Wright v. Ulta Salon, Cosmetics & Fragrance, Inc.

District Court, S.D. California·Decided September 8, 2023·No. 3:22-cv-01954·Unknown

Opinion

JOAN WRIGHT, individually and on Case No. 22-cv-1954-BAS-BLM behalf of others similarly situated, ORDER: Plaintiff, v. (1) GRANTING IN PART AND DENYING IN PART ULTA SALON, COSMETICS & PLAINTIFF’S MOTION FOR FRAGRANCE, INC., LEAVE TO FILE THE SECOND Defendant. AMENDED COMPLAINT (ECF No. 14); and

(2) TERMINATING AS MOOT DEFENDANT’S MOTION TO DISMISS THE FIRST AMENDED COMPLAINT (ECF No. 13)

Before the Court is Plaintiff Joan Wright’s Motion for Leave to File her Proposed Second Amended Complaint (“Motion”). (See Mot., ECF No. 4; Mem. in Supp. of Mot. (“Mem.”), EC No. 14-1; Proposed Second Am. Compl. (“Proposed SAC”), ECF No. 14- 3.) Defendant Ulta Salon, Cosmetics & Fragrance, Inc. (“Ulta”) opposes (Opp’n, ECF No. 15), citing essentially the same grounds for dismissal that it proffered in its Motion to Dismiss Wright’s First Amended Complaint (Mot. to Dismiss (“MTD”), ECF No. 13-1). Wright replies. (Reply, ECF No. 16.) The Court finds the Motion suitable for determination based upon the papers submitted and without oral argument. See Fed. R. Civ. P. 78(b); Civ. L.R. 7.1(d)(1). For the reasons stated below, the Court GRANTS IN PART and DENIES IN PART Wright’s Motion for Leave (ECF No. 14) and TERMINATES AS MOOT Ulta’s Motion to Dismiss the First Amended Countercomplaint (ECF No. 13). I. BACKGROUND1 Ulta, an Illinois-based beauty and cosmetics retailer, owns and operates www.ulta.com (the “Website”), on which it sells products. (Proposed SAC ¶¶ 28, 37–38.) Embedded in the HTML code of the Website is JavaScript computer code written by third- party Quantum and installed on Ulta’s servers is Quantum’s session replay spyware. (See id. ¶¶ 6–7, 45–46.) Quantum’s JavaScript and spyware enables it and Ulta to “see the screens” of Website users and to “tap, record, and share users’ ‘sessions’” on the Website. (See id. ¶¶ 44–45.) That is, “[w]hen consumers visit [the] [W]ebsite, the JavaScript immediately loads onto their device . . . and is stored in their device’s cache or temporary internet files.” (Id. ¶ 47.) “[T]he spyware then monitors and records communications the device sends to, and receives from, [Ulta’s] servers while the consumer browses [the] [W]ebsite.” (Id. ¶ 48.) “The communications are still allowed to travel their normal path between the consumer’s device and [Ulta]’s servers, but the communications are tapped and copied and sent to Quantum’s serves as well.” (Id.ˆ¶ 49 .) 1 The facts are taken from Wright’s Proposed Second Amended Complaint (ECF No. 14-3), to which the presumption of truth attaches for the instant Motion. See, e.g., Ahmad v. Day, --- F. Supp. 3d - --, 2022 WL 17970160, at *1 (S.D.N.Y. Dec. 28, 2022) (holding that courts must assume the allegations Quantum allegedly used the communications it tapped and recorded for Ulta “for its own commercial benefit.” (Proposed SAC ¶¶ 79–80.) The terms of and conditions that govern Ulta and Quantum’s business relationship state: Quantum shall have the right to collect and analyze data and other information relating to the provision, use and performance of various aspects of the Quantum Service and related systems and technologies (including without limitation, information concerning Customer Data and data derived therefrom), and Quantum will be free (during and after the Term) to use such information and data to improve and enhance the Quantum Technology and for other development, diagnostic, and corrective purposes in connection with the Quantum Service and other Quantum offerings, and to disclose such data solely in aggregate or other de-identified form in connection with its business. (Id. ¶ 80 (emphasis added).) At some point between April 2022 and April 2023, Wright, a resident of San Diego County, visited the Website from her “cell phone” and/or “other mobile device[] to shop for products.” (Proposed SAC ¶ 27, 37.) Once the Website loaded on Wright’s mobile web browser, Wright’s “phone began sending and receiving electronic communications in the form of instructions to and from [Ulta]’s computer servers utilized to operate its [W]ebsite.” (Id. ¶ 40.) “The commands were sent as messages indicating to [Ulta] what words and text were typed, any credit card number entered, CVV code, billing zip code, first name, last name, phone number, address, email address, any search terms entered, and what content was being clicked, requested, and inputted, . . . including any products ordered.” (Id.) Through its spyware, Quantum, at the direction of Ulta, learned this information and more, including “the pages and content” Wright viewed, her “scroll movements,” “words and text typed even if not fully entered, copy and paste actions, any search terms (even if not fully entered), mouse clicks and movements, keystrokes,” among other things. (Id. ¶ 41; see also id. ¶ 52 (explaining in programmatic terms how Quantum’s spyware operates).) Wright alleges she had no clue that Ulta enabled Quantum to view and record her communications, and “reasonably expected that [her] visits to [the] [W]ebsite would be private.” (Proposed SAC ¶¶ 54–55.) And while she acknowledges that disclosures on Ulta’s website indicated Ulta uses “spyware,” it does not disclose that the data the spyware captures will be “collected,” “analyzed,” or “distributed” by third-party Quantum. (See id. ¶¶ 57–58 (describing Ulta’s Privacy Policy in effect on August 10, 2022); ¶¶ 61–62 (December 29, 2022 Privacy Policy).) Hence, Wright avers Ulta and Quantum did not obtain the necessary consent prior to tapping, recording, collecting and analyzing, and then disclosing her communications. (Id. ¶¶ 62–63.) Wright commenced this putative class action against Ulta on December 9, 2022. (ECF No. 1.) She subsequently filed her First Amended Complaint, which asserts claims under Sections 631, 632, and 632.7 of the California Invasion of Privacy Act (“CIPA”) and a claim under the federal Wiretap Act. (First Am. Compl., ECF No. 11.) Ulta moved to dismiss the First Amended Complaint for failure to state a claim pursuant to Federal Rule of Civil Procedure (“Rule”) 12(b)(6). (See generally MTD.) Rather than respond, Wright filed her Motion for Leave to Amend. (ECF No. 14.) Her proposed amendments delete her claims under Section 632 of CIPA and the federal Wiretap Act and add additional details about, inter alia, Quantum’s spyware, the technology Wright used to access the Website, and the terms and conditions of Ulta and Quantum’s engagement. Rule 15(a) governs amended pleadings. Rule 15(a)(1) confers litigants with a right to amend once as a matter of course and Rule 15(a)(2) covers all other amendments. When the latter applies, “a party may amend its pleading only with the opposing party’s written consent or the court’s leave.” Fed. R. Civ. P. 15(a)(2). Because Ulta does not consent to Wright’s proposed amendments, the Court must determine whether to grant leave to Wright to amend. Under Rule 15(a)(2), granting leave to amend rests within the trial court’s sound discretion. Swanson v. U.S. Forest Serv., 87 F.3d 339, 343 (9th Cir. 1996). However, “[i]n exercising its discretion, a court must be guided by the underlying purpose of Rule 15—to facilitate decision[s] on the merits rather than on the pleadings or technicalities.” DCD Programs, Ltd. v. Leighton, 833 F.2d 183, 186 (9th Cir. 1987) (quotation marks omitted). The policy behind that Rule—that courts should freely grant leave to amend—“is to be applied with extreme liberality.” Morongo Band of Mission Indians v. Rose, 893 F.2d 1074, 1079 (9th Cir. 1990). “[S]ince Rule 15 favors a liberal po

