📅 Published: July 2025 | DIMO Group

Privacy Notice

Diesel & Motor Engineering PLC (hereinafter "DIMO") is a company duly incorporated under the laws of Sri Lanka, bearing company registration number PQ 146, with its registered office located at No. 65, Jethawana Road, Colombo 14, Sri Lanka. DIMO operates across various sectors, including but not limited to automotive, engineering solutions, building technologies, power and energy, agriculture and retail.

For the purpose of this Notice, "DIMO" encompasses Diesel & Motor Engineering PLC and any company directly or indirectly owned and/or controlled by DIMO that you interact with or have a business relationship with, collectively known as the "DIMO Group". Find out more about the DIMO Group at https://www.dimolanka.com/about-us/our-subsidiaries.

1. OUR PRIVACY COMMITMENT

1.1 An Overview, Purpose and our Enduring Commitment to Safeguarding Your Privacy
At DIMO, your privacy is a cornerstone of our operations. We understand the importance of handling your Personal Data responsibly and in full compliance with the Personal Data Protection Act No. 9 of 2022 (PDPA).

This Privacy Notice ("Notice") sets out the basis on which DIMO ("we", "us", or "our") collects, uses, processes, and discloses your Personal Data when you interact with us, including through our services, products, websites, applications, and other platforms.

We act as the Data Controller for all Personal Data relating to our customers, investors, employees, service providers, principals and third-party contractors, as well as any other Personal Data processed in connection with our business operations. As the Data Controller, we are responsible for determining the purposes and means of processing such data, in accordance with applicable data protection laws.

1.2 Essential Information You Should Be Aware Of
We are deeply committed to maintaining a robust and transparent framework for protecting your personal data and we want to assure you that any Personal Data we collect about you will be handled with the utmost care and diligence.

This Privacy Notice is designed to clearly inform you about: a. How we safeguard your Personal Data... b. Your privacy rights... c. The legal protections in place...

By accepting the terms of this Privacy Notice, engaging in a contract with us, and/or continuing to use our services, you confirm that you have read, understood, and agreed to this Privacy Notice.

Our website is designed and intended for use by adults and we do not knowingly collect any information from minors unless it's given to us by their parents or guardians.

It's really important that you read this Privacy Notice alongside any other privacy or fair processing notices we might give you when we're collecting or using your Personal Data.

If you are a child under the age of 18 years, you should review the terms of this Privacy Notice with your parent or guardian. We may sometimes use your personal data to carry out age verification checks and enforce any such age restrictions.

Your provision of personal data is voluntary; however, declining to provide it may prevent us from delivering certain products or services, ensuring high-quality service, or addressing your queries.

We only use your Personal Data for the specific purpose we collected it for. If we require to use it for a different purpose, we'll make sure that new purpose is compatible with the original one. If we need to use your Personal Data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so and where relevant obtain your prior consent.

1.3 Your Responsibility to Provide Accurate and Updated Information
Maintaining accurate, valid, and up-to-date Personal Data is essential. You are responsible for ensuring that the Personal Data you provide to us is accurate, complete, and up to date. We kindly request that you inform us immediately of any changes to your Personal Data throughout the duration of your relationship with us, to help us ensure the continued accuracy of our records.

1.4 Your Obligation to Secure Your Personal Devices
You are solely responsible for maintaining the security of any personal devices used to communicate with DIMO or to transmit Personal Data to us. While we implement appropriate security measures, no transmission of data over the internet is entirely secure. Accordingly, you must ensure that all devices used for such purposes are properly secured against cyber threats, unauthorized access, and other security risks.

1.5 Obtaining Lawful Consent When Sharing Others' Information
Where you provide DIMO with Personal Data relating to another individual, you confirm and warrant that you have obtained the informed and specific consent of such individual to share their Personal Data with us.

1.6 Caution Regarding External Websites, Plug-ins, Applications and Third-Party Links
This website or any link document provided by us may contain links to third-party websites, plug-ins, or applications that are not owned, operated, or controlled by DIMO. Accessing such third-party platforms may allow those parties to collect or process your Personal Data under their own privacy policies and terms of service.

2. PERSONAL DATA COLLECTION

2.1 Types of Data We Collect About You
We may collect or receive the categories of personal information listed below, which may depend on the products or services you may use, as well as your device and account settings. Not all categories of personal information will be collected or received about every individual.

