Yes, it is common practice to supply personal information to third party services, but this is only legal where you have disclosed this to the users of your site. This should be set out in your Privacy Policy. If you are trading in personal information then you are also required to comply with the Privacy Act 1988 (Cth).