Whenever a company says "we value your privacy" or "we will never pass your details onto third parties", there is always the implied, and sometimes expressly stated exception for "government and regulatory authorities as required by law" as has been revealed recently with regard to cloud service providers.
When companies or government agencies ask personal questions, if they really want truthful responses, there should be some line in the sand that sets a non-negotiable barrier against compulsion by the state to reveal the personal information.