Diesel & Motor Engineering PLC (hereinafter “DIMO”) is a company duly incorporated under the laws of Sri Lanka, bearing company registration number PQ 146, with its registered office located at No. 65, Jethawana Road, Colombo 14, Sri Lanka. DIMO operates across various sectors, including but not limited to automotive, engineering solutions, building technologies, power and energy, agriculture and retail.
For the purpose of this Notice, “DIMO” encompasses Diesel & Motor Engineering PLC and any company directly or indirectly owned and/or controlled by DIMO that you interact with or have a business relationship with, collectively known as the “DIMO Group”. Find out more about the DIMO Group at https://www.dimolanka.com/about-us/our-subsidiaries.
1.1. An Overview, Purpose and our Enduring Commitment to Safeguarding Your Privacy
At DIMO, your privacy is a cornerstone of our operations. We understand the importance of handling your Personal Data responsibly and in full compliance with the Personal Data Protection Act No. 9 of 2022 (PDPA).
This Privacy Notice (“Notice”) sets out the basis on which DIMO (“we”, “us”, or “our”) collects, uses, processes, and discloses your Personal Data when you interact with us, including through our services, products, websites, applications, and other platforms.
We act as the Data Controller for all Personal Data relating to our customers, investors, employees, service providers, principals and third-party contractors, as well as any other Personal Data processed in connection with our business operations. As the Data Controller, we are responsible for determining the purposes and means of processing such data, in accordance with applicable data protection laws.
1.2. Essential Information You Should Be Aware Of
We are deeply committed to maintaining a robust and transparent framework for protecting your personal data and we want to assure you that any Personal Data we collect about you will be handled with the utmost care and diligence.
This Privacy Notice is designed to clearly inform you about:
By accepting the terms of this Privacy Notice, engaging in a contract with us, and/or continuing to use our services, you confirm that you have read, understood, and agreed to this Privacy Notice.
Our website, is designed and intended for use by adults and we do not knowingly collect any information from minors unless it’s given to us by their parents or guardians.
It’s really important that you read this Privacy Notice alongside any other privacy or fair processing notices we might give you when we’re collecting or using your Personal Data.
If you are a child under the age of 18 years, you should review the terms of this Privacy Notice with your parent or guardian. We may sometimes use your personal data to carry out age verification checks and enforce any such age restrictions.
This ensures you have a complete understanding of why and how we’re using your information and accept the terms herein.
Your provision of personal data is voluntary; however, declining to provide it may prevent us from delivering certain products or services, ensuring high-quality service, or addressing your queries.
We only use your Personal Data for the specific purpose we collected it for. If we require to use it for a different purpose, we’ll make sure that new purpose is compatible with the original one. If we need to use your Personal Data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so and where relevant obtain your prior consent.
1.3. Your Responsibility to Provide Accurate and Updated Information
Maintaining accurate, valid, and up-to-date Personal Data is essential. You are responsible for ensuring that the Personal Data you provide to us is accurate, complete, and up to date. We kindly request that you inform us immediately of any changes to your Personal Data throughout the duration of your relationship with us, to help us ensure the continued accuracy of our records.
1.4. Your Obligation to Secure Your Personal Devices
You are solely responsible for maintaining the security of any personal devices used to communicate with DIMO or to transmit Personal Data to us. While we implement appropriate security measures, no transmission of data over the internet is entirely secure. Accordingly, you must ensure that all devices used for such purposes are properly secured against cyber threats, unauthorized access, and other security risks. You are therefore responsible for safeguarding your Personal Data and account credentials and for verifying the authenticity of any communication claiming to originate from DIMO.
1.5. Obtaining Lawful Consent When Sharing Others’ Information
Where you provide DIMO with Personal Data relating to another individual, you confirm and warrant that you have obtained the informed and specific consent of such individual to share their Personal Data with us. This includes ensuring that the individual has been fully informed of the terms of this Privacy Notice and the purposes for which their Personal Data will be processed and they have accepted the same. You also undertake to ensure that any such third-party Personal Data is accurate, complete, and up to date and does not contain any false, misleading, or misrepresented information.
1.6. Caution Regarding External Websites, Plug-ins, Applications and Third-Party Links
This website or any link document provided by us may contain links to third-party websites, plug-ins, or applications that are not owned, operated, or controlled by DIMO. Accessing such third-party platforms may allow those parties to collect or process your Personal Data under their own privacy policies and terms of service. DIMO has no control and assumes no responsibility for the privacy practices, content, or security standards of such third-party websites or services. We strongly encourage you to review and understand the privacy notices of all external websites before providing any Personal Data. Your use of such third-party services is at your own risk, and DIMO disclaims all liability in this regard.
