Once per calendar year the customer has the right to request that the business provide a list of companies with which it shares the personal information for the third parties’ or affiliates’ direct marketing purposes, and a list of the categories of personal information that the business shares.