Yeap. And the US laws are such that once your details are known to a company in the US jurisdiction, you have basically no rights or recourse for what they can

Yeap. And the US laws are such that once your details are known to a company in the US jurisdiction, you have basically no rights or recourse for what they can do with your details (ie sell them). I only know this as a friend is in law school researching & writing papers in this area. (IANAL.)