I have never received any promotional mail and have ordered more times than I can count.
I am very confident that EF does not sell or distribute personal information. I also have never received anything directly from EF in the mail unless I ordered it.
You may want to have your friend check their computer for adware/spyware. Some companies track what you buy or look at then sell your info.