Privacy policy

Zevon (“we”, “us”) provides managed Microsoft 365 security services. This policy explains how we handle personal information when you visit our website, contact us or use our services.

Last updated: 9 November 2026.

• Information you give us: your name, company, job title, email, phone number and anything you include when you email, call or book an assessment.
• Client environment data: when we deliver services, we access your Microsoft 365 tenant (for example user accounts, device details, sign-in and security logs) only as needed to do the work you’ve asked for.
• Technical data: basic information your browser sends when you visit the site, such as IP address, browser type and pages viewed.

• To reply to enquiries and arrange assessments
• To deliver, monitor and support the services in your agreement
• To send invoices and service reports
• To keep our website and systems secure
• To meet our legal obligations

We don’t sell your personal information, and we only send marketing emails if you’ve agreed to receive them. You can unsubscribe at any time.

When we manage your Microsoft 365 environment, you remain in control of your data and we act on your instructions. We access it only to provide the services, protect it with appropriate safeguards and don’t use it for any other purpose. Specific terms are in your service agreement.

We share information only where needed: with Microsoft and other providers that help us run our business (such as email, hosting and accounting tools), with professional advisers, or where the law requires it.

Microsoft 365 data is stored in the regions configured for your tenant. Our team may access it remotely from Pakistan or other locations. Where information moves across borders, we take reasonable steps to keep it protected.

We keep enquiry information as long as needed to respond and follow up, and client records for the length of our relationship plus any period required by law. After that, we delete or anonymise it.

We protect information with the measures we recommend to clients: multi-factor authentication, least-privilege access, encrypted devices and monitored accounts. We’ll tell affected clients promptly about any incident that affects their data.

Depending on where you live, you may have the right to access, correct or delete your personal information, object to or restrict how we use it, or ask for a copy. Email us to make a request.

We may update this policy from time to time. The latest version will always be on this page.