Information we collect directly from you

We collect information about you when you use our Sites, visit our Stores, purchase our Products, and engage in Communications with us, including when you register an account, update your profile, access our Products, make a purchase, participate in the Ulta Beauty Community (“Community”), participate in a promotion or incentive program, participate in our loyalty program, or engage in our customer support. The information we collect includes:

• Basic Identifying Information. Information such as your full name, signature, postal address, e-mail address, phone number, account name, username, and other similar identifiers.

• Device Identifier and other Unique Identifiers. Information we collect automatically when you engage with our Sites and Products, or engage in Communications with us, such as your device identifier, internet protocol (IP) address, cookies, beacons, pixel tags, mobile ad identifier, and other unique identifiers. For more information, see Cookies and Related Tracking Technologies.

• Health Information. Information such as your skin condition, scalp condition, and any other health related information you may share with us or through the Community.

• Payment Information. Information such as your payment information, credit card information, and other forms of payment to permit you to purchase our Products. We may collect this information directly from you and from our Third Party partners, any other health related information you may share with us or through the Community.

• Internet or Other Network Activity. Information such as your browsing or search history, engagement with the Community, and other information regarding your interactions with our Sites, Products, emails, and advertisements. We gather this information automatically from your devices, from you directly, and from our Third Party partners.

• Geolocation Information. Information that permits us to determine your general location, such as zip code, so that we can best determine the closest Store to your location, or where to ship our Products, or what Products to offer you. We gather this information directly from you when you engage with our Sites.

• Commercial Information. Information such as the nature of the Products you’ve considered on our Sites and in our Stores, your preferences, your purchase history, your loyalty account history, your engagement with the Community, and related information concerning your commercial activity. We obtain this information directly from you when you engage with our Stores, Sites, and Products.

• Demographic Information. Information such as number of members in your household, age, gender, and related demographic information. We obtain this information directly from you and from our Third Party partners.

• User Content. Information such as your Communications with us and any other content you provide, such as social media profiles, engagement with the Community, photographs, images, videos, survey responses, comments, product reviews, testimonials, and other content.

• Biometric Information. Information such as your facial geometry when you use our Virtual Beauty Try-On feature or related features through our Sites, Stores, or Products. We obtain this information directly from you and from our Third Party partners.

• Audio and Visual Information. Information such as photographs, images, videos, and recordings of your voice (such as when we record customer service calls for quality assurance). We obtain this information directly from you and from our Third Party partners.

• Inferences. Information such as inferences we may draw on the above information and your interaction with us. We obtain this information directly from you, automatically from your devices, and from our Third Party partners.

Information we collect automatically from you

When you use our Sites, Products, and engage in Communications with us, we may collect certain information from you automatically, including:

• Usage Information. Information such as the features you use on our Sites, the links you click and the items you view, pages you visit, emails and advertisements you view, Products you view and purchase, the time of day you browse, and your referring and exiting pages. We may collect this information through a variety of tools, including but not limited to session replay software, third-party pixels, and other tracking technologies. This information may also be shared with those parties.

• Device Data. Information about the device you are using, including but not limited to the type of device you use, the temporary or persistent unique device identifier (UDID) placed by us or our service providers, the IP address of your device, your operating system, the type of browser you use, and data from the way you use our Sites.

• Location Data. Information such as imprecise location data (such as location derived from an IP address or data that indicates a city or postal code level). Our Sites may also collect information about the location of your device. Your device should require you to provide permission before our Sites obtain precise geolocation information from a browser’s geolocation API or from technologies like GPS, WiFi, and/or cell towers. We and our service providers may use this approximate location and/or precise geolocation information, along with other information submitted by you, to provide you with location-based services like local Store information, search results, special offers, and other personalized content. Most browsers and mobile devices allow users to enable or disable precise geolocation using pop-ups or controls located in the settings menu.

Information we collect from our Third Party partners

From time to time, we may collect information about you from Third Parties, including:

• Partners, such as those that offer co-branded Products, sell or distribute our Products, or engage in joint marketing or advertising activities.

• Publicly available sources, such as data in the public domain and through widely available media sources.

• Service providers, such as those who offer performance services on our behalf for advertising, analytics, payment processing, delivery, data augmentation, data sourcing, fulfillment, fraud prevention and security, cybersecurity, payment processing, and other related services.

Our Sites use a variety of third-party cookies and other related tracking technologies. Those technologies include:

• Cookies. Cookies are small data files stored on your device that act as a unique tag to identify your browser. We use two types of cookies on our Sites: session cookies and persistent cookies. Session cookies make it easier for you to navigate our Sites and expire when you close your browser. Persistent cookies help with personalizing your experience, remembering your preferences, and supporting security features. Additionally, persistent cookies allow us to bring you advertising both on and off the Sites. Persistent cookies may remain on your device for extended periods of time, and generally may be controlled through your browser settings. Persistent cookies can be both first-party and third-party managed, meaning your data may be sent to third-parties through these tools.

• Pixels (also known as web beacons). This is a type of code that is embedded in a website, video, email, or advertisement that sends information about your use to a server. There are various types of pixels, including image pixels (which are small graphic images) and JavaScript pixels (which contains JavaScript code). When you access a website, video, email, or advertisement that contains a pixel, the pixel may permit us or a third party to collect data through your device and browser. Pixels are used in combination with cookies to track activity by a particular browser on a particular device. We may incorporate pixels from separate entities that allow us to track our communications, bring you advertising both on and off the Sites, and provide you with additional functionality, such as the ability to connect our Sites with your social media account.

• App Technologies. This includes technologies included in our mobile applications and Sites that are not browser-based like cookies and cannot be controlled by browser settings. For example, our Sites may include software development kits (SDKs), which is code that sends information about your use to a server. These SDKs allow us to track our Communications, bring you advertising both on and off the Sites, and provide you with additional functionality, such as the ability to connect our Sites with your social media account.

• Third Party Analytics Service Providers. We work with companies and analytics systems including those in the table below to help us understand how users access and use the Sites, as well as help us understand market trends and popularity of our Products. As part of this process, we may incorporate analytics and tracking technologies into our own Sites, and some of our Communications such as e-mails. You can learn more about Google Analytics by visiting How Google uses information from sites or apps that use our services.

• Session Replay. Our Sites may, from time to time, utilize technology often known as “session replay” technology that allows Ulta Beauty to understand how users interact with the Sites, including replays of their interaction with our Sites. By using our Sites, you represent you have read this disclaimer and understand that Ulta Beauty may use this session replay technology to record how you interact with our Sites, which may be used by Ulta Beauty for its own internal analytical purposes, and to improve and enhance our Sites.

• These technologies are provided by the following services across our Sites: