WooCommerce collects sensitive information without consent