First Manufacturing Co. selling customer email addresses in violation of its own privacy policy

Today I sent this email to orders@firstmfg.com, the customer support email address for First Manufacturing Co., which sells motorcycle riding gear, most notably vests and jackets: Today I received marketing spam from info@leathernewyork.com. The email address to which the spam was sent, [elided], which is also the address from which I am writing to you, is a unique, privacy-protecting email address which was only ever given to First Manufacturing Company, specifically when I placed orders through your website in March 2025. I have reviewed your privacy policy and it discloses nothing about you sharing customer email addresses with third parties so they can send me spam. I wonder, then, if you can please explain to me how leathernewyork.com got this email address, and how this could possibly be OK. Thank you, Jonathan Kamens Literally one minute later, I received this reply: Hi Jonathan, We are sorry for the concern this caused. We understand why receiving marketing email at an address…