If you "read" an average retail company's "privacy policy", it is my non-legal opinion that they can do what they want with your information. For example ignore "do not track settings" as well as referring, selling, marketing you in any manner they want.
i.e.
https://kb.newegg.com/knowledge-base/privacy-policy/