Privacy Policy

1 Introduction and Scope

This Privacy Policy explains what information hicallgirlkolkata.com (also referred to as "hicallgirlkolkata.com Network", "we", "us" or "our") collects when you use https://hicallgirlkolkata.com, why we collect it, how we use and protect it, and the choices and rights you have.

This policy applies to visitors who browse the site, to registered users who post or manage ads, and to anyone who contacts us through our forms. It describes how we handle personal data in accordance with Indian law, in particular the Information Technology Act, 2000 (and the rules made under it) and the Digital Personal Data Protection Act, 2023.

hicallgirlkolkata.com is meant only for adults. By using the site you confirm that you are at least 18 years of age. The site is not directed at, and must not be used by, anyone under 18.

Because hicallgirlkolkata.com is a hosting platform, some information you provide is published by your own choice as part of a listing. That published information is described in the section "Public Nature of Ad Content" below. Where you use another person's published contact details to reach them, any exchange that follows takes place directly between you and that person and is outside our control.

2 Information We Collect

We collect only the information needed to run the platform. The main categories are set out below.

Account data. When you register, we store your name, email address, an optional mobile number, and optionally your gender and country. We keep your password only as a one-way secure hash (we never store or see your password in plain text), together with your account status and your coin (credit) balance.

Ad content and photos. When you post an ad we store its title, description, category, the location details you choose (state, city, area, ZIP and any address text you enter), and the attributes you fill in for that category (such as age, nickname, and other listing fields). Every ad requires one uploaded image, which is resized and stored. On a free (Basic) listing that image and your contact details are not shown to visitors; on paid listings your photo is displayed, and on Top Premium listings your Call, WhatsApp and Telegram contact details are also displayed. The contact details you enter (email, mobile number, WhatsApp indicator and Telegram handle) are stored with the ad.

Coin and payment records. Coins ("credits") are an on-account balance you can top up. We keep a record of your coin purchases and of every coin credit and debit (for example, when you boost an ad), including an order reference, the amount, and the coins added. We do not process or store card, UPI or bank details. All payment collection is carried out by an external payment processor; when you buy coins your browser is taken to that processor, you enter your payment details on its side, and we only receive back a gateway order reference, a payment reference and a paid/unpaid status.

Technical data. We keep technical data to a minimum. We do not store your browser user-agent or device fingerprint anywhere. We capture your IP address only when you submit a public review, where it is stored with that review and used to limit spam. In addition, when a page shows a Cloudflare Turnstile anti-bot check, your IP address is sent to Cloudflare so it can verify that check.

Cookies and session data. We use a small number of first-party cookies to keep you logged in and to protect forms, and the public site keeps a couple of preferences in your browser's local storage. These are described in the "Cookies and Similar Technologies" section.

Messages you send us. When you use our contact form we store the name, subject and message you submit (and an email address if you provide one). When you report an ad we store the name, email, subject and message you submit. When you write a review we store the reviewer name, rating, review text, the city/state you select and, as noted above, your IP address.

What we do NOT collect. We do not collect any government-issued identity document (such as Aadhaar, PAN, passport or driving licence), and we do not collect any biometric data (such as fingerprints, face scans or selfies). Age is handled purely by an 18+ self-declaration gate the first time you visit, not by any document upload or third-party identity check. We do not store card numbers, CVVs, card expiry dates or bank-account numbers, and we do not maintain any Aadhaar, KYC, selfie or biometric fields.

3 How We Collect It

We collect information in the following ways:

• Directly from you, when you register, post or edit an ad, buy coins, boost an ad, write a review, report an ad, or contact us.
• Automatically in a limited way, through the essential cookies and browser storage that keep you logged in and remember basic preferences, and through analytics as described below.
• From our anti-bot and security checks, where Cloudflare Turnstile processes your IP address to confirm you are a genuine visitor.

If you ever provide information about another person, you must make sure you are entitled to do so and that they are aware of this policy.

4 How and Why We Use It

We use the information we collect for the following purposes:

• To provide your account — to register you, log you in, keep your session secure, and let you manage the ads you post.
• To publish and rank ads — to display your listing to visitors, to show your photo and contact details on paid tiers where applicable, and to place boosted ads ahead of free ads in listings.
• To operate coins and boosts — to add the coins you purchase to your balance, to charge coins when you boost an ad, and to keep an accurate record of every credit and debit.
• To protect the platform — to run anti-bot checks on registration, login, ad posting and contact forms, to detect duplicate or abusive content, to limit review spam, and to hide or suspend ads and accounts that are reported for abuse.
• To respond to you — to handle your contact enquiries, ad reports and review submissions, and to moderate reviews before they are shown publicly.
• To send service and re-engagement email — we may email registered users who have been inactive to encourage them back. Every such email includes an unsubscribe option, and once you opt out we record that and stop sending them.
• To improve the service and understand usage — using analytics as described below.
• To meet legal obligations and protect our rights — to comply with applicable Indian law, to respond to lawful requests from authorities, and to establish, exercise or defend legal claims where necessary.

5 Cookies and Similar Technologies

We keep the use of cookies and tracking deliberately light.

• Essential cookies. A standard first-party session cookie and an anti-forgery (XSRF) token keep you logged in and protect our forms. These are set as Secure and SameSite=lax and are necessary for the site to work. Your session itself is stored on our own servers, not in the cookie.
• Cloudflare Turnstile (bot protection). Forms such as registration, login, posting an ad and contact are protected by Cloudflare Turnstile, which uses Cloudflare cookies/scripts and your IP address to tell humans from bots.
• Cloudflare network and performance. Because the site is served through Cloudflare's network, Cloudflare may set security and performance cookies and collect a small anonymous performance beacon (Cloudflare Insights).
• Google Analytics 4. We use Google Analytics 4 to understand, in aggregate, how the site is used so we can improve it. On the public site the analytics script is loaded only after your first interaction with the page.
• Browser local storage. The public site remembers a small amount of information in your own browser only: that you have accepted the 18+ age gate, and your list of favourite and recently-viewed ads. This stays in your browser and is not sent to our servers.

