Comment by louthy

In the UK and EU it would be outright illegal on GDPR grounds (unless you consented to it, which would be unlikely without coercion — also illegal)