I found this on the JcP website....clearly stating they share information to outside companies.
"If you prefer that we:
•NOT share information about you with any of the companies outside the jcp family that we have authorized to contact you regarding their products or services, or
•NOT share your jcpenney credit account history information with affiliated companies within the jcp family
Please let us know by:
•writing to us at J. C. Penney Corporation, Inc., P.O. Box 10001, Dallas, TX 75301-7311, Attention: Corporate Customer Relations,
•calling us at 1.800.322.1189
•email us at firstname.lastname@example.org"