I do get an email from Paypal that has the user name and address
but from what I understand, since they are gathering that info initially, Paypal are the ones who have to make sure they have that customer personal information secure
its not up to me to make sure that they are adhering to the rules…from what I understand
?