We do not use advertising pixels or third-party ad/tracking networks such as Facebook/Meta Pixel, Google AdSense, Hotjar, Microsoft Clarity, Mixpanel or DoubleClick. You can block or delete cookies in your browser settings, though essential cookies are needed for login and form functions to work.

6 Public Nature of Ad Content

An advertisement is, by its nature, meant to be seen by the public, so anything you include in a listing that is displayed becomes visible to visitors by your own choice. How much is shown depends on the ad tier:

• Basic (Free) ads are shown to visitors as text only — the title and description. No photo and no contact details are displayed to visitors on a free ad.
• Top ads additionally display your uploaded photo, but not your contact details.
• Top Premium ads display your photo and also show your Call, WhatsApp and Telegram contact details to visitors.

Where your contact details are displayed on a Top Premium ad, they link directly to your own number or handle, and any conversation that follows takes place directly between you and the visitor. We do not sit in the middle of, process payment for, or take responsibility for those direct communications or for how you present information in your own listing. Please share only the contact details you are comfortable making public, and remember you can edit or delete your ad at any time while your account is active.

7 When We Share Data

We do not sell your personal data. We share it only as needed to run the service and only with the following categories of recipient:

• Our external payment processor — when you buy coins, so that it can collect payment. It receives the order amount and your name, email and mobile so it can process the payment; we receive back only the payment references and status.
• Cloudflare (CDN, security and bot protection) — as the network our site is served through, and to run the Turnstile anti-bot checks, which involves your IP address.
• Our hosting and email providers — the provider that hosts the platform, and the SMTP email service (through Hostinger) that sends our transactional and re-engagement emails from our own domain.
• Google Analytics — for aggregate usage analytics, as described above.
• Authorities and legal claims — where we are required to disclose information by Indian law, or in response to a valid and lawful request from a court, law-enforcement or regulatory authority, or where disclosure is necessary to establish, exercise or defend legal claims or to protect the safety and rights of users or the public.

8 Data Retention and Deletion

We keep personal data only for as long as it is needed for the purpose it was collected for, or as required to meet a legal obligation.

• Ads. A free (Basic) ad is published for about 180 days, after which it is treated as expired. Paid boosts run for the number of days you pay for. Expired or suspended ads are removed from public listings.
• Deleting your ad or account. When you delete one of your own ads, that ad and its stored image variants are removed, along with its related records (such as its field values, schedules and reports). If your account is deleted, all of your ads and their photos are removed in the same way.
• Hidden and suspended data. If an ad is reported or an account is suspended, the affected ads are hidden from all public listings and searches. A suspended user cannot post or delete ads until the matter is resolved.
• Records we keep. Coin and purchase records, contact enquiries, ad reports and reviews may be retained for as long as needed for accounting, security, moderation, dispute-handling or legal-compliance purposes, after which they are deleted or anonymised.

9 How We Keep Data Secure

We take reasonable security measures to protect your information:

• The entire site is served over HTTPS, so traffic between your browser and us is encrypted, and our session cookies are marked Secure.
• Passwords are stored only as a strong one-way hash (bcrypt); we never keep them in a readable form.
• The platform sits behind Cloudflare, which provides network-level protection, and anti-bot Turnstile checks guard our key forms against automated abuse.
• Access to stored data is limited to what is needed to operate and moderate the service.

No system can be guaranteed to be perfectly secure, but we work to protect your data and to correct any issues we become aware of. Please help by keeping your password confidential and using a strong, unique password.

10 Your Rights and Choices

Under the Digital Personal Data Protection Act, 2023 and applicable Indian law, you have the following rights in relation to your personal data:

• Access — to ask what personal data of yours we hold and to obtain a summary of it.
• Correction and updating — to have inaccurate or incomplete data corrected or completed. You can edit much of your own information directly from your account.
• Deletion — to ask us to delete your personal data where it is no longer required; deleting your ads or your account removes them and their photos as described above.
• Withdraw consent — where our use of your data relies on your consent, you may withdraw it at any time (this does not affect processing already carried out). You can unsubscribe from re-engagement emails using the link in any such email.
• Grievance redressal — to raise a complaint about how your data is handled, as set out in the "Grievance Officer and Contact" section.

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before acting on a request, and we will respond within the timeframe required by law.

11 Children and Under-18 Users

hicallgirlkolkata.com is a strictly 18+ platform. It is not intended for anyone under the age of 18, and such persons must not register, post ads, or browse the site. Access is gated by an 18+ self-declaration the first time you visit. We do not knowingly collect personal data from anyone under 18. If we become aware that we hold information relating to a person under 18, we will delete it. If you believe an under-18 person has provided us information, please tell us at once using the contact details below.

12 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or the law. When we make changes we will update the "Last updated" date at the top of this page, and where the change is significant we will take reasonable steps to make it more prominent. Please review this page periodically. Your continued use of the site after an update means you accept the revised policy.

13 Grievance Officer and Contact

If you have any question, request or complaint about your personal data or this Privacy Policy, you can contact our Grievance Officer by email at contact@hicallgirlkolkata.com or through our Contact page. We will acknowledge and address your grievance within the timeframe required under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

If you are not satisfied with our response, you may escalate the matter to the relevant authority appointed under applicable Indian law. This Privacy Policy is governed by the laws of India, and any disputes relating to it are subject to the courts of India.