If you are in the UK you should complain to the ICO: http://www.ico.gov.uk/complaints/data_protection.aspx