I recall a particular Canadian Tire store which once kept a clipboard in the ammunition display case. In it every sale was recorded, and every ammunition customers' personal information (including name, DOB, PAL#, address, the date of sale, and a description of what had been purchased). It was behind glass, in plain view of everyone, and visible to all. At the time, I complained to the staff member (about my privacy concerns), but I received no remedy, and I left the store that day with the knowledge that my personal information was now lying out, on a clipboard, in the public domain.
That was many years ago. That store doesn't do that anymore. They don't copy your information in a paper form (although they might retain something electronically, IDK), and there's no mention of records.