The notice states that the company will share customer data with its advertising partners only where the customer has given consent. However, that consent is recorded automatically when an account is created, because the sharing preference is switched on by default. A customer may withdraw consent at any time, although the notice adds that data already transferred to partners cannot be recalled. The withdrawal setting itself sits in a sub-menu, reached separately from the main account page, which the notice does not signpost when an account is opened.
Which option best states the main point of the passage?