Privacy Policy

Last Revision Date: 02 January 2026

Entity Designation and Commitment: The digital interface accessible via the Uniform Resource Locator (URL) https://hnicalls.com (hereinafter referred to as the “Website”) is under the proprietorship and administrative control of HNI CALLS. Herein, a firm commitment is undertaken to respect the privacy and integrity of all personal data voluntarily submitted by visitors (hereinafter, “Users,” “You,” or “Your”) to the Website. This exhaustive Privacy Policy (the “Policy”) delineates the comprehensive methodologies employed for the collection, processing, utilization, storage, protection, and potential dissemination of User data accrued during Website interaction.

1. Data Controller Identification
The Data Controller for all personal information processed via the Website is:
Website URL: https://hnicalls.com

2. Commenting System Data Acquisition Protocols
Upon User initiation of a comment submission through the dedicated web form, a systematic collection of the following data points is executed:

  • The alphanumeric strings explicitly entered by the User into the designated form fields (typically inclusive of name, electronic mail address, website URL, and comment body text).
  • The Internet Protocol (IP) address assigned to the User’s originating network node at the temporal point of submission.
  • The browser user agent string, which conveys technical specifications regarding the User’s web browsing software and operating system environment.

Rationale for Collection: The aforementioned data points, specifically the IP address and user agent string, are collated and analyzed for the primary purpose of augmenting automated spam detection and mitigation capabilities.

Gravatar Service Integration: Subsequent to comment submission, an anonymized cryptographic hash, generated algorithmically from the User’s supplied email address, may be transmitted to the Gravatar service (operated by Automattic Inc.) to ascertain the presence of a corresponding publicly-accessible profile image. The privacy governance framework of the Gravatar service is independently articulated and accessible for review at: https://automattic.com/privacy/. Following formal administrative approval of a User’s comment, should a Gravatar profile picture be associated with the submitted email address, said image may be rendered publicly visible in proximate conjunction with the published comment text.

3. User-Uploaded Media Files: Metadata Advisory
Users possessing requisite permissions may upload digital image files to the Website’s media repository. A formal advisory is issued recommending the prior removal or stripping of embedded Exchangeable Image File Format (EXIF) data, inclusive of geographical positioning system (GPS) coordinate metadata, from all such images before upload. The Website does not perform automated sanitization of EXIF data. Consequently, visitors possessing technical capability may download published image files and subsequently extract any embedded location metadata contained therein.

4. Cookie Implementation and Storage Durations
The Website employs HTTP cookies—small textual data parcels stored locally within the User’s browser—to enhance interface functionality and User experience. The specific cookie implementations are categorized as follows:

  • Comment Convenience Cookies: Upon electing to preserve User details within the comment form via the “Remember me” or analogous interface feature, a persistent cookie is deposited. This cookie archives the User’s supplied name, email address, and website URL, pre-populating said fields for future comment submissions, thereby obviating the need for manual re-entry. The stipulated validity period for these cookies is three hundred and sixty-five (365) calendar days.
  • Session Authentication Cookies:
    • Temporary Session Cookie: Navigation to the administrative login portal triggers the placement of a transient session cookie. This cookie’s sole function is to ascertain and confirm browser-level acceptance of cookies. It contains zero personally identifiable information and is programmatically purged upon termination of the browsing session (browser closure).
    • Login State Cookies: Upon successful authentication via login credentials, multiple cookies are established:
      • Cookies preserving login state and screen display preferences. Login state cookies persist for forty-eight (48) hours. Display preference cookies persist for one (1) year.
      • Activation of the “Remember Me” checkbox extends login persistence to fourteen (14) consecutive days.
      • Manual initiation of a logout action will result in the immediate invalidation and removal of login state cookies.
  • Content Authoring Cookie: For Users with content creation privileges (e.g., authors, editors), subsequent to the saving or publishing of an article or post, an additional cookie is stored. This cookie contains no personal data and serves solely to record the post ID of the recently edited article. Its expiration is set at twenty-four (24) hours.

5. Third-Party Embedded Content Disclaimer
Articles, posts, or pages hosted on this Website may incorporate embedded content elements (e.g., video players, image galleries, textual articles) sourced from external, third-party websites. The behavior and data acquisition practices of such embedded content are functionally identical to a scenario wherein the User has navigated directly to the third-party website in question.

Potential Third-Party Data Collection: These external domains may independently collect data pertaining to the User, employ their own cookie frameworks, integrate additional third-party tracking systems, and monitor User interaction with the embedded content. Such monitoring is particularly comprehensive if the User possesses an active logged-in account on the respective third-party platform.

6. Data Sharing and Recipient Disclosure
The Website engages in limited data sharing under the following prescribed circumstance:

  • Password Reset Functionality: In the event a password reset is requested for a User account, the automated reset notification email dispatched to the User’s registered address will include, for security audit and fraud prevention purposes, the IP address from which the reset request was initiated.

7. Data Retention Periods

  • User Comments: All submitted comments and their associated metadata (including but not limited to timestamp, IP address, and user agent) are retained in perpetuity within the Website’s databases. This indefinite retention facilitates the automated recognition and expedited approval of subsequent comments from the same User, bypassing manual moderation queues.
  • Registered User Profiles: For individuals who complete a registration process, all personal information voluntarily provided within the user profile is stored persistently. Registered Users retain the administrative capability to view, amend, or request the deletion of their personal data at any temporal point, with the sole exception of the immutable username identifier. Website administrators concurrently maintain access to view and edit this profile information.

8. Data Subject Rights and Privileges
Users who maintain a registered account on this Website, or who have previously submitted comments, are endowed with the following statutory-style rights regarding their personal data:

  • Right of Access: To petition for and receive an exported data file containing a copy of the personal data held by the Website pertaining to the User.
  • Right to Erasure: To petition for the deletion of any personal data held by the Website concerning the User.
  • Exclusions: These rights are not absolute and do not extend to any dataset which the Website is obligated to retain for purposes of legal compliance, administrative record-keeping, or ongoing security integrity.

9. Transborder Data Transmission
As an ancillary function of comment management, visitor-submitted comments are subject to automated scrutiny by a third-party spam detection service. This process may involve the transfer of comment data, including metadata, to servers potentially located in jurisdictions outside the User’s country of residence.

Scroll to Top