Some of the language there indicates that's primarily with the US in mind, which it probably is indeed. I think Sweden's different. I've read the data usage pol

Some of the language there indicates that's primarily with the US in mind, which it probably is indeed. I think Sweden's different. I've read the data usage policy of my local grocery store chains (those are quite detailed thanks to GDPR), and they indicate that no such data is shared unless I'm in a loyalty program. Joining their loyalty program counts as consent for a lot of data manipulation, but as long as I'm just purchasing goods, they're not allowed to collect or store any personally identifiable information. Also worth noting that bank privacy is protected by law, and it's a criminal offense for the bank to violate that by, for instance, telling a marketing company where I shop. While not perfect, I'm fairly comfortable with this level of legal protection for my data.