says it is required under applicable law to share user data, including data subject to the certification, pursuant to legal process or governmental request, including from law enforcement, and that it is subject to the investigatory and enforcement powers of the US Federal Trade Commission.
Details not recorded for this card
Supporting quotations
Onward transfer. Uber is responsible for the transfer of personal data, subject to its certification to third parties. For information regarding the parties to whom Uber may transfer personal data, please see “
Request from law enforcement. Uber is required under applicable law to share user data, including that which may be subject to Uber’s certification, pursuant to legal process or governmental request, including from law enforcement.
Investigation and enforcement. Uber is subject to the investigatory and enforcement powers of the US Federal Trade Commission.
Qualifications & exceptions
Applies to personal data subject to Uber’s Data Privacy Framework certification.
Legal Rights & Agreement Rules · Company commitment
For Data Privacy Framework data, Uber commits to follow European, UK and Swiss regulators’ advice on complaints
Uber commits to cooperate and comply with the advice of the panel established by the EU data protection authorities, the UK Information Commissioner’s Office and the Swiss Federal Data Protection and Information Commissioner about unresolved complaints concerning personal data received in reliance on the EU-US DPF, the UK Extension and the Swiss-US DPF. You may contact Uber with questions about its compliance with the Principles, and may refer a complaint to your local data protection authority, with which Uber says it will work to resolve the complaint.
Details not recorded for this card
Supporting quotations
Questions and disputes. In compliance with the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF, Uber commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF.
You may also refer a complaint to your local data protection authority, and Uber will work with that authority to resolve that complaint.
Qualifications & exceptions
Applies to personal data received in reliance on the Data Privacy Frameworks.
Legal Rights & Agreement Rules · User right or choice
In certain circumstances the Data Privacy Framework gives a right to binding arbitration of unresolved complaints
Uber notes that, in certain circumstances, the Data Privacy Framework provides the right to invoke binding arbitration to resolve complaints not resolved by other means, as described in Annex I to the DPF Principles.
Details not recorded for this card
Supporting quotations
In certain circumstances, the DPF provides the right to invoke binding arbitration to resolve complaints not resolved by other means, as described in Annex I to the
Uber points to external pages to learn about the Data Privacy Framework and view its certification and scope
The notice sends readers to external pages where they can learn more about the EU-US DPF and Swiss-US DPF and view Uber’s certification, including the scope of data subject to the certification.
Details not recorded for this card
Supporting quotations
You can learn more about the EU-US DPF and Swiss-US DPF
and view Uber’s certification, including the scope of data subject to our certification,
Not stated here
The linked Data Privacy Framework pages are separate linked pages not supplied here, so the exact scope of the certification is unknown.
Legal Rights & Agreement Rules · Company commitment
Uber may update the notice and will notify you in advance of significant changes through its apps or by email
Uber says it may occasionally update the notice. If it makes significant changes, it will notify you in advance through the Uber apps or through other means, such as email, and it encourages you to review the notice periodically.
Details not recorded for this card
Supporting quotations
We may occasionally update this notice. If we make significant changes, we will notify you in advance of the changes through the Uber apps or through other means, such as email. We encourage you to periodically review this notice for the latest information on our privacy practices.
Qualifications & exceptions
The advance notice is promised for “significant” changes only.
Not stated here
The notice does not say how far in advance changes are announced.
Legal Rights & Agreement Rules · Restriction or exception
Using Uber’s services after an update counts as consent to the updated notice, to the extent permitted by law
Uber says use of its services after an update constitutes consent to the updated notice to the extent permitted by law.
Details not recorded for this card
Supporting quotations
Use of our services after an update constitutes consent to the updated notice to the extent permitted by law.