2.1. Types of Data We Collect About You
We may collect or receive the categories of personal information listed below, which may depend on the products or services you may use, as well as your device and account settings. Not all categories of personal information will be collected or received about every individual.
These data can be categorized as follows:
2.2. Consequences of Withholding, Inaccurately Providing, or Falsifying Personal Data
Where the collection of Personal Data is mandated by law, required under the terms of a contract with you, stipulated by our website’s terms and conditions, or necessary to furnish further information regarding the provision of any of our services, your failure to provide such Personal Data when requested may impede our ability to proceed with your requirements, including the performance of or entry into any contract with you. In such circumstances, we reserve the right to notify you and to cancel or refuse the acceptance of the services you seek.
Furthermore, should we have reason to believe that any Personal Data provided by you is false, inaccurate, constitutes a misstatement of fact, a misrepresentation, an act of identity theft, a violation of any third-party right, or a similar circumstance, we reserve the right to refuse any services you require, terminate any existing contract, and, where relevant, report the matter to the appropriate regulatory authorities.
2.3. How Your Personal Data is Collected
We use various methods to collect Personal Data from and about you:
a. Direct Interactions.
You (or a person or agent acting on your behalf) may provide us with Personal Data by corresponding with us via post, phone, email, directly through our website, social media platforms, or otherwise. Our data collection spans both offline and online platforms. Offline sources include our Consumer Engagement Centres, branch offices, show rooms, direct marketing campaigns, sweepstakes, surveys and contests. Online, we collect data through our websites, applications, and branded pages on third-party platforms. When you engage with us, we may ask for your Personal Data to better serve your needs.
We may obtain your personal information from another company within our DIMO Group companies, using it consistently with this Privacy Notice. We might also combine your data with other information to continually enhance our products, services, content, and advertising efforts.
Some DIMO brands may also collect “special categories of personal data” about you. please see the relevant section below for more details on how we handle this.
b. Automated Technologies or Interactions (This Website and Mobile Applications).
As you interact with our websites or mobile applications, social media platforms, we automatically collect Technical Data about your equipment, browse actions, and patterns using cookies, server logs, and similar technologies. We may also receive Technical Data if you visit other websites employing our cookies. Our mobile applications may access mobile device information to enhance service delivery. Collected from Another Solution or Asset. – When you speak to customer service we collect your personal information using call recording technology in accordance with applicable law.
c. Third Parties or Publicly Available Sources:
We may receive Personal Data about you from various third parties and public sources, including:
2.4. Collection of “Special Categories of Personal Data”
“Special categories of personal data” can be categorised as data relating to race, ethnicity, religion, health, sexual orientation, genetic data, or biometric data, and receives additional protection under the law.
We limit the circumstances under which we collect and process these special categories of Personal Data. For instance, DIMO may collect data related to your health to provide tailored advertisements and relevant promotions. DIMO processes such Personal Data only when you have provided explicit consent. In some instances, your request for services or products may imply or suggest your religion, health, or other special categories of Personal Data without direct collection.
We will only process special categories of Personal Data where we can satisfy an additional condition for doing so. Accordingly, we may use one of the following additional conditions for processing special categories of Personal Data, where consent is not the appropriate basis:
We recognize the importance of taking extra precautions to protect the privacy and safety of children using DIMO products and services.
Most of DIMO’s websites and services are designed and intended for use by adults. Where one of our websites or services is intended for use by a younger audience, we will obtain consent from a parent or a person who has parental authority or has been appointed as a legal guardian before collecting Personal Data relating to a child below the age of eighteen (18) years, as required by applicable laws and regulations in Sri Lanka. The age at which consent is necessary may vary by country.
If you are a child under the age where parental consent is required in your country, you should review the terms of this Privacy Notice with a parent or legal guardian to ensure your understanding and acceptance. If we discover that we have collected Personal Data from a child without the necessary consent, we will delete that Personal Data as soon as practical. Access to certain parts of DIMO’s websites and/or eligibility to receive prizes, samples, or other rewards are generally limited to users over a specified age. We may use your Personal Data to carry out age verification checks and enforce such age restrictions.
DIMO collects, processes, and discloses your personal data for specific and limited purposes only. For example, we may use your data to process your payments, handle complaints, develop and improve our products, services, and communication methods, and enhance the functionality of our websites. We also provide personalized products, communications, targeted advertising, and product recommendations based on your information.
We also may create profiles by analyzing your online surfing, searching, and purchasing behavior, as well as your interactions with our brand communications. This involves building segments (groups with common characteristics) and placing your personal data into one or more of these segments.
Additionally, DIMO may processes your personal data using automated means. An automated decision is one made entirely by automatic processes, without human involvement in the decision-making related to your personal data.
