If someone pays by credit card for an online order, do vendors normally disclose the customer's email address to the bank (who might then share it with the credit bureaus)? I think my credit report only shows email addresses that I've directly given to banks.