// legal
Privacy Policy
Last updated: November 2026
1. Who We Are
Elite Performance Exclusive LLC ("we", "us", "our") operates the website at eliteperformanceexclusive.com. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our Site or use our services.
2. Data We Collect
2.1 Information You Provide
- Contact form: Name, email, phone (optional), inquiry type, plan or budget interest, message content.
- Quote requests: Name, email, phone (optional), company (optional, tech inquiries), preferred plan or vehicle, project requirements, urgency, free-text notes.
- Rental applications (when you formally apply): Full name, date of birth, email, phone, city, state and ZIP, the plan and vehicle you are interested in, preferred start date, any notes you add, your acceptance of the Terms and this Privacy Policy, your authorization for a background check, and your typed signature (with the IP address, browser and time recorded for each). Driver's license and background-check details are not collected on this site; you provide them to Checkr (see below), and we never store images of your driver's license or insurance card.
- Identity and background checks: If your application moves forward, we send you a secure link to Checkr, Inc., a consumer reporting agency. There you authorize the check and enter your identity, driver's license and other required details on Checkr's own pages; they never reach Elite Performance Exclusive LLC's servers. We receive the result from Checkr. See Checkr's privacy policy.
- Insurance verification: After we review your application, you provide your insurance details through the same secure third-party verification portal. We do not store insurance card images.
- Rental agreement: Electronic signature, IP address, user-agent and timestamp captured at signing.
- Security alerts email list: Your email address, your first name if you give it, where you found the sign-up (for example LinkedIn), and the date and wording of what you agreed to. We use it only to send you security alerts and the free checklist. We never sell, rent or share your address. Every email has a one-click unsubscribe link, and you can also email us to be removed.
- Tech project intake: Company details, project goals, target audience, design references, integrations and budget - collected through the secure client portal.
2.2 Information Collected Automatically
| Data | Purpose | Retention |
|---|---|---|
| IP address | Security, rate limiting, abuse prevention. For our visitor counter the IP is one-way hashed (SHA-256) - we store only the hash, never the raw address. | 24 hours, then discarded |
| Country / Region (geolocation) | Traffic analytics, localized experience | Session duration + 24hr aggregate |
| Browser type, OS | Compatibility, analytics | Session only |
| Pages visited, timestamps | Site analytics, improvement | Aggregated, no personal identification |
| Blog article reading (opened, reached the end, shared, "Was this helpful?" answer and optional note) | Knowing which articles help readers. Stored only as daily totals per article; a note is kept with the article, without your name, email or IP address. No new cookie is set. | Daily totals kept; notes kept with the article |
| Website assistant (the chat on our pages) | Answering your questions from our website and improving it. Each question is sent to our server only to find the answer. The conversation is kept in your browser tab so it follows you from page to page, a "visited before" marker is kept in your browser so a returning visitor is welcomed back, and when we show a "Have you read this?" note about a blog post, a marker that you have seen it is kept so it is not shown again; none of these is sent to us. We count usage as daily totals (questions asked, topics, where conversations end). A question the assistant could not answer is kept as text, with the page it was asked on, without your name, email or IP address. | Conversation: until you close the tab (6 hours at most). Unanswered questions: 90 days. Daily totals kept. |
| Details you leave in the website assistant (name, email, optional phone, the questions you asked) | So our team can follow up, and to email you a welcome code if you are new to us (see our Terms, section 4.4). Only sent if you choose to fill in the form and agree to be contacted. | As for contact form submissions; codes until used or expired |
2.3 Geolocation Tracking
We detect your approximate location (country level only) entirely on our own servers, using a locally-hosted copy of the MaxMind GeoLite2 country database. Your IP address is looked up against this database on our server and is never sent to any third-party geolocation service. We do not use Google location services, GPS, or any client-side location API.
We resolve only your country and continent - never precise GPS coordinates, street address, or city. The result is used to show you which country you are visiting from and, in aggregate, where our traffic comes from (e.g., "Visitors from United States, Europe, Africa"). The aggregate counter de-duplicates visitors using a one-way hash of the IP address; the raw IP is never written to the analytics store.
