Sites have their privacy policies (has anyone ever read one of them?)
Web sites that store and use data have sets of rules and permissions on how to use and disclose the data, as detailed in their privacy policy.