Last Updated: May 27, 2026

Welcome to Iwea Car Parts ("we", "our", or "us"). We respect your privacy and are committed to protecting your personal data. This comprehensive Privacy Policy explains how we collect, use, process, and safeguard the information you provide when you visit our website (iweacarparts.co.ke), create an account, or purchase auto parts from us. This policy complies with the Kenya Data Protection Act.

1. Information We Collect

To provide you with highly accurate car parts (such as filters, brakes, engine components, and suspension systems) and a seamless shopping experience, we may collect, use, store, and transfer different kinds of personal data about you. We have grouped this data as follows:

• Identity Data: Includes your first name, last name, username or similar identifier when you create an account.
• Contact Data: Includes your billing address, delivery address in Kenya, email address, and telephone numbers (including WhatsApp).
• Vehicle & Fitment Data: Includes your vehicle's make, model, year, trim, engine specifications, and Vehicle Identification Number (VIN) saved in "My Garage" or provided during search to ensure part compatibility.
• Financial & Transaction Data: Includes your payment details (such as M-Pesa transaction codes or masked card details) and a detailed history of your purchases, wishlist items, and orders.
• Technical Data: Includes your internet protocol (IP) address, login data, browser type and version, time zone setting, and operating system used to access our catalog.
• Usage Data: Includes information about how you use our website, filter categories, and interact with our search functionality.

2. How We Collect Your Data

We use different methods to collect data from and about you, including through:

• Direct Interactions: You give us your Identity, Contact, Vehicle, and Financial Data by filling in forms, using the "My Garage" feature, chatting with our experts on WhatsApp, creating an account, or placing an order at checkout.
• Automated Technologies: As you interact with our website, we automatically collect Technical Data about your equipment and browsing actions using cookies and similar server logs.
• Third Parties: We may receive Financial Data from our payment processors (like Safaricom M-Pesa) confirming your payment status.

3. How We Use Your Information

We will only use your personal data when the law allows us to. Most commonly, we use your data in the following circumstances:

• To Process and Deliver Your Order: Managing payments, fees, and charges, and working with our delivery partners to get your parts to your location.
• To Ensure Part Compatibility: Utilizing your VIN or selected Make/Model/Year/Engine data to accurately match steering, damping, filtration, or electrical components to your specific vehicle.
• To Manage Our Relationship with You: Notifying you about changes to our terms or privacy policy, order status updates, or customer service follow-ups through email or WhatsApp.
• To Improve Our Website: Analyzing Technical and Usage Data to improve our website layout, search accuracy, catalog depth, and overall customer experience.

4. Disclosure of Your Information

We do not sell, trade, or rent your personal information. We may share your personal data strictly for business purposes with the following trusted third parties:

• Logistics & Courier Partners: Third-party delivery services operating within Kenya to fulfill and transport your orders from our Mombasa Road facility to you.
• Payment Service Providers: Secure gateways such as M-Pesa to process transactions rapidly and safely.
• IT Support Services: Service providers acting as processors who provide website hosting, system administration, and technical support.

5. Data Security

We have implemented robust security measures to prevent your personal data from being accidentally lost, customized, accessed in an unauthorized way, altered, or disclosed. Access to your personal data is restricted exclusively to employees, agents, and contractors who have a strict business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

6. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. Order histories are retained to facilitate easier re-ordering of routine maintenance items like oils, fluids, and filters.

7. Cookies and Tracking

Our website uses cookies to distinguish you from other users, keep track of items in your shopping basket, and remember your "My Garage" vehicle details. You can set your browser to refuse all or some browser cookies. However, if you disable or refuse cookies, please note that some parts of this website (such as the cart or checkout) may become inaccessible or not function properly.

8. Your Legal Rights

Under the Kenya Data Protection Act, you have specific rights regarding your personal data. You have the right to:

• Request access to your personal data.
• Request correction of the personal data that we hold about you.
• Request erasure of your personal data.
• Object to processing of your personal data.