'What really got my alarm bells ringing is this sentence under the privacy policy heading: "We may also share your information with other public and private sector organisations in the UK and overseas."'