We've been in touch with the company in question. My understanding is that they have agreed to remove that particular aspect of their privacy policy. We're also investigating other issues with respect to that organization. On that specific point, my understanding is that they have agreed to withdraw that part.
On May 1st, 2018. See this statement in context.