Thats the reason I VPN out of the UK, I simply dont trust random websites with my sensitive data. All laws can tell them to protect it, their company policy can tell them to protect it, every employee can truly believe in data protection, and I still wont trust them. They WILL lose or sell your data