You can opt out of geolocation tracking by declining non-essential cookies in our cookie consent banner. The site functions fully without geolocation.
3. Cookies
3.1 What Cookies We Use
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| Session cookie | Essential | CSRF protection, session management. It also holds a random number, not linked to you, so that a feature we are trying with some visitors first stays the same for your whole visit | Session |
| XSRF-TOKEN | Essential | Cross-site request forgery protection | 2 hours |
| cookie_consent | Functional | Remembers your cookie preferences | 1 year |
| geo_country | Analytics | Stores detected country for traffic banner | Session |
| _GRECAPTCHA | Security (third-party, google.com) | Anti-spam and anti-abuse scoring on forms and sign-in pages. Set when you start using a form or sign-in page; strictly necessary for security, so it does not depend on your cookie banner choice. | 6 months |
| _gcl_au, _gcl_*, conversion cookies | Marketing (third-party, Google Ads) | Google Ads conversion measurement and remarketing. Only set after you click Accept All on the consent banner. Not set on Essential Only. | Up to 90 days |
3.2 Third-Party Cookies
We use Google Ads marketing cookies only with your explicit consent (the Accept All option in our cookie banner). We do not sell your data to third parties. Third-party services we use:
- Google Fonts: Font delivery. Google may log requests. See Google Privacy Policy.
- Google reCAPTCHA v3: Protects every form and sign-in page on this site (contact, quotes, rental applications, agreement signing, partner pages, account sign-in, password resets and two-factor checks) from spam and automated abuse. It loads when you start using one of those pages, whether or not you have answered the cookie banner, because the forms cannot be protected without it (legitimate interest in security). It sets the
_GRECAPTCHAcookie on google.com and sends Google information about how the page is used. It does not load on pages without a form. See Google Privacy Policy. - Google Ads (gtag.js): Conversion measurement and remarketing for our advertising. We run Google Consent Mode v2: the tag loads with ad and analytics storage denied by default, and only switches on if you choose Accept All. If you choose Essential Only, no Google Ads cookies are set and only anonymous, cookieless signals (if any) are sent. We do not collect special-category data through advertising, and the tag never runs in your authenticated customer portal or our admin area. See Google Privacy Policy and How Google uses advertising data.
- Checkr, Inc. (consumer reporting agency): Background checks on rental applicants - Motor Vehicle Reports for all plans, criminal background checks for the Apex (rent-to-own) plan only. We pull these only after you authorize a consumer report under the federal Fair Credit Reporting Act (FCRA). You can request a copy of any report obtained at no cost, dispute the accuracy of any information, and receive a written summary of your FCRA rights. See Checkr Privacy Policy.
4. How We Use Your Data
- To respond to your inquiries and provide services
- To process rental applications and manage rental agreements
- To send security alerts to people who joined our security alerts list, until they unsubscribe
- To improve our website and services
- To detect and prevent abuse (rate limiting, directory enumeration protection)
- To display aggregate traffic origins on our site
5. Data Security
We protect your data with:
- HTTPS encryption on all pages
- CSRF protection on all forms
- Security headers (CSP, HSTS, X-Frame-Options, etc.)
- Rate limiting on form submissions and 404 responses
- No sensitive data stored in cookies
6. Data Retention
Contact form submissions are retained for the duration needed to respond to your inquiry. If you join our security alerts list we keep your address while you are subscribed; after you unsubscribe we keep only the address and the dates you joined and left, so we never email you again without your new consent. Rental and project records are retained for the duration of the business relationship plus any legally required period. Geolocation data is aggregated daily and contains no personal identifiers after 24 hours.
7. Your Rights
You have the right to:
- Access: Request a copy of the data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your data.
- Opt-out: Decline non-essential cookies via the cookie consent banner.
To exercise these rights, email support@eliteperformanceexclusive.com.
8. Children
Our services are not directed at children under 18. We do not knowingly collect data from minors.
9. Changes
We may update this Privacy Policy at any time. The "Last updated" date at the top reflects the most recent revision.
10. Contact
Questions about this policy? Email support@eliteperformanceexclusive.com.
