Privacy notice

Effective October 7, 2026.

Information we use

We use the information needed to respond to requests, process purchases, and provide order support.

The welcome offer list

If you give us your email address on the welcome offer card, we keep that address, the exact wording you agreed to, and the amounts as they were shown to you, so that what you agreed to can always be read back. We use it to send you your one-time discount code and occasional news about supplies and offers. Every message carries a one-click unsubscribe link, and using it stops us writing to you from that moment; you can also write to [email protected] and we will remove the address. Nothing on the card is required to buy from us, and order confirmations and delivery updates for a purchase are not part of that list. We do not sell or share the addresses on it.

Google Customer Reviews

On the confirmation page for a new order, we share its order ID, your confirmation email address, delivery country and estimated delivery date with Google so it can display the optional Google Customer Reviews invitation. Google receives these details when the invitation loads, before you choose whether to participate. If you choose to participate, Google may email you a survey after the estimated delivery date. Participation is optional and does not affect your order. This invitation is separate from Analytics and Marketing preferences. Google's privacy policy is available at https://policies.google.com/privacy.

Payments

Payment details are handled by the checkout provider when checkout is enabled. Elite Toner Supply does not place payment card data in product URLs or store pages.

Necessary storage

Necessary storage keeps the storefront secure and supports your cart, account, checkout, administrator sessions, and this preference record. It does not turn on Google Analytics or marketing.

Visit measurement on our own servers

When you browse elitetonersupply.com, Elite records on its own servers the pages you view, how long each page was visible, the previous page on our site, products you view or add to your cart, and how you arrived: the referring website's domain, campaign tags in the link (utm_source, utm_medium, utm_campaign, utm_term, utm_content), and whether the link came from an ad click, without keeping the click identifier itself. We derive your country, device type, and browser and operating-system family. We do not store your IP address or full browser user-agent, and we do not record keystrokes, form contents, mouse movements, or screen sessions.

A cookie named elite_gelis holds a random visit identifier and how you arrived. It lasts until your browser session ends unless you allow Analytics, in which case it lasts 90 days and remembers your first and most recent source. A second cookie, elite_olcum, holds no identifier and lasts until your browser session ends; it only tells our measurement script that measurement is allowed on this visit, and without it the script sends nothing. The source of each order, and a link to the visit it came from, is saved with that order.

This information is used only by Elite to run and improve the store. It is not sold, not shared for cross-context behavioral advertising, and not sent to advertising platforms. Raw visit records are deleted after 90 days, and backups that contain them expire within 30 more days. Daily totals without identifiers are kept. We will not attempt to re-identify those totals. Visitors in the EU, EEA, UK, and Switzerland are measured only if they allow Analytics.

Analytics

If you allow Analytics, Google Analytics measures aggregate storefront visits for Elite Toner Supply, and Elite's visit cookie lasts 90 days so it can remember which site or campaign first and most recently brought you here. Page addresses sent to Google Analytics keep only campaign tags and Google ad-click identifiers (utm_ parameters, gclid, gbraid, and wbraid); other query parameters are removed, and order numbers in page addresses are replaced. Analytics is off by default, and the Google signals that belong to Analytics stay off. Google advertising storage and user-data signals stay denied until — and unless — you also allow Marketing while Google Ads is configured; what that choice covers is described under Marketing below. When you allow Analytics, a readable cookie named elite_olcum_onayi tells our servers about that choice; it lasts no longer than your saved choice and is removed when you withdraw it.

Marketing

The Marketing choice is offered whenever Elite has a marketing partner configured; otherwise it reads Unavailable, stays off, and no marketing partner is contacted. Nothing described in this section happens unless you allow Marketing, and none of it happens while your browser sends a Global Privacy Control signal.

In your browser: if LinkedIn is configured, its Insight Tag loads, records pages you visit, and may set LinkedIn cookies so Elite can measure and retarget its advertising. If OpenAI's advertising pixel is configured, it loads and may set a cookie named __obref so OpenAI can connect a later order with an ad you interacted with. If Google Ads is configured, Google's tag (gtag.js) loads for Elite's Google Ads identifier, records the pages you visit, and may set Google's advertising cookies so Elite can measure which campaign or ad led to your visit and to a later order.

After you allow Marketing, Elite sets an HttpOnly consent-receipt cookie and, for Meta, a browser identifier cookie (_fbp) and, if you arrived from a Facebook link, a click cookie (_fbc). When you place an order while that receipt is valid, Elite saves a consent record with the order: the policy version, the time, the _fbp, _fbc, and __obref values if present, your IP address, your browser's user-agent, and the checkout page address. Elite may then report that order server to server, only to the partners that are configured:

Meta Conversions API receives SHA-256 hashes of your email address, phone number, first and last name, city, state, ZIP code, country, and customer ID; your IP address, user-agent, and _fbp and _fbc values without hashing; and the order ID, time, value, currency, each item's SKU or product ID, quantity, and price, and the checkout page address.
LinkedIn Conversions API receives a SHA-256 hash of your email address and the order ID, time, value, and currency.
OpenAI's conversion reporting receives SHA-256 hashes of your email address, phone number, first and last name, and customer ID; your country, state, city, ZIP code, IP address, user-agent, and __obref value without hashing; and the order ID, time, value, currency, and each item's SKU or product ID, name, and quantity.

Withdrawing Marketing stops the tags from loading, clears known marketing cookies on a best-effort basis, and revokes the receipt cookie, so orders placed afterward are not reported. Reports a partner has already accepted cannot be recalled. LinkedIn's handling is covered at https://www.linkedin.com/legal/privacy-policy, Meta's at https://www.facebook.com/privacy/policy/, OpenAI's at https://openai.com/policies/privacy-policy/, and Google's at https://policies.google.com/privacy.

Global Privacy Control

If your browser sends a Global Privacy Control signal, we treat it as an opt-out of sale and sharing: marketing tags and conversion reporting to LinkedIn, Google, Meta, and OpenAI are switched off for that browser even if you previously allowed Marketing. We do not respond differently to Do Not Track signals.

Preference retention

The browser preference record lasts no more than 180 days and contains the policy version, Analytics and Marketing choices, and save and expiry times. Two readable cookies, elite_consent_confirmed and elite_olcum_onayi, tell our servers about your Marketing and Analytics choices and last no longer than that record. The consent-receipt cookie lasts no more than 180 days. The consent record and the source saved with an order stay with that order's records.

Change or withdraw your choice

Use the Cookie preferences button in the footer on any public page to change or withdraw a choice. Revoking Analytics takes effect immediately, removes known first-party measurement cookies on a best-effort basis, and reloads the page; from then on the elite_gelis cookie lasts only until your browser session ends and no longer holds your first and most recent source. Revoking Marketing also revokes its receipt cookie; reports already sent cannot be recalled. Google provider controls are available at https://myadcenter.google.com/.