I’m guessing you’re talking about debit cards. From the Canadian Government: yes.
In detail:
Payment terminals can also be built to feed into a retailer’s “customer relationship management” database so that a retailer can track your purchases and tie those to other information about you, such as your email address, if you have given it to them. Financial institutions and payment card network operators could also profile you based on your purchase information.
This purchase information could potentially be shared and linked with information held by loyalty card companies, data brokers, or marketers.
If it’s possible, then it’s a revenue stream, so I assume it’d be done.