Here is the email I received, along with my response:
"Daar [Blank] -
Thank you for bringing this most unfortunate incident to our attention.
As soon as you made us aware of the situation we fully researched it and discovered that your information was not compromised in anyway.
We are taking steps to rectify the matter. Rest assured that all those who were affected by it have been contacted.
Thank you once again!
We wish you the happiest of Holidays!
All our very best,
Ann & The Savvy Team"
...and my email...
"To whom it may concern at Savvy,
I find it absurd that you believe my "information was not compromised in anyway." I consider it a MAJOR breach of privacy when my personal information is released via email to strangers, and I'm sorry you do not. This event was completely unavoidable, but Savvy and its employees have portrayed a sense of apathy for their customers' security and privacy. Perhaps you should consider revising your privacy policy in conjunction with your behavior.
I'm interested in hearing how Savvy Co. plans to "rectify the matter."
So you know, I have contacted the Better Business Bureau of New York and Schifter & Partners to report Savvy Co.'s negligence.
Happy Holidays!"