While the company has a publicly available privacy statement in relation to the collection, sharing and access to personal data, it is not clear that it includes all personal data and is not limited to website related data only.