This Privacy Policy explains how RIDERMO (PVT) LTD (“RIDERMO”, “we”, “us” or “our”) may collect, use, store, disclose and protect personal information when you contact us, visit our premises or website, enquire about or purchase a motorcycle or accessory, arrange an exchange or rental, request repairs or restoration, seek a valuation or inspection, or otherwise interact with our services.

The company’s Articles of Association describe a business providing motorcycle-related solutions, including buying, selling, exchange, rental, modifications, repairs, restoration, valuation, finance-related services, inspection certification and the manufacture of modification accessories, subject to applicable Sri Lankan laws and required approvals. This policy is framed around those activities.

This policy applies to customers, prospective customers, sellers, buyers, renters, suppliers, business contacts, website visitors and other individuals whose information we handle. It applies across our in-person, telephone, messaging, paper and digital interactions, to the extent relevant.

This policy does not replace any separate contract, finance-provider privacy notice, employment privacy notice or terms that may apply to a specific service. If a service has a separate notice, that notice should be read together with this policy.

The information we collect depends on the service you request. We aim to collect information that is relevant and reasonably necessary for the stated purpose.

2.1 Identification and contact details

• Name, preferred title, postal or delivery address, email address, telephone number and preferred contact method.
• Identity or age-verification details where reasonably required for a transaction, rental, safety check, legal obligation or fraud prevention. We avoid keeping full copies of identity documents unless there is a clear need.

2.2 Motorcycle, vehicle and transaction details

• Motorcycle make, model, year, registration number, chassis/VIN or engine number, mileage, condition, service and repair history, photographs, valuation notes and inspection findings.
• Buying, selling, exchange, rental, reservation, delivery, modification, repair, restoration, warranty, accessory and after-sales records.
• Ownership or authority-to-sell documents and other records needed to verify a transaction or meet legal requirements.

2.3 Payment and finance-related information

• Invoices, transaction amounts, payment status, receipts, refund details and limited payment references.
• Where a finance-related service is requested, information necessary to refer, coordinate or administer that service. Any lender or finance provider may collect and process additional information under its own privacy notice.

We do not intend to collect or store full card security codes or unnecessary payment-card details. Where possible, payments should be handled by a reputable payment provider and only confirmation/reference information retained by RIDERMO.

2.4 Service and communication records

• Enquiries, complaints, feedback, service requests, appointment or rental details, messages, call notes and communications with our staff.
• Preferences and consent records, including marketing preferences and requests to access, correct or delete information.

2.5 Website and device information

• IP address, browser and device type, approximate location inferred from network information, pages visited, referral source, timestamps, cookie identifiers and security logs, where these are collected by the website or service providers.

2.6 Supplier and business contact information

• Contact details, company or trading name, delivery and invoicing information, and records needed to manage supplier, contractor or business relationships.

Please do not provide sensitive personal information unless it is genuinely needed for the service and we have explained why it is required.

We may collect information:

• Directly from you when you contact us, complete a form, make a booking, request a quote, purchase or rent a motorcycle, arrange a repair, or communicate with our staff.
• From documents you choose or are required to provide, such as proof of ownership, registration records, inspection reports, invoices or payment confirmations.
• From a person acting with your authority, such as a representative arranging a service.
• From relevant third parties where necessary and lawful, such as payment providers, insurers, finance providers, delivery partners, repair specialists, verification services or public registers.
• Automatically through our website, cookies, server logs, analytics tools or security systems, if these tools are used.

If you provide information about another person, you should have authority to do so and, where appropriate, inform that person about this policy.

Depending on the relationship and service, we may use personal information to:

• Respond to enquiries, provide quotations and communicate with you.
• Arrange motorcycle purchases, sales, exchanges, rentals, deliveries, inspections, valuations, modifications, repairs, restoration and accessory orders.
• Verify identity, ownership, authority, eligibility, bookings or transaction details, where reasonably required.
• Process invoices, payments, refunds, warranties, service history and customer support.
• Coordinate with finance providers, insurers, inspection providers, suppliers or other service partners when you ask us to or when needed to complete a transaction.
• Maintain business, accounting, tax, audit, warranty and transaction records and meet applicable legal or regulatory obligations.
• Protect people, property and systems; prevent fraud, theft, misuse, unauthorised transactions and security incidents.
• Operate, maintain and improve our website, services, customer experience and internal processes.
• Send service notices, safety information, policy updates and transactional messages.
• Send marketing communications only where permitted by applicable law and subject to your choices and any required consent.
• Establish, exercise or defend legal claims and resolve disputes.

We will not use personal information for a materially different purpose without a lawful basis and, where required, informing you or obtaining your consent.

Where applicable law requires a legal basis for processing, RIDERMO will identify and rely on an appropriate basis for the relevant activity. Depending on the circumstances, this may include:

• Taking steps at your request before entering into a contract, or performing a contract with you.
• Complying with a legal or regulatory obligation.
• Your consent, where consent is required or is the appropriate basis.
• Legitimate business interests, where permitted by law and where those interests do not override applicable rights and protections.
• Establishing, exercising or defending legal claims, or protecting vital interests, where legally available.

You may choose not to provide information. However, if the information is necessary to verify a transaction, provide a requested service, complete a rental or meet a legal obligation, we may be unable to proceed. We will explain this where reasonably possible.

Consent can be withdrawn where processing relies on consent. Withdrawal does not make earlier processing unlawful, and we may still retain or use information where another lawful basis or legal obligation applies.

