I guess this is one of the things that just has to be forbidden by law.
[0] https://www.mastercard.co.uk/en-gb/vision/terms-of-use/commi...
The page is super vague, and the question remains if they can fully anonymise the data, but if they can, it's allowed. Personal data is covered under the GDPR, while anonymous data isn't [0].
[0] https://ico.org.uk/for-organisations/guide-to-data-protectio...
Ok Nat west has Coutts but not just any euro trash millionaire can get an account there