PCI compliance requires, among other things, that a credit card not be used to correlate purchases through time - that’s the main reason loyalty clubs exist; that’s your tracking identifier.

Whether or not this Requirement is observed, audited or enforced I have no idea.