As for what data is collected, that's pretty much anything you enter in a field on my website. Your name, email address, message, and that subject line on the Contact form. I don't plan to do anything with it other than contact you. I've had my data sold and it's not fun. I've also been on ignorant websites that are nationally known, but act like they picked their IT staff off an assembly line because they don't know a thing about security.
Although my website may or may not show it, it was created using Wix.com. Whether they're collecting data through my website, I don't know. You have to see their policy on data collection, if you're curious.