You may or may not have given that permission. It would be one thing for them to aggregate information and sell it. It would be another for them to sell identifiable information. They would not need any permission to sell aggregated, non-identifiable data, I wouldn't think. That being said, the aggregate data is much more useful to companies, so that's likely what would be sold. I can't for the life of me think of how non-aggregated data would be useful. Also, I am of the thought that Disney would likely not sell useful aggregated data to their competitors. They'd make full use of it in-house, of course.