Free access — add to your briefcase to read the full text and ask questions with AI

Wright v. Ulta Salon, Cosmetics & Fragrance, Inc., (S.D. Cal. 2023).

Wright v. Ulta Salon, Cosmetics & Fragrance, Inc. (Wright v. Ulta Salon, Cosmetics & Fragrance, Inc.) — published by Counsel Stack Legal Research, free access to 12M+ legal documents.

Related

Bell Atlantic Corp. v. Twombly
550 U.S. 544 (Supreme Court, 2007)
Glassman v. Computervision Corp.
90 F.3d 617 (First Circuit, 1996)
Louis Eugene Russell v. Tom Rolfs, Superintendent
893 F.2d 1033 (Ninth Circuit, 1990)
Ribas v. Clark
696 P.2d 637 (California Supreme Court, 1985)
Johnson v. Riverside Healthcare System, LP
534 F.3d 1116 (Ninth Circuit, 2008)
Karahadian Ranches, Inc. v. Agricultural Labor Relations Board
694 P.2d 770 (California Supreme Court, 1985)
Rogers v. Ulrich
52 Cal. App. 3d 894 (California Court of Appeal, 1975)
Warden v. Kahn
99 Cal. App. 3d 805 (California Court of Appeal, 1979)
National Council of La Raza v. Barbara Cegavske
800 F.3d 1032 (Ninth Circuit, 2015)
Smith v. LoanMe, Inc.
483 P.3d 869 (California Supreme Court, 2021)
Forsyth v. Humana, Inc.
114 F.3d 1467 (Ninth Circuit, 1997)
Navarro v. Block
250 F.3d 729 (Ninth Circuit, 2001)
Nordyke v. King
644 F.3d 776 (Ninth Circuit, 2011)