SCENARIO

Please use the following to answer the next question:

Recently, a boutique fashion company headquartered in California, US needed to fill a very large online order from one of their best customers located in France. The boutique did not have all the items needed to complete the order, so they asked one of their partners located in Canada to help fulfill the order. To save time, the boutique had the items shipped directly from the Canadian partner’s store to the customer’s home address. The partner sent SMS messages to provide the customer with direct shipping updates.

The merchandise arrived to the customer and they were happy with the experience. However, soon after, the customer contacted the boutique to complain that they had been receiving telemarketing calls and emails from other fashion boutiques and stores.

What should the boutique have done to properly handle and govern the customer’s personal information?