The popular retail chain is accused of collecting and storing customer data without consent, potentially violating the law.