This Privacy Policy describes how Impact Motors Kenya ("Impact Motors", "we", "us", or "our") collects, uses, stores, shares, protects, and deletes information when you use the Impact Motors website, web application, mobile tools, customer-relationship and marketing systems, and our integrations with third-party platforms such as TikTok, Meta (Facebook, Instagram, WhatsApp), and Google (collectively, the "Services"). It also explains the choices and rights available to you.
By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Services.
Impact Motors is a motor-vehicle dealership based in Kenya, with showrooms in Nairobi and Mombasa. We sell, source, trade in, and finance vehicles, and we market our inventory across our website and social media channels. For the purposes of applicable data-protection law, including the Kenya Data Protection Act, 2019, Impact Motors is the data controller responsible for the personal information processed through the Services.
When an authorized Impact Motors staff member connects an official Impact Motors social-media account (for example, through TikTok Login), we receive the limited account information described in Section 6, based strictly on the permissions granted during authorization.
We process personal information where: (a) you have given consent (for example, marketing messages); (b) processing is necessary to perform a contract or to take steps at your request before entering a contract (for example, arranging a sale or financing); (c) processing is necessary for our legitimate business interests (such as operating, securing, and improving the Services), provided those interests are not overridden by your rights; or (d) processing is necessary to comply with a legal obligation. You may withdraw consent at any time, as described in Section 12.
Impact Motors maintains official accounts on platforms including TikTok, Facebook, Instagram, and WhatsApp to publish vehicle listings, promotional videos, and dealership content. These are accounts owned and operated by Impact Motors. We do not request access to, read, or post to the personal social-media accounts of customers or employees. Content we publish consists of dealership-owned marketing material such as vehicle photos, vehicle videos, and price information.
Impact Motors integrates with TikTok solely to manage the dealership's own official TikTok account. An authorized Impact Motors staff member connects the account using TikTok Login (OAuth). During this authorization flow, TikTok asks the staff member to approve a specific, limited set of permissions. We request only the following scopes, and we use each one strictly for the stated purpose:
| TikTok permission | Why Impact Motors needs it |
|---|---|
| user.info.basic | To read the public profile (open ID, display name, and avatar) of the connected Impact Motors account so our admin dashboard can show which account is currently linked. |
| video.upload | To upload vehicle promotional videos as drafts to the connected account's TikTok inbox, so the dealership can review and publish them from the TikTok app. |
| video.publish | To publish approved vehicle promotional videos and photo carousels directly to the connected account's TikTok feed. |
The connection uses TikTok's standard OAuth authorization. The staff member is redirected to TikTok, signs in to the Impact Motors account, and reviews the requested permissions. Only after the staff member approves does TikTok issue Impact Motors an access token and a refresh token for that account. We never see or store the TikTok account password.
From the connected account we store the access token, refresh token, the account's open ID, display name, avatar URL, and the IDs of posts we publish on the account's behalf. This data is held in our private, access-controlled database and is used only to operate the integration. Tokens are transmitted over encrypted (HTTPS/TLS) connections and are never exposed publicly.
TikTok access credentials and related account data are retained only for as long as the integration remains active and connected. When the integration is disconnected, when a deletion request is made, or when the data is no longer needed for the stated purpose, the credentials and associated records are removed.
The connected TikTok account can be disconnected at any time from the Impact Motors admin dashboard, and the account owner can also revoke Impact Motors' access directly from within TikTok's own settings (Settings & privacy → Security & permissions → Manage app permissions). Revoking access in TikTok immediately invalidates our access token.
To have Impact Motors disconnect the TikTok integration and delete all stored TikTok data (tokens, open ID, display name, avatar, and post IDs) associated with a connected account, email denis@impactmotors.co.ke with the subject line "TikTok data deletion". We will revoke the token with TikTok and delete the associated records within 30 days. Our use and transfer of information received from TikTok APIs adhere to the TikTok Developer Terms of Service and the TikTok Developer Policies.
Our website uses cookies, pixels, and similar technologies to keep the site working, remember preferences, measure performance, and (where you consent) support marketing. These include first-party cookies and third-party analytics and advertising technologies such as Google Analytics, the Meta (Facebook) Pixel, the Google Ads tag, and the TikTok Pixel. Marketing and advertising technologies load only where permitted by your consent choices. You can control or block cookies through your browser settings; disabling some cookies may affect how the site functions.
Impact Motors does not sell your personal information. We share information only as needed to operate the Services, including with:
These providers are permitted to use personal information only to provide services to Impact Motors and in line with this Privacy Policy and applicable law.
Some of our service providers (including TikTok, Meta, Google, and hosting providers) operate servers outside Kenya. Where personal information is transferred internationally, we take reasonable steps to ensure it remains protected in accordance with applicable data-protection law and the contractual safeguards offered by those providers.
We keep personal information only for as long as necessary to fulfil the purposes described in this Policy, to provide the Services, and to meet legal, accounting, tax, or reporting obligations. When information is no longer required, we delete or anonymize it. TikTok credentials are retained as described in Section 6.3.
We use reasonable technical and organizational safeguards — including encrypted (HTTPS/TLS) connections, access controls, and restricted administrative access — to protect information from unauthorized access, misuse, alteration, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Subject to applicable law, you may request to:
To exercise any of these rights, contact us using the details in Section 15. We will respond within the timeframe required by applicable law.
The Services are intended for adults and are not directed to children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.
Impact Motors may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date above and publish the revised version on this page. Your continued use of the Services after changes take effect constitutes acceptance of the updated Policy.
If you have questions about this Privacy Policy or how we handle your information, contact us:
Impact Motors Kenya
Nairobi: Ridgeways, Kiambu Road, Nairobi
Mombasa: Omarco House, Moi Avenue, Mombasa
General email: sales@impactmotors.co.ke
Data & deletion requests: denis@impactmotors.co.ke
Phone: +254 722 596211
Website: www.impactmotors.co.ke