leaving a positive legacy for our world ACCOUNTING METRICS TOPIC ACCOUNTING METRIC CATEGORY UNIT OF MEASURE CODE RESPONSE/COMMENT ENERGY MANAGEMENT IN RETAIL & DISTRIBUTION (1) Total energy consumed, (2) percentage grid electricity, (3) percentage renewable Quantitative Gigajoules (GJ), Percentage (%) CG-MR-130a.1 (1) Environment > Energy & Emissions > Energy Consumption FY17-21 (2) 84% (3) 16% DATA SECURITY Description of approach to identifying and addressing data security risks Discussion and analysis n /a CG-MR-230a.1 Introduction > Corporate Governance > Board Oversight; Data Stewardship (1) Number of data breaches, (2) percentage involving personally identifiable information (PII), (3) number of customers affected Quantitative Number, Percentage (%) CG-MR-230a.2 Ulta Beauty experienced no data breaches in the past year and has not had a data breach since the company’s founding in 1990. Sustainability Accounting Standards Board (SASB) Index 2021 ESG Report 40 Supplemental Data Community Environment Product People Introduction

Ulta Beauty ESG Report - Page 41 Ulta Beauty ESG Report Page 40 Page 42