So, email information may be compromised, but the web site and survey not? Doesn't that tie in with what they said? I'm trying to understand why you seem to be questioning this??
I know Zoho, it's a well used Company for lots of things, email, CRM etc. Used it myself.