Breach of POPI Act

I requested a quote for car insurance on their app, as I already have a policy with them. I indicated that one of the vehicles that I want to insure does not have a tracker. I was then contacted by a tracking company to inform me that they were made aware that my vehicle does not have a tracking device and they would like to offer me one. I asked them how were they made aware, they said 'we have a database'. A database of information coming from Miway, clearly. This was only quote I requested. Did I authorise miway to give out my vehicle information? I did not take the vehicle insurance nor did I sign anything to give consent to this nor did I verbally give consent. Did they give out my address too? My ID number? This is a breach of the popi act. They cannot be trusted with your information.