Privacy Policy

Welcome to Ulta! This Privacy Policy helps explain how Ulta Salon, Cosmetics & Fragrance, Inc. (“Ulta Beauty”) collects, uses, stores, and shares your information when:

• You visit Ulta Beauty’s website at www.ulta.com, its mobile application, use its WiFi services, or visit any other digital platform where this Privacy Policy is posted (“Sites”);
• You visit and shop at our physical stores (“Stores”);
• You purchase our products and services (“Products”);
• You communicate with us by e-mail, text or telephone (“Communications”); and
• We interact with service providers, partners, governmental agencies, and other third parties (“Third Parties”).

To learn more about your choices around your information, please see Your Choices below.

If you are a resident of California, please see our California Notice below.

Information you provide to us

We collect your information when you interact with us directly, including when you:

• access and navigate our Sites;
• visit our Stores;
• create an account with us;
• participate in our rewards or loyalty programs;
• purchase our Products;
• engage in Communications with us;
• participate in a promotion, such as a sweepstakes or contest;
• post a tagged photo or other content on a third party social network;
• post a Product review, question, answer, or other information on the Sites;
• or otherwise interact with us.

The information we collect when you interact with us directly includes, but may not be limited to your name, contact information, facial geometry, email address, photograph, signature, mailing/billing address, phone number, payment information, and purchase and transaction history.

Information we receive from Third Parties

We may also collect information about you from Third Parties, such as certain demographic information (like the number of members of your household, age, and gender) and purchase preference information. We may use this information to supplement or update our records, improve the quality or personalization of our Communications with you, and help prevent or detect fraud.

Information we automatically collect from you

When you interact with our Sites and Products, and when you Communicate with us, we automatically receive certain types of information about you, including:

• Usage Information. Information such as the features you use on our Sites, the links you click and the items you view, pages you visit, emails and advertisements you view, Products you view and purchase, the time of day you browse, and your referring and exiting pages. We may collect this information through a variety of tools, including but not limited to session replay software.

• Device Information. Information about the device you are using, including but not limited to the type of device you use, the temporary or persistent unique device identifier (UDID) placed by us or our service providers, the IP address of your device, your operating system, the type of browser you use, and data from the way you use our Sites.

• Location Data. Information such as imprecise location data (such as location derived from an IP address or data that indicates a city or postal code level). Our Sites may also collect information about the location of your device. Your device should require you to provide permission before our Sites obtain precise geolocation information from a browser's geolocation API or from technologies like GPS, WiFi, and/or cell towers. We and our service providers may use this approximate location and/or precise geolocation information, along with other information submitted by you, to provide you with location-based services like local Store information, search results, special offers, and other personalized content. Most browsers and mobile devices allow users to enable or disable precise geolocation using pop-ups or controls located in the settings menu.

• Cookies. Cookies are small data files stored on your device that act as a unique tag to identify your browser. We use two types of cookies on our Sites: session cookies and persistent cookies. Session cookies make it easier for you to navigate our Sites and expire when you close your browser. Persistent cookies help with personalizing your experience, remembering your preferences, and supporting security features. Additionally, persistent cookies allow us to bring you advertising both on and off the Sites. Persistent cookies may remain on your device for extended periods of time, and generally may be controlled through your browser settings.

• Pixels (also known as web beacons). This is a type of code that is embedded in a website, video, email, or advertisement that sends information about your use to a server. There are various types of pixels, including image pixels (which are small graphic images) and JavaScript pixels (which contains JavaScript code). When you access a website, video, email, or advertisement that contains a pixel, the pixel may permit us or a separate entity to drop or read cookies on your browser. Pixels are used in combination with cookies to track activity by a particular browser on a particular device. We may incorporate pixels from separate entities that allow us to track our communications, bring you advertising both on and off the Sites, and provide you with additional functionality, such as the ability to connect our Sites with your social media account.

