Privacy Policy

We collect personal information only in the context of managing our clients' Microsoft 365 tenants and providing cloud services. The information we collect includes:

• Contact information (name, email address, phone number) provided when you contact us or engage our services
• Business information necessary for service delivery (company name, tenant details)
• Microsoft 365 tenant data that you share with us for management and support purposes
• Communication records (emails, phone calls) related to service delivery

Important: We only process personal information that you explicitly share with us. We do not collect or access data beyond what is necessary to provide our services.

We use your personal information solely for:

• Managing and supporting your Microsoft 365 tenant
• Providing Azure and Microsoft cloud services
• Communicating with you about your services
• Fulfilling our contractual obligations
• Complying with legal and regulatory requirements

We do not use your personal information for marketing, advertising, or any purpose other than service delivery.

We may share your information with:

• Microsoft Corporation: As a Microsoft Cloud Solution Provider (CSP), we work with Microsoft to deliver services. Your data is subject to Microsoft's privacy policies and data processing agreements.
• Service Providers: We may use third-party service providers (hosting, email) who are contractually bound to protect your information.
• Legal Requirements: We may disclose information if required by law or to protect our rights and safety.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We implement appropriate technical and organizational measures to protect your personal information, including:

• Secure access controls and authentication
• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access restrictions to authorized personnel only
• Compliance with Microsoft security standards

As a data subject, you have the right to:

• Access: Request access to your personal information we hold
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal and contractual obligations)
• Objection: Object to processing of your personal information
• Restriction: Request restriction of processing
• Data Portability: Request transfer of your data to another service provider
• Complaint: Lodge a complaint with the Information Regulator of South Africa

We use Microsoft Clarity to understand how visitors use our website (for example, which pages are viewed and how users move through the site). Clarity may use cookies and similar technologies to collect anonymised usage data such as page views, clicks, and session recordings.

Data is processed by Microsoft in accordance with their privacy terms. You can read more at Microsoft's Privacy Statement and Microsoft Clarity.

You can limit tracking in your browser settings (for example, blocking third-party cookies) or use browser extensions that opt out of analytics where available.

When you first visit our website, we ask for your choice via a cookie banner. Your preference is stored in your browser so we do not load analytics unless you accept. You can change your mind at any time using Cookie preferences in the site footer, or by clearing site data for ovation.services in your browser settings.

We retain your personal information only for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements

When personal information is no longer needed, we will securely delete or anonymise it in accordance with our data retention policies.