EVAS Cosmetic collects the information needed to review and respond to inquiries. Please review the information collected and how it is used before submitting your inquiry.
Information we collect
Required fields are company name, contact name, email address, inquiry type and inquiry details. A phone number is optional; you may submit an inquiry without one.
Project information you submit, such as selected product categories, formulation codes, brands of interest, desired quantities and timing, may be stored with your inquiry. The submission time and processing status are recorded while the inquiry is handled.
Please do not include information unnecessary for your inquiry, such as national identification numbers, payment details or health information.
How we use your information
The information you submit is used to review product development or brand sourcing inquiries and to allow the person in charge to contact you and respond. Your consent is not used as consent to send marketing advertisements.
Website and inquiry measurement
We use Google Analytics 4 to measure public page views, consultation link clicks and newly saved inquiries, separately for our Korean and English sites. These events do not include your name, email, phone number, company, inquiry text or reference number. Page URL queries and fragments are excluded, and advertising personalization is disabled.
Automatic acknowledgement and spam protection
We may use the email address you provide to acknowledge your inquiry. Our email delivery service, ImprovMX, receives the recipient address, reference number and a fixed acknowledgement message. Inquiry details and internal notes are not included in automatic acknowledgement emails. Repeat submissions, security checks or delivery conditions may suppress or delay an acknowledgement. Email delivery is separate from saving your inquiry.
We use Cloudflare Turnstile to reduce automated spam. The service processes signals such as the visitor IP address, browser and TLS information, and site information. EVAS does not include your company name, contact details or inquiry text in its bot-verification request. Please review Cloudflare's notice for details of its processing. Cloudflare Turnstile Privacy Addendum
Dedicated abuse-prevention records use values derived from IP and email addresses with a server-side secret, rather than storing those addresses in plain text. Your original email address remains in the inquiry record so we can contact you. If verification does not work, keep your entries and retry, or contact grace@evasbiz.com.
Project email and internal work records
When project email is used, sender and recipient addresses, subjects, message bodies, send/receive times and attachment metadata for the shared mailbox evasdesk@gmail.com are processed by Google Gmail and EVAS's private inquiry system. Opening an attachment retrieves that file from Gmail. Website inquiries and related messages are linked to projects with staff assignments, meeting minutes, tasks and activity records so we can continue handling the inquiry.
We do not bulk import messages from before the shared mailbox is connected. New messages without a confirmed project are classified by an authorized manager. Internal notes, meeting minutes and assessments are not automatically emailed to customers or published in a customer-shared brief. Project messages and internal records are not automatically sent to MORI AI. Use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including its Limited Use requirements. We do not use this information to serve advertisements or train general-purpose AI models. Google API Services User Data Policy
Optional MORI AI guidance
Screen guidance and structured brief building work without AI transmission. Only when you accept the separate AI notice and press Send question do we send your written question, up to six recent conversation messages, selected product/formulation codes, market, development stage, and feel/packaging preferences to the OpenAI API to generate a reply. Company names, names, email addresses, phone numbers, the original inquiry field, per-SKU brief content and private access links are not automatically read and sent to AI.
AI conversation text is held only in the current screen's memory, not saved in the EVAS inquiry database or browser storage. Navigation or reload clears the conversation. Fixed preference choices, such as feel and packaging, may be remembered temporarily in this tab for screen guidance and can be removed with Clear companion memory. Do not include contact details, sensitive information, confidential formulas or commercial secrets in your question.
Replies are processed by the external provider OpenAI and may be processed outside your country. We disable response storage (store: false), but this does not mean OpenAI keeps no security or abuse-monitoring logs. OpenAI's standard documentation states these logs may generally be retained for up to 30 days, subject to exceptions such as legal obligations. Please review OpenAI's data controls for its processing terms. OpenAI data controls
AI guidance is optional. You can still use screen guidance, brief building and the ordinary inquiry form without accepting AI transmission. Stop sending questions or leave the screen to stop further AI transmission; this does not undo content already sent. AI replies are general guidance that may be incorrect and do not confirm formulation suitability, regulatory compliance, minimum quantities, prices or schedules. Confirm decisions with staff. Bot verification and request limits based on an IP value transformed with a server-side secret help prevent abuse; these dedicated counters do not store questions or answers.
Retention period
Our retention policy is to keep information for as long as needed while handling your inquiry and delete it within a maximum of one year after completion. Retention-based deletion is reviewed and carried out by an operator, not an automatic job. If you no longer wish to proceed or request deletion, we will review and process your request.
The inquiry retention policy also applies to project email copies and internal work records. Gmail originals and copies in the inquiry system are separate, so an operator checks both locations when handling deletion requests. Changing a record in the inquiry system does not automatically change or delete the Gmail original.
If a separate business contract is entered into after the inquiry, we will provide separate information on the use and retention of information needed for that contract.
Who can access your information
Access to inquiry details is restricted to authorized EVAS managers and staff assigned to the relevant project. Project membership alone does not grant website content-management privileges. Inquiry details, contact information and internal work records are not disclosed to website visitors.
Choosing and withdrawing consent
You may decline consent to the collection and use of personal information. However, without consent for the required inquiry information, you cannot submit an inquiry through this website's form. Optional fields, such as a phone number, may be left blank.
Requests for access, correction or deletion
To request access to, correction or deletion of your submitted information, or to withdraw consent, please use this website's inquiry form. Providing the email address used for the inquiry and the approximate submission time will help us locate it.
We may verify that you are the person concerned or the contact responsible for the inquiry before processing your request. We will inform you of the outcome after verification.
Changes to this notice
If the information collected, purposes of use or retention criteria change, we will update this page and make the changes available on the inquiry submission screen.