Any information given out without the permission of the individual is a violation of the privacy act. Anyone associated with a business or organization knows this. Giving out an email address definitely falls in this category. Definitely contact corporate level. You have contacted them on the local level and they have chosen to ignore you, its time to take it to the next level.