If they violate their own privacy policy do I have legal recourse?
And is it even possible to write a privacy policy without loopholes?