Personal and financial data is being traded on a "huge scale" - and sometimes illegally - according to an investigation by Which?