RIDERMO does not sell personal information as a standalone commercial product. We may share information, limited to what is reasonably necessary, with:

• Payment processors, banks and payment service providers to confirm or administer transactions.
• Finance providers, insurers, brokers or other financial-service partners when you request or authorise a finance-related or insurance-related service.
• Motorcycle sellers, buyers, suppliers, manufacturers, delivery providers, mechanics, inspectors, restoration specialists and warranty or service partners when required to complete the requested service.
• Website hosting, IT support, customer relationship management, analytics, communications, cloud storage and other service providers acting on our instructions.
• Professional advisers, auditors and insurers where reasonably necessary.
• Government authorities, law enforcement, courts, regulators or other parties when disclosure is required or authorised by law, or necessary to protect rights, safety or property.
• A successor or prospective successor in a business restructuring, merger, sale or transfer, subject to appropriate confidentiality and legal safeguards.

We require service providers who handle information for us to use appropriate safeguards and to process it only for authorised purposes, subject to the applicable contract and law. Some recipients may separately act as independent controllers and provide their own privacy notices.

Some transactions may involve a bank, lender, finance company, insurer, payment provider or other independent organisation. Those organisations may ask you directly for financial, identity, employment or other information and will generally determine their own purposes and means of processing.

RIDERMO will share such information with a third party only where reasonably necessary for the requested service, authorised by you, or otherwise permitted or required by law. Please review the third party’s own privacy notice and terms before submitting information directly to it.

We aim to restrict staff access to payment and identity information on a need-to-know basis. We do not promise approval for any finance product, and any decision made by a finance provider is subject to that provider’s own assessment and rules.

If our website uses cookies or similar technologies, they may be used to keep the website working, remember preferences, protect against abuse, understand website traffic and improve performance. Essential technologies may be necessary for core website functions. Non-essential analytics or advertising technologies should be used in accordance with applicable law and any consent or preference mechanism required.

You can usually manage or block cookies through your browser settings. Blocking some cookies may affect website functionality. If we use third-party analytics, embedded maps, social media plugins, chat tools or advertising pixels, those providers may collect information under their own terms and privacy notices.

We keep personal information only for as long as reasonably needed for the purposes described in this policy, including providing services, maintaining transaction and service records, handling warranties and complaints, meeting accounting or legal obligations, preventing fraud and resolving disputes.

Retention periods depend on the type of information, the transaction, applicable legal requirements and whether a dispute or investigation is ongoing. When information is no longer needed, we will take reasonable steps to delete it, securely destroy it or anonymise it, unless retention is required or permitted by law.

We intend to use reasonable technical, physical and organisational safeguards designed to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure. Safeguards may include access controls, staff confidentiality, secure devices and accounts, backups, software updates, secure disposal and appropriate supplier agreements.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we will take reasonable steps to reduce risks and respond appropriately to suspected incidents.

If a personal data incident occurs, RIDERMO will assess the facts, contain and investigate the incident, keep appropriate records, and notify affected individuals or authorities where required by applicable law. Staff should promptly report suspected loss, misdirection, unauthorised access or disclosure using the contact details in Section 17.

Some service providers may store or process information outside Sri Lanka, for example through cloud hosting, email, analytics or customer-management services. If this occurs, RIDERMO will assess the relevant transfer requirements and use safeguards required by applicable law before transferring personal information internationally.

We do not claim that information always remains in Sri Lanka.

Subject to applicable law and any relevant exceptions, you may be entitled to request information about our handling of your personal data, access or obtain a copy of it, correct inaccurate or incomplete information, withdraw consent where processing is based on consent, object to or request restriction of certain processing, request deletion, or exercise other rights available under applicable law.

To make a request, use the contact details in Section 17 and describe your request clearly. We may need to verify your identity or authority before responding. We will respond within the period required by applicable law. Some information may need to be retained where required by law, needed for a contract, or necessary to establish, exercise or defend legal claims.

You may also have the right to raise a concern with the relevant data protection authority. Requests and complaints should be handled respectfully and without unlawful discrimination or retaliation.

Our motorcycle sales, rental and related services are generally intended for adults and people legally eligible to enter into the relevant transaction. We do not knowingly seek to collect personal information from children through general marketing channels. Where a transaction or service involves a person under the age required by law, RIDERMO must follow applicable age, consent, contract and safety requirements and involve a parent or legal guardian where required.

If you believe a child has provided personal information to us inappropriately, contact us using Section 17 so that we can assess and take appropriate action.

We may send service-related communications about an enquiry, order, booking, repair, rental, payment, warranty or safety matter. These are different from promotional messages.

We will send promotional communications only where permitted by applicable law and where any required consent or other condition has been satisfied. You can opt out of marketing by using an unsubscribe method provided in the message or contacting us. We may retain minimal information needed to record and respect your opt-out.

Please note that a marketing opt-out will not stop essential transactional or legally required communications.

Our website, messages or documents may link to third-party websites or services, including finance providers, payment services, social media pages, maps or suppliers. Those third parties control their own privacy practices. RIDERMO is not responsible for their policies, security or content. Review their privacy notices before providing information to them.

We may update this Privacy Policy to reflect changes in our services, systems, suppliers, business operations or legal requirements. The revised version will be published through our usual channels with an updated “Last updated” date. Where required by law, we will provide additional notice or seek consent for material changes.

Last updated: 14 October 2026.

For privacy questions, requests or complaints, contact RIDERMO using the details below. Please do not send full payment-card details, passwords or other highly sensitive information in an ordinary email.