Ulta Beauty
Consumer Discretionary
41
out of 100. Number 293 of 512, counting from the worst.
Where Ulta Beauty does well
- Arbitration 0 of 20. Nothing found.
- Renewals 2 of 20. Few problems found.
- No forced arbitration or class-action waiver appeared anywhere in the site Terms & Conditions or the Rewards Terms & Conditions — unusual and better than many retail peers.
- The privacy policy gives clear California opt-out rights for sale/sharing with an explicit no-discrimination guarantee, and commits not to sell or share data of residents 16 or younger.
- Virtual Beauty (GLAMlab try-on): face/hand geometry 'resides solely in the Virtual Beauty Programs on the device... and is permanently destroyed... when they are closed'; no Apple TrueDepth data is collected or stored; sharing is opt-in and shared data is permanently destroyed within one year.
- Gift cards do not expire and carry no fees.
- The Wi-Fi Messenger marketing-text program requires consent and states 'Consent is not a condition of purchase.'
Ulta openly admits it hands your IP address and persistent online identifiers to advertising, analytics, and marketing partners — a transaction Ulta itself says counts as selling/sharing your data under California law.
The fine print
7 clauses and findings from the draft archive, dated 1 October 2026. The plain English comes first; the small print is the company's own words. None of these has been checked yet.
-
Ulta openly admits it hands your IP address and persistent online identifiers to advertising, analytics, and marketing partners — a transaction Ulta itself says counts as selling/sharing your data under California law. You can opt out, but the default is sharing.
We 'sell' and 'share' your personal information through the use of certain Third Party tools on the Sites and offline, including those relating to analytics and advertising. Specifically, we make available certain of your personal information, online identifiers and other persistent online identifiers with advertising, analytics, and marketing partners that may be considered a 'sale' or 'sharing' of your personal information, as defined under California law.
-
Ulta can change, gut, or cancel the entire rewards program — or boot your individual account — at any time, with or without telling you, and for any reason it chooses. Your points and tier benefits exist only at Ulta's sufferance.
We reserve the right to modify or discontinue the Ulta Beauty Rewards® at any time with or without notice, or terminate any membership at any time with or without notice for any reason, including for fraud, abuse, conduct inconsistent with this policy and/or any other Ulta policies.
-
Even the rules governing your prepaid gift card balance can be rewritten after you've paid, without any advance notice to you.
Issuer reserves right to modify Terms at any time without prior notice.
-
Tag Ulta in a selfie and they get a forever, worldwide, royalty-free license to use your photos and videos in ads, on product pages, and in marketing emails. They'll 'make effort' to credit your handle, but revoking requires emailing legal@ulta.com.
By tagging ULTA in social media posts, using our hashtags that incorporate or use ULTA's name, or interacting with our official social commerce accounts, @ultabeauty, you grant ULTA a non-exclusive, royalty-free, worldwide, perpetual license to use, reproduce, display, and distribute any photos, videos, or text in which you have tagged us or our products ('Content'). This includes but is not limited to resharing Content on ULTA's official social media channels, featuring the Content on our website product pages, and including it in our email marketing materials.
-
Casual shoppers' points die roughly 12–15 months after they're earned; only shoppers spending $500+ per year (Platinum/Diamond) get non-expiring points — a tiered system where the smallest spenders lose their earned rewards first.
Points will expire at the end of the quarter one year after the date they were earned. Check your receipt, ulta.com/rewards, or your Ulta Beauty Rewards® Statement email for the next expiration date. If you are a Platinum or Diamond member, points never expire as long as you maintain Platinum or Diamond status.
-
Ulta can cancel your order or refuse to sell to you for literally any reason, with no notice required — including simply because it mispriced an item.
Ulta Beauty reserves the right, without prior notification, to limit the order quantity on any item and/or to refuse service to any Customer for any reason, including limitations on quantities available for purchase, inaccuracies or errors in product or pricing information, or problems identified as potential fraud.
-
Shoppers' license plates can be scanned by Flock cameras in Ulta parking lots, kept for 30 days or longer, and disclosed to law enforcement — most shoppers have no idea this surveillance exists when they park at the store.
Ulta's privacy policy contains a dedicated section on 'Automated License Plate Recognition Usage and Privacy Policy'... information from those systems can be disclosed to third parties, including law enforcement, for specified purposes such as safety, protecting property, and complying with the law. / At Ulta Beauty, automated license-plate readers can retain detections for 30 days under the company's standard policy—and longer when Ulta says an authorized purpose requires it.
Prism Reports (Sept 10, 2026) and Substack reporting quoting Ulta's privacy policy ALPR section
How these were found
Fetched Oct 1, 2026. Ulta's pages displayed no 'last updated' date in the rendered text, so document version dates are unknown. The privacy policy page rendering only exposed the California disclosures sections ('Notice of Sale and Sharing', retention language, financial incentive notice); sections like 'How we use your information' and the dedicated Automated License Plate Recognition (ALPR) section could not be directly read, so ALPR details rely on Sept 2026 Prism and Substack reporting that quotes/paraphrases that policy section. The points-expiry quote comes from the official ulta.com Rewards FAQ as returned in an official-domain search snippet (http://ulta.com/rewards/faq). No forced arbitration or class-action waiver was found in the site Terms & Conditions or the Rewards Terms & Conditions — scored 0 honestly; it may exist in another document not reviewed. Score is editorial judgment from the clauses actually read.
These notes come from the original draft and are not independent verification.