The entire premise of my question is that data is kept private between the two parties (the website owner and the visitor). I don't see how this connects with that at all.

And how do you even get someone's mail address without an extensive internet-wide profile (which, again, isn't what the premise of my question was in the first place)?