Just an update: I launched a small claims court action against Datatonomy because they sold my email address without permission as well, and they settled for the full amount (500GBP). The ICO didn’t do anything as they say they can’t take action against everyone, so it’s really up to individuals to take action.