• App Technologies. Information concerning technologies included in our mobile applications and Sites that are not browser-based like cookies and cannot be controlled by browser settings. For example, our Sites may include SDKs, which is code that sends information about your use to a server. These SDKs allow us to track our Communications, bring you advertising both on and off the Sites, and provide you with additional functionality, such as the ability to connect our Sites with your social media account.

Internet-based advertising / Do Not Track

We may, from time to time, collect information about users over time and across different websites when you use this Sites. Our third-party partners may also collect information in this manner. For example, we may use one or more third-party online advertising networks to serve ads on our behalf on third-party websites. The third-party ad network may collect information about your visits to our Sites and your interaction with our online ads. This is primarily accomplished using technology such as cookies, action tags, web beacons, and/or GIF tags which are placed in various places within our Sites and our online ads.

We may share information with third-party ad networks in an aggregate form to help us analyze and improve our Sites and our online ads. The third-party ad networks may use information about your visit to our Sites and other websites in order to provide you with ads about goods and services that may be of interest to you. For example, if you browse for information about mascara products on our Sites or on third-party websites, we or the online ad network may show you ads for mascara products. If you would like more information about this practice or the process of opting out of online ad networks, please visit http://www.networkadvertising.org/managing/opt_out.asp. If you opt-out of interest-based ads, you will still see ads on websites you visit, but those ads will not be based on your browsing behavior.

Some browsers have a 'do not track' feature that lets you tell websites that you do not want to have your online activities tracked. These features are not yet uniform, so our Site is not currently designed to respond to those signals.

WiFi Services

Your use of our Store WiFi service is subject to our WiFi Terms.

Social media widgets and single sign on services

Our Sites use third-party social media widgets such as buttons or similar mechanisms from Facebook, Twitter, Instagram, Pinterest, YouTube, and/or FourSquare. Such third-party features may collect information about you, like your IP address and the page(s) you visit on our Sites. They may also place cookies on your device. These social media widgets are either hosted by a Third Party or by our Sites. Your interactions with those features are governed by the privacy policies of the third-party social media networks that provide them.

Children under 13 years of age

This Site is directed to adults and does not knowingly collect personal information online from children under the age of 13 without prior parental consent. If you are the parent or guardian of a child under the age of 13, and you believe your child has provided personal information to our Sites that you would like us to delete, please contact us.

Virtual beauty information

The collection of "Virtual Beauty Information" is governed by the Virtual Beauty Try-On Additional Terms and Conditions in the Site Terms & Conditions.

Session replay

Our Sites may, from time to time, utilize technology often known as “session replay” technology that allows Ulta Beauty to understand how users interact with the Sites, including replays of their interaction with our Sites. By using our Sites, you represent you have read this disclaimer and understand that Ulta Beauty may use this session replay technology to record how you interact with our Sites, which may be used by Ulta Beauty for its own internal analytical purposes, and to improve and enhance our Sites.

We may use your information to:

• Fulfill your requests, such as Product orders and responses to email questions;
• Support our core business functions, such as order fulfillment, internal business process management, authentication, loss and fraud prevention, and public safety functions;
• Communicate with you about our Products and promotions;
• Provide the Sites and Stores to you;
• Improve our Sites, Products, and Stores;
• Maintain your Ulta Beauty account and Loyalty Program membership;
• Improve our marketing and promotions;
• Statistically analyze the usage of our Sites, Communications, and Stores;
• Contact you;
• Resolve disputes, investigate problems, and enforce our terms;
• Help diagnose problems with our server, manage our Sites, and to enhance our Products; and
• Perform a business transaction, such as a merger, acquisition, sale of assets, bankruptcy, or related transactions.

We may share your information in the following circumstances:

• With Your Consent. We may disclose, share, or make available your information with your consent, which may be obtained in writing, online, through “click-through” agreements, when you accept our terms for our Sites, orally (including over the telephone), or by other means.

