[murg]

As meera pointed out above, Australia has very, very strict privacy laws.

Since I never specifically gave Collins my email address, they shouldn't have it. Nor have I given Collins specific permission to send me emails.

And how can not passing back customer information lead to fraud, unless it is being done by the store that did the transaction? The only fraud could be the non-payment of owed monies. Collins could have passed up a identification token for me to Kobobooks.com, and gotten that token back in a sales report, without my email address being included.