How EHO handles information.

The party responsible (the controller) for the processing of information is Carlos Alberto Franco Wanderley, creator of the EHO Method.

Data Protection Officer (DPO): Carlos Alberto Franco Wanderley. Contact for privacy matters: privacidade@ehometodo.com.br.

The EHO Method was built to meet NR-1, which requires psychosocial risk assessment to preserve the anonymity of workers. Therefore, by design:

We process a small and specific set of information:

a) Registration and contact data (of the contracting company). To make the contract, the trial and support possible, we collect data on the legal entity (CNPJ, corporate name) and contact details of its representative (name, email, telephone). Some of those contact details may be personal (the representative's email and telephone, for example) and are processed solely for the contractual relationship and for support.

b) Diagnostic answers (anonymous and aggregated). The answers to the questionnaire, always anonymous, in the manner described in section 2.

c) Browsing data (cookies). Like most websites, we use cookies for functionality and to improve the experience. Details in section 7.

Anonymous, aggregated answers may be used for the continuous improvement of the method, scientific validation and the production of statistical knowledge about psychosocial risk in Brazil (comparisons by region or company size, for example).

Such use always operates on anonymised data, identifying no company and no person, and with safeguards against re-identification in small subsets (consolidation of small groups). No data identifying a worker is used — because none is collected.

Because the contracting company enters information into the platform, it undertakes, at the point of registration, not to enter data that individually identifies respondents (name, staff number, individual email or any identifier). EHO is designed not to need such data; entering it improperly is the client's responsibility.

We use cookies necessary for the website to function (chosen language and theme preference) as well as experience-improvement and statistical cookies. You can manage cookies in your browser settings.

We do not sell or transfer information to third parties for marketing purposes. We may share data strictly with the infrastructure and technology providers needed to operate the service (hosting, for example) and with the authorities, where required by law or court order.

Hosting: the platform and the website are hosted with Hostinger, in a data centre located in Brazil (São Paulo). Data is not transferred outside the country.

Registration and contract data is kept for the duration of the contractual relationship and for up to 5 years after it ends, to comply with legal obligations and for any defence in proceedings. Anonymised data may be kept indefinitely, since it permits no identification.

Under the LGPD, a data subject may request: confirmation of processing, access, correction, anonymisation, portability, erasure and information about sharing, as well as withdrawing consent. To exercise those rights, contact the Data Protection Officer at privacidade@ehometodo.com.br.

Please note: because the diagnostic is anonymous, it is not technically possible to locate or retrieve an individual worker's answers — precisely because there is no link between answer and identity.

We adopt technical and administrative measures to protect information against unauthorised access, loss or alteration — including access control, hash-based integrity for the documents generated and the freezing of the structure during collection.

We may update this Policy from time to time. The date of the latest update is shown at the top. Material changes will be communicated through our official channels.

Questions about this Policy or about data processing: privacidade@ehometodo.com.br.