It depends on the business, but in general I give a supplier my information so that they can supply me with the goods I request; inform me about that process; and invoice me.

Using that information for other reasons without informing me is a clear, unambiguous, invasion of my privacy. It's probably not legal in the UK.

Tl:dr yes, it's creepy. Especially in the context of a game dev.