Did you hear back from the ICO about your complaints? datatonomy also sold my data to other companies, claiming it was "opt in" when it wasn't. Interestingly they claim on their website that they guarantee PECR compliance.