As for web sites, SSL is there, but what any company does with the information it collects is totally between them and the visitor.
Proxy servers are also available.
As for an ISP, in the daily course of business we may need review logs in order to pursue issues. During log examinations anybody's activity may be evident to the staff member. That is a fact of life. A good UA should probably reflect this information. Maybe an employees should sign a privacy statement not to divulge private information.