‘… but contrary to what a regular person may think (that this level of data gathering is unusual), privacy experts know that it’s not, it is standard practice’