Earlier quoted context omitted.
Can you show us the exact document you received ? I very much doubt it happened the way you describe it, you're probably omitting very important details
I’d believe it. Apparently you can’t use any 3rd party service that might expose merely an IP address thru a network request directly from the client. A map widget would do that.
In which case the detail OP ommited would be that they did not in fact ask for consent