We will share a link to GBG’s full Products & Services Privacy Policy, which covers all GBG solutions. However, because that policy is broad and includes services we do not provide to Uber, we’ve included additional information here specifically about how GBG processes data for Uber.
Uber will have shared this information with you already…
Uber wish to validate the account information you have provided to them (such as your name/and or phone number) is accurate.
Once verified, you’ll receive a Verified Badge on your account and enjoy a seamless, hassle-free experience for age-restricted deliveries and cash-based trips in the future.
The badge is visible to drivers when you request a trip, giving them extra confidence when picking you up. It’s a simple way to say, "I am who I say I am.”
GBG are delivering identify verification services to Uber utilising a data only journey (GBG is not providing document verification to Uber).
Uber shares your name and phone number with GBG.
GBG then checks whether it can identify you by searching trusted data sources:
First, GBG searches its own databases.
If no match is found, GBG will securely share your name and phone number with a trusted third-party partner, who checks additional databases.
If GBG finds more information about you (such as your address, date of birth, or email address), this information is sent back to Uber.
Uber may then use this information in line with its own processes and policies.
All data handled by GBG and its partners is processed within the UK.
Sometimes. GBG will always try to match your details using its own databases first.
If a match cannot be found, GBG will securely share your name and phone number with a trusted partner. This is done using a secure system (an API) so they can carry out the checks on GBG’s behalf.
GBG keeps your data for two different periods, depending on how it is used:
1. One month
Uber keeps a record of all checks carried out for one month, so they can review them if needed (this is called a “Customer Audit Trail”).
If a trusted partner is used, they also keep a record of these checks for one month.
2. 12 months
GBG keeps a separate record (the “GBG Audit Trail”) for 12 months. This includes the details you provided and the result of the identity check.
This information is only accessed if you make a request about your data (for example, a data access request).
GBG does not use this data for any other purpose or share it with third parties.
After 12 months, this information is automatically deleted.
Under data protection law, GBG has two roles when working with Uber:
1. Independent controller (for most processing)
This means GBG decides how to carry out identity checks using your data.
However, GBG must follow data protection laws, its Privacy Policy, and its agreement with Uber.
The legal basis GBG relies on is called a “legitimate interest”. In this case, this means helping Uber verify your identity.
2. Processor (for the “Customer Audit Trail”)
When GBG stores records on behalf of Uber (the “Customer Audit Trail”), it acts only on Uber’s instructions.
GBG does not access or use this data unless Uber asks it to.
Uber sets how long this data is kept, which is one month.
GBG does not use or process biometric data for Uber.
GBG provides a data-based identity checking service only for Uber.
While GBG does offer document verification services (which can involve biometrics), Uber does not use this service.
How to make a privacy rights request with GBG is detailed in full in our Products & Services Privacy Policy linked below.
This policy was last updated on 26 May, 2026.