"We may provide your personal data and the data generated by cookies and the aggregate information to the vendors and service agencies that we may engage to assist us in providing you with the Vivo Miles service".
Some suppliers do use third parties and it's not wholly unexpected. However they seem a bit tighter on it (ParentPay for example specifically acknowledges they use a third party hosting company but they are quite specific in saying the hosting company has no access to the data). That clause for the Vivo service just says they can share it with anyone for any purpose they think is OK in providing their business (which might be hosting, but might equally well be marketing).
Am I being my usual paranoid self or would this ring alarm bells for anyone else?