All I can say is as a UK resident I feel like UK data protection laws should protect me from a company like this no matter where they are based.