• With Service Providers & Business Partners. We may disclose, share, or make available your information with Third Parties, such as service providers, affiliates and subsidiaries, business partners, credit / debit card processing partners, partners that facilitate billing, shipping, and customer service, third-party auditors and law firms, marketing and advertising networks (including those that provide ad measurement services), internet service providers, data analytics providers, companies that help debug and identify and repair errors that may impair the functionality of our Sites, and third parties that help protect against malicious, deceptive, fraudulent, or illegal activity. We may also share your information in connection with financial products or services related to our business, such as private label credit cards. We may also share your information in connection with co-branded Product offerings.

• In A Business Transfer. We may disclose, share, or make available your information as part of a business transaction, such as a merger or acquisition, joint venture, corporate reorganization, financing, or sale of company assets, or in the unlikely event of insolvency, bankruptcy, or receivership, in which such information could be transferred to third parties as a business asset in the transaction.

• For Legal Process & Protection. We may disclose, share, or make available your information to satisfy any law, regulation, legal process, governmental request, or where we have a good faith belief that access, use, preservation or disclosure of such information is reasonably necessary to: (1) enforce or apply agreements, or initiate, render, or bill for use of the Sites; (2) protect our rights or interests, property or safety or that of others; (3) in connection with claims, disputes, or litigation - in court or elsewhere; (4) protect users of our Sites and other carriers, providers, or partners from fraudulent, abusive, unlawful, or otherwise improper use of our Sites; (5) facilitate or verify the appropriate calculation of taxes, fees, or other obligations due to a local, state, or federal government.

The use, disclosure, and sharing of "Virtual Beauty Information" is governed by the Virtual Beauty Try-On Additional Terms and Conditions in the Site Terms & Conditions.

Although no system or website can guarantee the complete security of your information, we take all commercially reasonable steps to ensure your information is protected in accordance with all applicable laws and regulations, as appropriate to the sensitivity of your information.

Our Site may include links to websites/applications that are owned or operated by Third Parties. Please note these links are provided for your convenience and information and may operate independently from us and have their own privacy policies and/or notices. This Privacy Policy does not cover the practices of those websites/applications. We encourage you to review the privacy policies on those websites/applications to see how they collect and use information.

• Right to Know. Depending on where you live, you may have a right to know details about what information Ulta has collected about you. If eligible, you may exercise this right by clicking the links below, calling 1-866-983-8582, or submitting a request to an Ulta Beauty Store associate. To process these requests, we must be able to verify your identity. In order to do so, you must provide the information we request as part of the verification process, such as your contact information and an additional identifier based on your relationship with us.

• Right to Delete. Depending on where you live, you may have a right to ask that Ulta delete your information, subject to exceptions recognized under law. If eligible, you may exercise this right by clicking the links below, calling 1-866-983-8582, or submitting a request to an Ulta Beauty Store associate. To process these requests, we must be able to verify your identity. In order to do so, you must provide the information we request as part of the verification process, such as your contact information and an additional identifier based on your relationship with us.

• Right to Correct. Depending on where you live, you may have a right to ask that Ulta correct the information it has about you, subject to exceptions recognized under law. If eligible, you may exercise this right by clicking the links below, calling 1-866-983-8582, or submitting a request to an Ulta Beauty Store associate. To process these requests, we must be able to verify your identity. In order to do so, you must provide the information we request as part of the verification process, such as your contact information and an additional identifier based on your relationship with us. Regardless of where you live, you may view and correct your account information by logging into your account online or contacting us and requesting such information.

• To submit a request pursuant to your rights noted above please click Data Request

• Opt-Out of Selling or Targeted Advertising. Depending on where you live, you may have a right to opt-out of Ulta selling or sharing your information for targeted advertising purposes. To learn more, please see our Notice for California Residents and Notice for Virginia and Colorado.

• Opt-Out of Promotional Messaging. If you would like to stop receiving promotions, special offers or member-exclusive events, you can update your email preferences by visiting My Account on ulta.com or on our mobile application. You may also notify our Guest Services team by visiting our Contact Us page. Please note it may take up to 6-8 weeks to stop receiving these communications after updating your preferences.

