Microsoft 365 Email Privacy Statement
This Privacy Statement describes the ways in which Harvard University gathers and uses personal information about individuals through the Microsoft 365 Email application managed by Harvard University Information Technology (HUIT) and located at outlook.office.com/harvard.edu . In this Privacy Statement “Microsoft 365 Email” refers only to the HUIT-managed Microsoft 365 Email application. Some Harvard Schools and Centers have set up other Microsoft 365 Email applications, to which this Privacy Statement does not apply.
This Privacy Statement applies to all users of the HUIT Microsoft 365 Email application with Microsoft 365 Email user accounts, regardless of relationship to Harvard.
The personal information about users that may be collected by Harvard in connection with providing Microsoft 365 Email includes:
- HUID, name, email address, phone, and campus address
- Faculty/student/staff role and status
Personal information collected by Harvard also includes data related to use of the Microsoft 365 Email application, and identifiers or other information about a user’s Harvard affiliation or status.
Harvard also collects log files of the IP addresses and browsers of computers accessing the application and the pages visited.
University access to content that Harvard users create, transmit and store through Microsoft 365 Email is governed by the University Policy on Access to Electronic Information.
The University has no control over forwarding and sharing of such content by email recipients.
The personal information collected by Harvard in connection with providing Microsoft 365 Email is used to create and enable use of a Harvard Microsoft 365 email account.
Harvard may review users’ IP addresses and the activities they perform using the Microsoft 365 Email platform to administer Microsoft 365 Email and to provide technical support and help diagnose problems. Harvard may use and retain email or other communications to staff in order to process inquiries, respond to requests, and improve services.
Other uses of personal information by Harvard are described in other parts of this Privacy Statement.
Other third-party vendors provide tools and applications that may be integrated with Microsoft 365 Email. Some are contracted for by Harvard and some may be added by individual users. These vendors may have access to user identifiers and other user personal information to enable use of their services.
The Microsoft 365 Email application may also contain links to other websites.
Harvard may also share personal information with other service providers in connection with data uses described in this Privacy Statement.
Other sharing of personal information by Harvard is described in other parts of this Privacy Statement.
In addition, Harvard may share and disclose personal information if Harvard believes that doing so is necessary or appropriate to: satisfy any applicable law, regulation, legal process or governmental request; investigate compliance with or enforce this Privacy Statement or any acceptable use policy for Microsoft 365 Email; detect, prevent or otherwise address fraud, security or technical issues; or protect, defend or enforce the operations, property, rights and safety of users, Harvard, Harvard affiliates, or others.
You can review your Internet browser settings, typically under the sections “Help” or “Internet Options,” to exercise choices you have for certain Cookies or you can opt out of the collection and use of some Cookies through tools like the Network Advertising Initiative opt-out page. If you disable or delete certain Cookies in your settings, you may not be able to use features of our websites.
We may use third party analytics such as Google Analytics or similar analytics services. For information on how Google processes and collects information using Google Analytics, please see www.google.com/policies/privacy/partners/ , and for how to opt out, please see https://tools.google.com/dlpage/gaoptout.
The opt-outs described above may not work for all browsers or devices.
There are security measures in place to help protect against the loss, misuse, and alteration of the personal information under Harvard’s control. No data transmission, processing, sharing or storage by any party can be guaranteed to be completely secure.
Please contact firstname.lastname@example.org with any questions or concerns about this Privacy Statement or the practices of the Microsoft 365 Email application.
If you are located in the European Union, Iceland, Liechtenstein or Norway (the European Economic Area) or the United Kingdom, please see https://gdpr.harvard.edu/eeaprivacydisclosures for Harvard’s Additional EEA Privacy Disclosures.
This Privacy Statement may be amended from time to time. Any such changes will be posted on this page. This Privacy Statement was last updated on September 14, 2021.