Security & privacy
Access you control. Data we keep small.
What LaLista can and can’t do, what we store, and how we protect it — in plain language. The binding details are in our privacy policy and data processing agreement.
Your Facebook Page
One permission. Nothing more.
You share your Page with LaLista as a partner in your own Meta Business settings, with the “Ads” permission only. You never give us a password.
LaLista can
- Run ads that show your Page’s name and picture
LaLista can’t
- Post on your Page
- Read your messages
- Change your settings
You can remove LaLista’s access at any time under Settings → Partners in Meta Business. Your ads stop running.
What we store
Only what the service needs.
Your stock
The cars you already publish online: make, model, price, mileage and photos.
Your account
Your name, work email, company details and subscription.
Your Page connection
Which Page you shared with us — not your password, your messages or your posts.
Your ad results
Reach, impressions and clicks for your ads.
Nothing on your website
We install nothing on your site: no pixel, no script, no change to your privacy policy.
How we protect it
The basics, done properly.
Encryption in transit
HTTPS for all web traffic, and protected connections between our services and Meta.
Access on a need-to-know basis
Access to production and customer data is limited by role and authentication — never open to everyone by default.
Monitoring and incidents
We log and monitor our services to catch abuse and outages. If a breach affects personal data, we notify affected customers and people where the law requires.
Careful with vendors
We use established cloud and tooling providers and check them for security and privacy before we use them.
Where personal data leaves the EU/EEA, we use appropriate safeguards such as Standard Contractual Clauses. Details are in our privacy policy.
Documents
Everything in writing.
- Privacy policyWhat we process, why, for how long, and your rights.
- Data processing agreementFor customers who need GDPR processing terms.
- SubprocessorsVendors that process data on our behalf.
- Cookie policyWhat we store in your browser, and why.
- Deleting your dataHow to remove your data and your Page connection.
A security review or a DPA?
Write to us. We’ll help with your questionnaire and send the documents you need.