• Basic Personal Identifiers – name, telephone number, address, email, government IDs, signature.
• Device and Online Identifiers – login, MAC address, IP, cookie IDs, social media info.
• Internet and Other Network Activity Information – browsing/search activity, interactions with websites, apps, emails, ads.
• Commercial Information – purchase history, vehicle details, product reviews, contest entries.
• Communications – emails, WhatsApp, chat messages, call logs.
• Demographic Information – age, gender, citizenship, marital status, income, education.
• Financial Information – credit/debit card numbers, financial accounts.
• Biometric Information – voice prints, facial geometry, fingerprints.
• Geolocation – precise or imprecise location data.
• Sensory Information – photos, audio/video recordings.
• Background Information – background checks, criminal convictions.
• Inferences – shopping patterns, interests, aptitudes.
• Marketing and Communications Data – marketing preferences.
• CCTV and Surveillance – footages for security and safety.

2.2 Consequences of Withholding, Inaccurately Providing, or Falsifying Personal Data
Where the collection of Personal Data is mandated by law, required under the terms of a contract with you, your failure to provide such Personal Data when requested may impede our ability to proceed with your requirements.

2.3 How Your Personal Data is Collected
Direct interactions, automated technologies (cookies, server logs), third parties (analytics providers, advertising networks, data enrichment partners).

2.4 Collection of "Special Categories of Personal Data"
DIMO may collect health, religion, biometric data only with explicit consent or when permitted by law (emergency, legal claims, etc.).

3. HOW WE PROTECT CHILDREN'S PRIVACY

Most DIMO websites are for adults. For child-oriented services, we obtain parental consent for children under 18. If we discover data collected without consent, we delete it promptly.

4. USE OF YOUR PERSONAL DATA BY DIMO

We use personal data to process payments, handle complaints, improve products, personalize advertising, conduct analytics, verify identity, debug errors, and meet legal obligations.

4.1 Purposes for Data Collection and Processing
Transaction processing, customer service, product improvement, contests, subscriptions, business analytics, security, training, fraud prevention, auditing, R&D.

4.2 Legal Basis for Processing Your Data
We rely on consent, legitimate interest, contractual necessity, legal obligation, public interest, or emergency situations.

4.3 Profiling
With consent, DIMO builds profiles to personalize content and ads based on browsing, purchases, and interactions. You may withdraw consent anytime.

4.4 Artificial Intelligence Experiences
AI tools like chatbots may collect personal data only as described in this notice, and may share limited data with AI providers to deliver the experience.

5. RESPONSIBLE DATA DISCLOSURE

We may share your data with DIMO Group companies, vendors (payment processors, logistics, cloud providers), advertising partners, social media platforms, measurement vendors, and where required by law (court orders, fraud prevention). In case of business transfer (merger, sale), your data may be transferred under the same privacy commitments.

6. AUTOMATED DECISION-MAKING

DIMO generally avoids fully automated decisions with legal/significant effects. If we use them, we will notify you and explain the lawful basis. You may request human review where applicable.

7. COOKIES

We use cookies and similar tracking to improve website functionality and personalization. You can control cookie settings via browser preferences. See our Cookie Policy for details.

8. YOUR DATA RIGHTS UNDER APPLICABLE PRIVACY LAWS

You have the right to: be informed, access rectification, erasure (right to be forgotten), restrict processing, object to processing, lodge complaint with DPO or Data Protection Authority, withdraw consent, and request review of automated decisions.

How to Exercise Your Rights: Email DPO@dimolanka.com or use the Contact Us form on our websites.

9. DATA SECURITY MEASURES

We implement access controls, encryption, pseudonymization, and cybersecurity capabilities. Third-party processors are bound by confidentiality agreements.

10. DATA RETENTION

Personal data is kept only as long as necessary for the purposes collected, plus any legal, dispute, or business continuity period. After that, data is securely deleted or anonymized.

11. CROSS-BORDER DATA TRANSFERS

Transfers outside Sri Lanka only occur to countries with adequacy decisions or under approved instruments with appropriate safeguards as per PDPA.

12. UPDATES TO THIS PRIVACY POLICY

We will update this notice when necessary. Significant changes will be posted on our website or via direct communication. "Last updated" date will be revised accordingly.

13. CONTACTING US

Data Protection Officer: DPO@dimolanka.com
Call: 0112449797
SMS/WhatsApp & website contact form available.

14. CLARIFICATION OF KEY TERMINOLOGIES

Personal Data, Processing, Data Controller, Data Processor, Data Subject, PDPA – as defined under Sri Lanka's Personal Data Protection Act No. 9 of 2022.

---

PUBLISHED DATE: JULY 2025
Powered by DIMO Digital Team - Privacy Notice