• Opt-Out of Texting. To opt out of Ulta Beauty text messages, reply "stop" to text messages sent from 95637 (ULTA). This will opt you out of all Ulta Beauty text message campaigns from 95637 (ULTA). To opt out of text messages from Ulta Beauty Messenger service, text STOP to (630) 410-9968. This will opt you out of all Ulta Beauty Messenger text message campaigns from (630) 410-9968. To opt out of transactional text messages from Ulta Beauty, text STOP to 46373. This will opt you out of all Ulta Beauty transactional text messages from 46373. Message and data rates may apply.

• Opt-Out of Push Notifications. You may opt-out from allowing Ulta Beauty to send push notifications by adjusting the permissions on your device.

• Opt-Out of Precise Geolocation. Most browsers and mobile devices allow users to enable or disable precise geolocation using pop-ups or controls located in the settings menu. If you have permitted Ulta Beauty to access your precise geolocation data, you may at any time opt-out from further allowing Ulta Beauty to access your precise geolocation data by adjusting the permissions in your browser or device.

• Uninstall the Mobile Application. You can uninstall the Ulta Beauty mobile application at any time. You may use the standard uninstall process available as part of your mobile device, or via the mobile application marketplace or network. If you uninstall the mobile application from your device, the Ulta Beauty unique identifier associated with your device will continue to be stored. If you re-install the application on the same device, Ulta Beauty will be able to re-associate this identifier to your previous transactions and activities.

• Delete Your Ulta Beauty Account on the iPhone. You may delete your Ulta Beauty account at any time from your Ulta Beauty iOS application. We will email you instructions to confirm your identity and finalize your deletion after you submit your account deletion request. Please note: deleting your account will result in the loss of any points associated with your loyalty account. Ulta Beauty may still retain certain information connected to your purchase history as required under applicable law.

Definitions

• Personal information. Information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you or your household.

• Sensitive personal information. Social security number, driver’s license number, state identification card, passport number, account log-in and password, financial account and password, debit or credit card number and access code, precise geolocation information, race, ethnic origin, religious or philosophical beliefs, union membership, the content of your mail, email or texts other than those communications with us, genetic data, biometric information, health information, and information that concerns your sex life or sexual orientation.

• Sell, sale, or sold. Selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or other means, your personal information to a third party for money or other valuable consideration.

• Share, shared, or sharing. Sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or other means, your personal information to a third party for cross-context behavioral advertising, whether for monetary or other valuable consideration.

Your Rights

Please note, you can designate an authorized agent to make the below requests on your behalf. When you use an authorized agent, you must provide the authorized agent with written permission to do so, and, in certain circumstances, we may ask you to verify your own identity directly with us. We may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.

• Right to Know: You have a right to request that we disclose, up to two times per year, what personal information we’ve collected about you. The process for exercising this right is described above in Your Choices.

• Right to Delete. You have a right to request deletion your personal information, subject to certain exceptions. The process for exercising this right is described above in Your Choices.

• Right to Correct. You have a right to ask that Ulta Beauty correct the personal information it has about you, subject to certain exceptions. The process for exercising this right is described above in Your Choices.

• Right to Opt-Out of the Sale or Sharing of Your Personal Information. You have a right to opt-out of the sale or sharing of your personal information. The process for exercising this right is described at Do Not Sell or Share My Personal Information.

• Right to Non-Discrimination. You have a right to exercise the above rights without being discriminated against.

Notice of Collection

Below is a list of the categories of personal information Ulta has collected about California residents in the 12 months preceding the date this Privacy Policy was last updated. This list includes information about: (1) the categories of sources from which the information was collected; (2) the business or commercial purpose for collecting, selling, or sharing the information; and (4) the categories of Third Parties with whom we share the information.

