[crazygringo]

They have your name too. From what I understand, the tracking is generally done via something like the hash of the card number though. I've never heard of any legal or compliance issues with that, since the card number itself is not stored.

[butterknife]

Submitted a Subject Access Request to McDonald's here in the UK. I'll update here on progress.