In reply to Tyler:
> I've listened to the taped(?!) conversation
Well if your son didn't give express permission for that to be shared with you, you (erm, he) could always go after the firm for a violation of the Data Protection Act 1998...
Further, in your OP you stated the text below. If your adult son hadn't authorised them to speak with you, then this is a clear violation of the DPA 1998
> but according to the person I spoke to from the training company my son "asked" for the materials to be sent out.
Think about it - would to use want a private conversation between you and a company to be disclosed to an unverified third party claiming to be your father? These laws exist for a reason. My understanding is that if your son hadn't given them permission to speak to you, their simply admitting to having done business with your son could be a violation of the DPA 1998.
This obviously changes if he has authorised them to speak with you...!
You might advise your son to contact his credit card firm to enquiry about options - unlikely to help but at worst they do nothing.
You might consider if it's worth reporting the firm's advertising to the Advertising Standards Authority. It won't get your son's money back, but it might be the right thing to do.
Post edited at 00:08