• Identifiers (Includes Sensitive Personal Information): Includes information such as your name, signature, alias, postal address, and telephone number, unique personal identifier, online identifier, IP address, account log-in, email address, account name, social security number, driver’s license number. Sensitive personal information within this category includes your social security number, driver’s license number, state identification number.

• Personal Characteristics (Includes Sensitive Personal Information)****: Includes information such as your age, race, ethnicity, gender expression, and gender identity. Sensitive personal information within this category includes information about your race.

• Financial Information (Includes Sensitive Information): Includes information such as your Ulta Beauty account name and log-in information, bank account number and access code, and credit card and debit card number and access code. Sensitive personal information in this category includes your account log-in and password, bank account number and access code, and credit card and debit card number and access code.

• Internet or other Electronic Network Activity Information: Includes information described above.

• Biometric information, such as your face or hand geometry.

• Commercial Information, such as records of your Products considered and purchased.

• Geolocation Information, such as your zip code and general location.

• Audio, Electronic, Visual, Thermal, and Related Information: Includes information such as photographs, video recordings, recorded messages, and in some cases personal temperature where appropriate.

• Inferences, derived from the above information.

Notice of Disclosure for a Business Purpose

The following is a list of the categories of personal information we have disclosed about California residents for a business purpose in the 12 months preceding the date this Privacy Notice was last updated. For a list of the categories of third parties with whom we’ve disclosed the information, please see How we share your information.

• Identifiers (Includes Sensitive Personal Information): See above.

• Personal Characteristics (Includes Sensitive Personal Information): See above.

• Financial Information (Includes Sensitive Information): See above.

• Internet or other Electronic Network Activity Information: See above.

• Biometric information: See above.

• Audio, Electronic, Visual, Thermal, and Related Information: See above.

• Inferences: See above.

Notice of Sale and Sharing

We “sell” and “share” your personal information through the use of digital advertising through our Sites, as categorized under California law. Ulta Beauty does not sell your personal information in exchange for monetary value in the traditional sense. Specifically, we make available certain of your online identifiers and other persistent online identifiers with advertising and marketing partners that may be considered a “sale” or “sharing” of your personal information, as defined under California law. We don’t sell or share the personal information or sensitive personal information of any California resident who is 16 years or younger. To learn more, please see Do Not Sell or Share My Personal Information.

California’s “Shine in the Light” law

If you are a California resident and an Ulta Beauty customer, you have the right to request information from us once per calendar year regarding the customer information we share with third parties for the third parties’ direct marketing purposes. To request this information, please send an email to [email protected] with ‘Request for California Privacy Information’ in the subject line and in the body of your message. We will provide the requested information to you via an email response.

California’s “Eraser Button” law

If you are a California resident under 18 years old and a registered user of the Site (as defined above), you can request that we remove content or information that you have posted to our website or other online services. Fulfillment of the request may not ensure complete or comprehensive removal (e.g., if the content or information has been reposted by another user). To request removal of content or information, please contact us or call customer service at (866) 983-8582.

Notice of Financial Incentive

Ultamate Rewards® is a voluntary loyalty program. By joining Ultamate Rewards®, you receive*:

• **Points Earned per $1 Spent:**You earn 1 point for every $1 you spend. Platinum members earn 1.25 points for every $1 (25% more) and Diamond members earn 1.5 points (50% more!) when you shop at Ulta Beauty using your membership ID.
• Redeemable Points:** Points can be redeemed at various thresholds for dollars off purchases on products and beauty services at Ulta Beauty – Points never expire when you are Platinum or Diamond!
• **Hundreds of Offers:**You get access to member-only offers, plus bonus points offers just for you.
• **Birthday Gift:**You get a free gift and earn double points during your birthday month. And if you’re Platinum or Diamond, you get an extra birthday gift!

*Some restrictions apply. Program rules are available in store or online.

