Privacy Policy

Effective date: 4 October 2026

1. Who controls your data

Besto Trading is responsible for the personal data described in this policy. Questions and privacy requests can be submitted through our contact page.

2. Data we may collect

• Contact and lead information you submit, including name, email address, phone number, company and enquiry details.
• Social-media account, Page, form, campaign, post, comment and message identifiers needed to operate authorized integrations.
• Content and responses you choose to send through connected social-media services, including lead-form answers.
• Technical, security and audit information such as timestamps, delivery status, error records and administrator activity.
• Website interaction data where cookies or analytics have been enabled in accordance with the applicable consent settings.

3. How we use data

We use personal data only where needed to:

• respond to enquiries and manage customer or prospect relationships in Odoo CRM;
• publish, schedule, retrieve and report on authorized social-media activity;
• import lead submissions and associate them with the correct campaign, channel and post;
• provide requested services, support and business communications;
• secure, troubleshoot and improve the integration; and
• meet legal, regulatory, fraud-prevention and record-keeping obligations.

4. Connected platforms and service providers

When an administrator connects a social-media account, information is exchanged with that platform under the permissions approved during authorization. For Meta services this may include Facebook Pages, Instagram, Messenger, Lead Ads and the Marketing API. We may also use hosting, email, security and support providers that process data only to deliver the contracted service. We do not sell personal data.

5. Access tokens and security

Integration credentials and access tokens are treated as confidential system data. Access is limited to authorized administrators and services, and reasonable technical and organizational safeguards are used to protect stored and transmitted information. No online system can be guaranteed completely secure.

6. Retention

We retain data only for as long as it is needed for the purposes described above, the active customer relationship, configured CRM retention periods, dispute handling, security or legal obligations. Disconnecting a platform prevents new synchronization but does not automatically remove records already required for legitimate business or legal purposes.

7. Your choices and rights

Depending on the law that applies to you, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent where consent is the basis for processing. We may need to verify your identity and may retain limited information where the law permits or requires it.

8. Removing social-media data

Instructions for disconnecting an account and requesting deletion are available on our User Data Deletion page.

9. Changes to this policy

We may update this policy when services, integrations or legal requirements change. The effective date above identifies the current version.