The company has in place a Group Privacy Policy in which it states the types of personal data it collects and that it allows a user to retrieve a copy of user information collected by the company. However, it does not disclose the types of third parties it shares the data with.