Do you think the ICO will do anything? Usually their answer seems to be "well we told the company about your case, and they said they wouldn't do it again, so everything is fine now; you're welcome!".