Happens with most services.

I’m sure that one boutique website you shopped on had buried in the T&C that they can sell your data.