The rapid advancement of technology gave rise to internet privacy which has become a growing concern globally. The personal data of online users are considered “new oil” to the bad guys. This article is centered around how internet users’ personal data has been trickly collected and what it is been used for. The study explores website methods for user information collection, addressing social engineering and privacy concerns using the I-E human weakness framework, and UK legislation. This article aims at providing a thorough analysis of websites used to get user’s data, understand the privacy implications, and assess how well the current legislative frameworks reduce the risk to the protection of personal data. Social engineering exploits internet users’ weaknesses, posing a threat to personal data safety, technology, economy, society, and ethics. It results in financial losses, weakens public confidence, and raises ethical questions about privacy abuse.