I assume the Facebook message is through a Facebook bot running embedded on the website. It won't automatically collect your data until you interact with it and that falls under the Facebook privacy policy since the individual site doesn't have access to anything more than your Facebook name and public profile picture.
(One for Amazon sharing the address, one for the seller sending the unsolicited card, once more for the Facebook message without data collection consent.)