I've re-read the privacy policy and it states what they do to protect you but nothing really about them having to notify you. I think I'll send them an email and ask about it.

Thank you for your guidance in this.