Privacy Policy
Your privacy is important to us. Learn how we collect, use, and protect your personal information.
Effective Date
01 February 2026
Last Updated
01 February 2026
Lithic Labs (Pvt) Ltd ("Rydemor", "we", "us", or "our") operates an online vehicle rental marketplace connecting vehicle owners ("Hosts") and renters ("Users"). Rydemor is a technology intermediary platform and does not own vehicles or underwrite insurance policies.
This Privacy Policy explains how we collect, use, disclose, process, and safeguard Personal Data in compliance with the Sri Lanka Personal Data Protection Act No. 9 of 2022 and international data protection principles applicable to overseas users.
By using the Platform, you acknowledge this Privacy Policy.
1. Categories of Personal Data We Collect
1.1 Account & Identity Information
- Full name, email address, phone number
- Date of birth, nationality, residential address
- NIC or Passport number
- Driver's license details
- Profile photo
1.2 Booking Information
- Rental dates, pickup and return location
- Vehicle selection and booking history
- Communication between Host and User
1.3 Payment Information
- Billing address and transaction records
- Payment confirmation details
Full card details are processed by third-party payment providers and are not stored by Rydemor.
1.4 Host-Specific Information
- Vehicle registration details and photos
- Insurance documentation
- Bank account information for payouts
- Tax identification (if applicable)
1.5 Claims & Incident Data (Insurance Integrated)
In the event of an accident, damage, or insurance claim, we may collect:
- Accident and police reports
- Damage photographs and repair estimates
- Witness statements and claim reference numbers
- Correspondence related to claims
- Location data at time of incident (where available)
1.6 Health-Related Information (Limited Circumstances)
If an accident involves injury, limited health-related information may be processed strictly for insurance claim processing, legal compliance, and regulatory reporting. Such data is processed only when necessary and in accordance with applicable data protection laws.
1.7 Automatically Collected Data
- IP address, device information, browser type
- Log data, usage behavior
- Cookie identifiers
- Approximate location data
2. Purposes of Processing
We process Personal Data for:
- Account creation and authentication
- Facilitating vehicle rentals
- Identity and driver verification
- Fraud detection and prevention
- Payment processing and payout management
- Compliance with legal obligations
- Customer support and dispute resolution
- Platform improvement
- Marketing communications (where permitted)
- Facilitating optional insurance coverage
- Insurance policy issuance and claims processing (where applicable)
- Communicating with licensed insurers
- Regulatory reporting requirements
Legal Bases
3. Insurance Data Processing
3.1 Role of Rydemor
Rydemor may facilitate access to optional additional insurance coverage offered by a licensed third-party insurer. Rydemor:
- Does not underwrite insurance
- Is not an insurer
- Does not guarantee claim approval
- Does not determine claim outcomes
3.2 Data Shared with Insurance Providers
Where insurance applies, we may share relevant Personal Data with licensed insurance providers and claims administrators, including:
- Identity details and driver's license information
- Vehicle information and accident reports
- Damage documentation and contact information
- Claim-related communications
Insurance providers act as independent data controllers under their own privacy policies.
4. Sharing of Personal Data
We may share Personal Data with:
- Licensed insurance providers and claims administrators
- Payment processors
- Cloud service providers
- Fraud detection and identity verification services
- Regulatory authorities and law enforcement where required
- Professional advisers
- Corporate acquirers in business transactions
🔒 We do not sell Personal Data.
5. International Data Transfers
Because Rydemor serves overseas customers, Personal Data may be transferred outside Sri Lanka. We implement appropriate safeguards such as:
- Data processing agreements
- Contractual protections
- Secure hosting infrastructure
Users acknowledge that cross-border transfers may occur.
6. Data Retention
We retain Personal Data only as long as necessary for:
- Active account use
- Legal compliance and financial reporting obligations
- Insurance and claims processing
- Fraud prevention and dispute resolution
Claims-related data may be retained for extended periods as required by law or insurance regulations.
7. Data Subject Rights
Subject to applicable law, individuals may have the right to:
- Access — Request a copy of Personal Data we hold
- Correct — Update or correct inaccurate data
- Delete — Request deletion (subject to legal obligations)
- Restrict — Request restriction of processing
- Object — Object to processing for certain purposes
- Withdraw Consent — Where processing is consent-based
- Portability — Request data in a machine-readable format
Requests may be submitted to: support@rydemor.com
Identity verification may be required before processing requests.
8. Cookies & Tracking
We use essential, functional, analytics, and marketing cookies. Users may manage preferences via browser settings. For full details, see our Cookie Policy.
9. Security Measures
We implement:
- Encrypted transmission (SSL/TLS)
- Access controls and secure cloud infrastructure
- Fraud detection systems
- Periodic risk assessments
No system is completely secure, and users acknowledge inherent internet risks.
10. Automated Decision-Making
We may use automated systems for:
- Fraud detection and risk scoring
- Insurance eligibility screening (where applicable)
Users may request human review where legally required.
11. Children's Privacy
The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe your child has provided us with personal information, please contact support@rydemor.com.
12. Limitation of Liability
To the maximum extent permitted under Sri Lankan law, Lithic Labs (Pvt) Ltd shall not be liable for:
- Decisions made by insurance providers
- Insurance claim denials
- Regulatory reporting obligations
- Third-party data processing failures beyond reasonable control
13. Policy Updates
We may update this Privacy Policy from time to time. The updated version will include a revised effective date. Continued use of the Platform constitutes acceptance of changes.
14. Contact Information
For questions or concerns about this Privacy Policy or our data practices, contact our Data Protection Officer:
Lithic Labs (Pvt) Ltd
29/1A, 2/1, Col. T. G. Jayawardena Mawatha
Colombo 00300, Sri Lanka
Operated by
Lithic Labs (Pvt) Ltd