Privacy expert calls Ontario Cannabis Store’s sale of postal code data ‘appalling