Yes, that's why Marks & Spencer in the UK operate the scheme and share the system with other major retailers in the UK. They are able to use the UK prevention and detection of crime exception to avoid data protection laws.
I presume that's who Store-Mart are, but there are others doing similar stuff.