You may or may not have given that permission. It would be one thing for them to aggregate information and sell it. It would be another for them to sell identifiable information. They would not need any permission to sell aggregated, non-identifiable data, I wouldn't think. That being said, the aggregate data is much more useful to companies, so that's likely what would be sold. I can't for the life of me think of how non-aggregated data would be useful.top that off with the fact that once you have given them permission to data mine your kids, what is to stop them from selling that info to other companies? You have opted in, and given them permission.
Also, I am of the thought that Disney would likely not sell useful aggregated data to their competitors. They'd make full use of it in-house, of course.