Sure, they're encrypted with a key that they have.

They have complete access to the data.