Many US retailers do this
It's legal here to monitor communications of law enforcement. I've heard of reports of Home Depot recognizing known shoplifters entering their stores and calling the cops. I can only imagine that they are using facial recognition to sort through the thousands of people entering their stores daily. I haven't read their un-privacy policy, but I suspect it's allowed.
Biting the hand that feeds IT
