lululemon athletica inc. is a Delaware-incorporated, Vancouver, British Columbia-headquartered apparel retailer publicly traded on Nasdaq (LULU); its iOS shopping app is published by a named operating subsidiary, lululemon athletica canada inc. The app's own App Store privacy label discloses a wide range of identity-linked data — purchase history, financial/payment info, contact info (name, email, physical address, phone), search history, identifiers and diagnostics — collected across analytics, product personalization and app-functionality purposes, and separately declares a 'Third-Party Advertising' purpose covering contact info (physical address, email, name, phone) shared with third parties for advertising; the label does not declare an App Store 'Data Used to Track You' category. The 10-K discloses that lululemon is subject to GDPR, PIPEDA, CCPA/CPRA and China's PIPL, and states the company has in the past experienced attempted cyberattacks and unauthorized-access attempts that, to date, have not had a material impact on its business; no confirmed breach, regulator order, or litigation judgment was identified from primary sources as of this review. lululemon.com's own privacy policy could not be independently retrieved or archived at review time, so it is not cited here.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
5 ON FILE
COLLECTION
The lululemon iOS app's App Store privacy label states that data linked to the user's identity includes Purchase History, Financial Info (Payment Info), Contact Info (Physical Address, Email Address, Name, Phone Number), User Content, Search History, Identifiers (User ID, Device ID), Usage Data and Diagnostics, used across Analytics, App Functionality and Product Personalization purposes.
lululemon's 10-K states that lululemon athletica inc. is incorporated in Delaware, with principal executive offices at 1818 Cornwall Avenue, Vancouver, British Columbia, and that its common stock is registered and trades on the Nasdaq Global Select Market under the trading symbol LULU.
The same App Store privacy label discloses that identity-linked contact information (physical address, email address, name, phone number) is used for the 'Third-Party Advertising' purpose, indicating this data is shared with or used by third parties for advertising rather than kept solely for lululemon's own first-party functionality.
lululemon's 10-K states the company is subject to a wide range of privacy and data-protection laws including GDPR, PIPEDA, CCPA/CPRA and China's PIPL, and separately discloses in its cybersecurity risk factors that it has in the past experienced cyberattacks, including phishing and other attempts to breach or gain unauthorized access to its systems, which have not had a material impact on its operations to date.
The lululemon iOS app's App Store privacy label declares no 'Data Used to Track You' category, but does declare a distinct 'Third-Party Advertising' purpose covering identity-linked Contact Info (Physical Address, Email Address, Name, Phone Number); the app's seller is listed as lululemon athletica canada inc.