It depends on the data privacy regulations/legislation where you live & the enforcement options available to you accordingly. In some places if a company sells your data without your consent you could report them and demand compensation for damages - but thats usually done in class action suits.