Privacy policy

Quote requests

When you request a quote we store the product, quantity, formula, packaging, markets and message you choose, your name, company, country and email, and a Google account email and preferred time for a video call if you add them. We also record your IP address, approximate location and network, browser, device, screen size, languages and time zone, and how you found us: landing page, pages viewed, referring site, campaign tags, visit count and site visitor ID. When your browser kept them, we also store the first and the most recent way you arrived, including an ad click ID if you came from an ad.

Your account

When you create an account we store your email, name, company, country and language, a salted hash of your password (never the password itself), your last sign-in time, and the messages you send us about your projects.

Sample box orders

When you buy a sample box, PayPal takes the payment, so your card and PayPal login never reach our site. We store your name, email, phone, company if given, shipping address, formula picks and notes, and after payment the PayPal transaction ID and the email of the PayPal account that paid. For fraud checks and support we also record your IP address, approximate location, device and visit details, as with a quote request.

Free downloads

When you ask for the free skincare brand launch kit, we store your email, your name and company if you give them, whether you ticked the newsletter box, the page and language you used, and your country from your connection (not your IP address). Nothing is emailed to you automatically, and we send our newsletter only if you ticked the box. To have your record deleted, email inquiry@koreanoem.com.

Chat

The chat stores your messages, any photos you send, and the contact card if you fill it in: name, email, phone and country. It also records your IP address, approximate location and network, browser, device, languages, the page you are on and how you found the site. Our team can read the chat and reply. When you use the chat, our team can also see the pages you visited on this site and the steps described under Site analytics, to answer you better. The assistant's replies are generated by Anthropic's Claude API, which receives your messages, your contact card and the page and product you are looking at, but not your IP address, location or device.

Site analytics

We run our own analytics on our own servers. No third-party analytics service is used. It records:

• The pages you view, how long you actively use each one, how far you scroll, and where you click, with the position on the page, for heatmaps.
• Steps you take: buttons that lead to a quote request, an email or a call, opening the chat, starting and sending a form, a sample box order, creating an account or signing in, switching the site language and playing a video.
• The products you look at or pick, the choices you make in our planning tools, and the words you type in the product and ingredient search boxes.
• In forms, only which fields you reached and which were flagged as missing. We never record what you type in a form.
• Technical details: approximate location and network from your connection (country, region, city and network name), device type, operating system, browser, screen and window size, time zone, languages, how fast pages load and script errors.
• How you arrived: the referring site, campaign tags, whether you came from an ad click, and your landing page.

We do not store your IP address for analytics. Outside the EEA, the UK and Switzerland, a random visitor ID in your browser links your visits, and your browser keeps the first and the most recent way you arrived. A quote request, order or chat from the same browser is linked to those visits. In the EEA, the UK and Switzerland, nothing is stored in your browser for analytics until you accept cookies, and each page view is counted on its own.

If you arrive from a Google ad outside the EEA, the UK and Switzerland, or after you accept cookies there, the visit record also keeps the ad click ID Google adds to the link, so we can later tell Google Ads which ad clicks led to a request or an order.

If your browser sends a Global Privacy Control or Do Not Track signal, we record only the page you view, how you arrived, your country and device type, and whether a request, an order or a chat contact card happened. No ID is used, nothing is stored in your browser for analytics, and these visits are not shown to our team in the chat.

Visits linked to your inquiry

When you request a quote, order a sample box, chat with us, sign in to an account with a confirmed email or open a link in an email we sent you, we may link your visits to this site to your inquiry or account. Our team then sees the pages you viewed, how long you stayed, how you arrived, your approximate location and network, and your device, so we can answer you better. This covers earlier visits from the same browser and later ones.

Links in our emails can carry a short random code (r=) that tells us which recipient opened them. It contains no personal data, it is removed from the address bar as soon as the page opens, and it is not shared with Google or any other third party.

In the EEA, the UK and Switzerland, this linking happens only after you accept cookies. If you decline, we record only bare page views, as with a Global Privacy Control signal. We do not sell this information or share it with ad networks, and we store no IP address for it. The links are kept as long as the inquiry or account they belong to. To stop it, turn on Global Privacy Control or Do Not Track in your browser, or email inquiry@koreanoem.com and we will unlink and delete your visit records.

Google Ads

Every page loads Google's ad tag. It reports visits to Google Ads and tells Google when a visit leads to a quote request, a paid sample box order or a completed chat contact card. Requests and orders are sent with their reference number, and orders with their USD 129 value. With a request or order, the tag also sends Google a hashed copy of your email address (for orders, also your phone number) so Google can match it to the ad that led to it. In the EEA, the UK and Switzerland, Google Consent Mode starts as denied for ad cookies, ad user data and ad personalization, and switches to granted only if you accept the cookie notice. While denied, the tag sets no Google cookies and sends only cookieless signals without ad click IDs. Google explains how it uses data from sites that use its services.

Why we use it

To prepare your quote, run your project, ship and bill sample boxes, answer you in the chat, send the emails you ask for, stop spam, fraud and abuse, and learn which pages, products, tools and ads bring in requests so we can improve the site. We do not sell or rent your information. For advertising, Google receives only what its ad tag collects, as described above.

Who handles it

The site, its database, our analytics and the chat run on Cloudflare, which also gives us each visit's approximate location. Emails are sent through Resend, and our team uses Google for email, calendar invites and video calls. Anthropic generates the chat assistant's replies, Google receives the ad data above and serves fonts for pages in some languages, and PayPal processes sample box payments. They handle data under their own security commitments, and some of it may be processed outside your country, including in the United States and Korea.

How long we keep it

Photos sent in the chat are deleted automatically after 180 days. Quote requests, orders, accounts and chats are kept as long as needed for your project and our legal records. Analytics records, including visits linked to an inquiry or account, are deleted automatically after 36 months. You can ask us to delete your data at any time.

Your rights

You can ask what we hold about you, correct it, or have it deleted, subject to legal retention duties. Email inquiry@koreanoem.com and we respond within 30 days. In the EEA, the UK and Switzerland you can also complain to your data protection authority.

Cookies and browser storage

We set one cookie, only when you sign in, to keep you signed in for up to 30 days. Outside the EEA, the UK and Switzerland, or after you accept cookies, our analytics keeps in your browser a random visitor ID, your current visit, and the first and the most recent way you arrived. The chat keeps a random device ID, your recent chats and your contact card there so you can pick up a conversation. Google's ad tag can set Google Ads cookies. To change your cookie choice, clear this site's data in your browser.

Contact

Idenbrick Co., Ltd., Haeundae-gu, Busan, Republic of Korea, business registration 439-88-03275, is the controller of your personal data. Email inquiry@koreanoem.com.