**Terms and restrictions apply to base points earned and redemption thresholds. Click here for details.

You may have the option to link your Ultamate Rewards® account to an account you have at Target. When you link your Ultamate Rewards® account to Target Circle, you will be able to earn Ultamate Rewards® points on Ulta Beauty at Target purchases. Platinum and Diamond members will earn at their increased rate of 1.25 and 1.5 points per dollar.

You will not be able to earn bonus points (including the 2X Birthday bonus points and Ultamate Rewards Credit Card 2X points) or redeem your Ultamate Rewards points at Ulta Beauty at Target. Additionally, you will not be able to redeem your birthday gift, $10 birthday coupon, or Diamond Welcome gift at Ulta Beauty at Target. Lastly, not all promotions at Ulta Beauty will be available at Ulta Beauty at Target, so please refer to exact coupon disclosures for information.

Additionally, the Ultamate Rewards Credit Card cannot not be used as a form of tender at Ulta Beauty at Target. Ultamate Rewards Mastercard holders will earn 1 point for every $3 spent at Ulta Beauty at Target.

Under the CCPA, Ultamate Rewards® is considered a Financial Incentive Program. In order to provide you with the incentives described above, we use personal information about you including your name, phone number, email address, purchase history, birthdate, etc. to identify you as a member of the program and provide you with relevant messaging, experiences, and deals. These financial incentives are reasonably related to the value of the data you provide.

We incur a variety of expenses related to the Ultamate Rewards® program. We make this investment in order to offer a more personalized and relevant Guest experience. Expense associated with the program include but are not limited to the 1-1.5 base point earnings when you shop at Ulta Beauty, 2X bonus points (plus, $10 off discount for Platinum & Diamond members) when you provide your birthday, redeemable points valid toward dollars off hundreds of products and beauty services plus, access to offers only available to Ultamate Rewards® members. The expense associated with the program incentives will vary as it is dependent on your engagement with the loyalty program, including total annual spend at Ulta Beauty and frequency and depth of discounts you choose to use.

Definitions

• Personal information. Information that is linked or reasonably linkable to an identified or identifiable individual.
• Sensitive personal information. Information that includes data revealing racial or ethnic origin, the processing of genetic or biometric data for the purpose of uniquely identifying an individual or precise geolocation data.
• Sell, sale, or sold. The exchange of personal data for monetary or other valuable consideration.
• Targeted advertising. Displaying advertisements to a consumer where the advertisement is selected based on personal data obtained or inferred from that individual’s activities over time and across nonaffiliated Internet web sites or online applications to predict such individual’

Notice of Collection

To learn more about the categories of personal information we collect about you and how we use it, please see What information do we collect about you? and How do we use your information? To learn more about the categories of third parties with whom we may share your personal information, please see How we share your information.

Your Rights

• Right to Know and Access: You have a right to know whether Ulta Beauty is processing your personal information, access such personal information subject to certain exceptions, and obtain a copy of the personal information in a portable format. The process for exercising this right is described above in Your Choices.

• Right to Delete. You have a right to request that we delete your personal information. The process for exercising this right is described in Your Choices.

• Right to Correct. You have a right to ask that Ulta Beauty correct the personal information it has about you, subject to certain exceptions. The process for exercising this right is described above in Your Choices.

• Right to Opt-Out. You have a right to opt-out of the sale or sharing of your personal information. The process for exercising this right is described at Do Not Sell or Share My Personal Information.

• Right to Non-Discrimination. You have a right not to be discriminated against for the exercise of your rights described herein.

If you are a Nevada resident, you have the right to submit a request directing us not to make any sale of your personal information. Ulta Beauty does not sell your personal information. However, to request email confirmation that we do not sell your personal information, please send an email to [email protected] with 'Request for Nevada Privacy Information' in the subject line and in the body of your message. We will provide the requested information to you via an email response.

If you have any questions, please contact us by clicking the link or by calling (866) 983-8582 to reach Ulta Beauty Guest Services. A consumer with a disability may also contact Guest Services at (866) 983-8582 to access this policy in an alternative format.