Given they schedule travel on your behalf, and don’t actually provide transportation themselves, how would they be able to do this without sharing your information? Not saying what they did is necessarily right but this seems like a legitimate need. Seems like they should have made it clearer from the outset that they would do this though so you were in the know.