VARA became aware in February that OPNX was soliciting customers for its platform and collecting personal data