4.1. Purposes for Data Collection and Processing
We collect and process your personal data for a variety of essential reasons, ensuring we can provide you with the best possible service, improve our offerings, and operate our business effectively. These purposes include:
When we collect your personal data for other purposes, we will inform you before or at the time of collection.
4.2. Legal Basis for Processing Your Data
Where appropriate, we will ask for your consent to process your personal data. If you have given consent for processing activities, you have the right to withdraw your consent at any time.
In some cases, we rely on legitimate interest (of ours or a third party) for processing your personal data. A legitimate interest could exist, for example, when you sign up for a loyalty scheme with one of our brands and we use the personal data collected to conduct data analytics to improve our products or services. This ground will only be used when it’s necessary to achieve a legitimate interest, such as optimizing a service, and does not outweigh your rights as an individual. We assure you that if legitimate interest is used as a ground for processing your personal data, we will keep a record of this, and you have the right to ask for this information.
We also process your personal data to perform a contract to which you are a party or to take steps at your request prior to entering into a contract with you. For instance, we need to process your personal data to deliver a product or service you bought.
Furthermore, we process your personal data when we have a legal obligation (e.g., tax or social security obligations) to do so as per Sri Lanka law. For example, a court order or summons may require us to process personal data for a particular purpose, or we may be compelled to process personal data to report suspicious transactions under local anti-money laundering rules.
In some instances, we may have to process your personal data to respond to an emergency that threatens the life, health, or safety of you or another person.
We also process your personal data where it is necessary for the performance of a task carried out in the public interest.
4.3. Profiling
DIMO may use your personal data to build profiles. We may create these profiles by analysing your online surfing, searching, and buying behaviour, as well as your interactions with our brand communications. This involves building segments (creating groups that have certain common characteristics) and placing your personal data in one or more segments.
These segments are used by DIMO to personalize our website and communications to you (such as showing relevant content when you visit our site or in a newsletter), and to display relevant offers and advertisements from DIMO brands on DIMO sites and via third-party websites. The segments can also be used for third-party campaigns on DIMO sites. DIMO profiles your data where you have provided consent for us to do so by opting in; for example, by accepting the setting of cookies on your browser online or signing up for email newsletters from one of our brands.
You can withdraw your consent to prevent your personal data from being used this way at any time using the manage cookies section of our Cookie Notice or by unsubscribing to the use of your email address if you have logged into one of our websites or signed up for any marketing newsletters.
By way of example, with your consent, DIMO collects personal data from:
Based on this profile information, we may also provide you with advertising (if you have asked us to do so) that we think you will like and want to see as you view content from us or from our network of publishers that we advertise with. Sometimes, with your consent, we may use your current location to serve advertising to you that relates to promotions or events happening nearby that we think you might be interested in.
We also use information you have provided to selected third-parties and consented to be shared, such as your age, sex, life stage, lifestyle, and wider interests. This helps us identify people we think will have similar interests to you and who we believe will be interested in similar advertising.
4.4. Artificial Intelligence Experiences
We may provide Artificial Intelligence (AI) powered applications or experiences such as Chatbots and virtual tools to you (“AI Tools”). For AI powered applications and Bots we will communicate to you that you are interacting with Artificial Intelligence and not a human. Many of these AI Tools will not require you to enter Personal Data. However, in the event that we may collect Personal Data through such AI Tools in accordance with the Privacy Notice. We may share your personal data with the providers of these AI tools for the limited purpose of providing the app/experience to you.
At DIMO, we understand the importance of your personal data. We may share all categories of personal information described in this Privacy Notice with certain categories of third parties, but only for specific and legitimate purposes as outlined below. In circumstances other than those described, and where required by applicable Sri Lankan law, we will provide specific notice or ask for your explicit consent.
5.1. Within Our DIMO Group of Companies
As part of a larger business group, DIMO may disclose your personal data with other entities within our corporate family. This sharing is done for purposes consistent with this Privacy Notice, allowing for a more integrated and efficient service across our related operations.
5.2. Other Companies and External Partners
We work with various external entities to operate our business, deliver services, and enhance your experience. We may disclose personal data to the following categories of organizations:
These vendors only have access to the personal data necessary to perform their functions and are contractually prohibited from using it for other purposes. They must process this personal data in accordance with this Privacy Notice, subject to appropriate safeguards, and only as permitted by the Personal Data Protection Act No. 9 of 2022 of Sri Lanka (the “PDPA”).
