Privacy Policy

1. What data we collect

We collect the following types of personal data:

• Identification and contact data: name, email, phone/WhatsApp, company, and job title, voluntarily provided through contact, quote request, equipment rental, or newsletter forms.
• Browsing data: IP address, device and browser type, pages visited, time spent, and referral source, automatically collected through cookies and traffic analysis tools.
• Business data: information related to proposals, contracts, work orders, invoices, and technical reports issued as part of the business relationship.

2. How we collect your data

Your data may be collected when you:

• Fill out forms on the website, such as contact, quote requests, equipment rental, or newsletter sign-up;
• Contact us by phone, email, or WhatsApp;
• Browse the website, through cookies and analytics tools;
• Maintain a business relationship with ENDALL as a client, supplier, or partner.

3. How we use your data

We use the collected data for the following purposes:

• Responding to contact requests, quotes, and technical support;
• Preparing commercial proposals and formalizing service and equipment rental contracts;
• Issuing invoices, technical responsibility records (ART), and technical reports related to the services provided;
• Sending communications about services, news, and technical content, when authorized by the data subject;
• Improving browsing experience, security, and website performance;
• Complying with legal, regulatory, contractual, and tax obligations.

4. Legal basis for processing

In accordance with Article 7 of the LGPD, ENDALL processes personal data based on at least one of the following legal grounds:

• Consent of the data subject;
• Performance of a contract or preliminary procedures related to a contract to which the data subject is a party;
• Compliance with a legal or regulatory obligation;
• ENDALL's legitimate interest, for legitimate and specific purposes, respecting the data subject's fundamental rights and freedoms;
• Regular exercise of rights in judicial, administrative, or arbitration proceedings.

5. Who we share your data with

ENDALL does not sell or trade personal data. Your data may only be shared in the following situations:

• With technology service providers that support the operation of the website and internal systems, such as hosting, email delivery, analytics tools, and CRM, always under contractual confidentiality and security obligations;
• With public authorities, when required by law, court order, or regulatory request;
• With partners and subcontractors directly involved in performing a contracted service, to the extent necessary for its execution.

6. Data storage, retention, and security

Your data is stored in secure environments, with access controls, encryption in transit, and backup mechanisms. We retain data for as long as necessary to fulfill the purposes for which it was collected, observing applicable legal, tax, and contractual deadlines. After this period, data is securely deleted or anonymized, unless retention is required by law.

7. Cookies and tracking technologies

We use essential cookies, required for the basic operation of the website, and analytics cookies, which help us understand how visitors use the site so we can continuously improve it. You can manage or disable cookies directly in your browser settings, keeping in mind that this may affect some site features.

8. Your rights as a data subject

Under Article 18 of the LGPD, you have the right to:

• Confirmation that processing of your data is taking place;
• Access to the personal data processed;
• Correction of incomplete, inaccurate, or outdated data;
• Anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data;
• Portability of data to another service or product provider;
• Deletion of personal data processed based on consent;
• Information about public and private entities with which ENDALL has shared data;
• Information about the possibility of not providing consent and the consequences thereof;
• Withdrawal of consent.

9. How to exercise your rights

To exercise any of the rights described in this policy, contact our Data Protection Officer (DPO) at contato@endall.com.br, providing your full name and the request you wish to make. Your request will be answered within the timeframes established by applicable law.

10. International data transfer

Some of the technology service providers used by ENDALL may store data on servers located outside Brazil. In such cases, we ensure that such transfers comply with the LGPD, through adequate contractual data protection safeguards.

11. Changes to this Policy

This Privacy Policy may be updated periodically to reflect changes in our practices, our services, or legal requirements. The most current version will always be available on this page, with the date of the last update indicated.

12. Contact

If you have any questions about this Privacy Policy or about the processing of your personal data, please contact us:

• ENDALL Inspeções & Serviços Industriais — Araras, SP, Brazil
• Email: contato@endall.com.br
• Phone: +55 19 3542-0000