Do companies usually disclose that they're collecting information when they're already, well, collecting it?

But if they weren't going to use it, they would disclose that, and they do: "information supplied here will not be retained or used for any purposes outside of delivering your card"