5.3. Legal Requirements and Protection of Our Company and Others
We may disclose your personal data when required by law or legal process, or when we genuinely believe it is necessary to protect the safety, property, or rights of individuals or DIMO. Examples include:
5.4. Business Transfers
Should DIMO plan to merge, sell, or reorganize its business, your personal data, along with personal data of other DIMO customers, may be disclosed as part of the business arrangement. This may also include transfers of personal data made as a part of insolvency or bankruptcy proceedings. In such transactions, your personal data is generally one of the transferred business assets but remains subject to the promises made in any pre-existing Privacy Notice (unless you consent otherwise). If another entity acquires DIMO, our businesses, or substantially all or part of our assets, or assets related to DIMO’s websites, your personal data will be disclosed to such entity as part of the due diligence process and will be transferred to such entity as one of the transferred assets. We will use reasonable measures to help ensure your information is handled in accordance with this Privacy Notice.
In some instances, DIMO processes your personal data using automated means. An automated decision is a decision made solely by automatic means, where no humans are involved in the decision-making process related to your personal data.
We will not generally make decisions based solely on automated processing. If we do, we will notify you and provide you with clear information about our decision to rely solely on automated processing and our lawful basis for doing so.
However, this right to request a review of an automated decision does not exist if the automated processing is necessary for entering into or performing a contract with you, when you have given your consent, if authorized by any written law of Sri Lanka to which we are subject, or where the Data Protection Authority of Sri Lanka has authorized such processing.
This website uses cookies and other tracking technologies to understand how you interact with our site and to enhance your experience when searching for our services.
7.1. What are cookies?
Simply put, cookies are small text files, often containing letters and numbers, that are sent to your computer or device when you visit websites and use online services. If your web browser is set to accept them, these cookies are stored on your computer’s hard drive. They allow our website, and sometimes other websites, to remember your preferences and to personalize content for you.
7.2. Your Choices:
You have control over cookies. You can adjust your browser settings to refuse all or some browser cookies, or to alert you when websites attempt to set or access cookies. However, please be aware that if you disable or refuse cookies, some parts of this website may become inaccessible or might not function properly.
For more detailed information about the specific cookies we use, please refer to our dedicated Cookie Policy.
8.1. Your Data Protection Rights
At DIMO, when we process your personal data, you have several important rights regarding how that data is handled. You can exercise these rights at any point, and we’ve outlined them below:
8.2. How to Exercise Your Rights
You can exercise any of these rights by sending a request via email as stated in 12. below or by submitting a request through the “Contact Us” form on our websites.
Please note that we may charge a reasonable administrative fee for any requests we consider unreasonable or excessive, or for any additional copies of your Personal Data that you may request.
We make every effort to protect your personal data from misuse, interference, loss, unauthorized access, modification, or disclosure. Our measures include implementing appropriate access controls, investing in the necessary Information Security Capabilities to protect our IT environments, and ensuring we encrypt, pseudonymize, and anonymize personal data whenever possible. Access to your personal data is restricted to our employees and agents on a need-to-know basis. When third parties process your data, they are subject to strict contractual confidentiality obligations.
DIMO will keep your personal data only for as long as necessary to fulfill the purpose for which it was collected. For instance, if you make an online purchase with DIMO, we’ll retain the related data to complete our contract with you. After that, we’ll hold onto it for a period that allows us to address any complaints, questions, concerns, or legal actions related to your purchase. Your data might also be retained to continuously enhance your experience with us and ensure you receive any loyalty rewards you’re entitled to. For targeting purposes, we keep identifiable data for the shortest time possible, after which we take steps to permanently delete it. We regularly review the personal data we hold and will securely delete it, or in some cases anonymize it, once there’s no longer a legal, business, or consumer need for its retention.
As a company that may operate with international partners or utilize global IT infrastructure, DIMO may share personal data with entities located outside of Sri Lanka for the purposes described in this Privacy Notice.
Any such international transfer will only occur:
We will update this Privacy Notice when necessary to reflect the changes in our services, data protection practices or legal obligations. Any significant changes will be notified by posting the updated notice on our website or by contacting you directly through registered channels.
When such an update takes place we will revise the “last updated” date at the bottom of this Notice.
In addition to this Privacy Notice, specific campaigns or promotions may be governed by supplementary privacy terms or notices. We advise you to review these additional terms or notices thoroughly prior to participating in any such campaigns or promotions, as your participation will necessitate compliance with them. All supplementary privacy terms or notices will be made clearly accessible to you.
If you have any questions or concerns about DIMO’s Privacy Notice, our data processing practices, or if you wish to update your data, make a complaint regarding a potential breach of local privacy laws, please reach out.
You can contact our Data Protection Officer, via email at [email protected].
Alternatively, you can submit inquiries or complaints through the following channels:
PUBLISHED DATE: JULY 2025
