Protonmail provides privacy features such as creating alias, verifying the link before receiving, and better filters for messages, so purchasing the paid service and using alias for each service will provide you with a good solution.
To my knowledge Trezor only holds onto customer ordering info for up to 30 or 90 days I can't remember which. I am curious to see what happens to their reputation if anything as a result of this hack. It appears that it was largely outside of their control seeing as one of their third party vendors was hacked and they were not directly hacked.
It is useless when your data may be shared with third parties. These third parties may have a different privacy policy and may keep your data for years, and there is no provision that requires Trezor to contact the third parties to delete your data within 90 days.