I don't really see the big deal. All it shows is a first name and a state. I don't think you could match that to anyone at all. They could be making it up for all we know to give off the impression that people are purchasing certain items, ie marketing ploy to try move slow moving stock.
However, I did notice this in their
Privacy Policy:
How do you get my consent?
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.
So according to their own policy they should be asking for our consent to display this information.