If they’re passing on my own address and payment details, are they _actually_ selling something they bought?

Using an agent of some sort to figure out where to put how to pass the payment information seems more than a little irresponsible too, maybe illegally so.