I buy a lot of stuff from AliExpress, eBay and Alibaba, it goes without saying you should use a separate email address for those. My email was not only sold, I started getting malware themed links shared to me as Google Drive files. The moment you click on it (and I did from another test env.) - it straight up runs some clever JS and then downloads a DMG or EXE file which is clearly spyware (multiple flags from AV providers) in the exact name of the Google document.
I have also received pornographic images with embedded code which somehow seems to run JS code when you open them. In short, they try to con you once they know you're a frequent buyer. Oh, and they also WhatsApp me directly with lot of links to porno-like malware or actual malware directly from new numbers every week. I had to stop using my WhatsApp after all this happened.
But, it is what it is and I have learned to move on.