There are posts here on Reddit that some residents from Portugal who ordered from nectarleaf received some weird mails because they ordered to Portugal. But most probably there was a breach of personal data from this vendor