The retailer changes what it can do with customer data after privacy concerns were raised.