Yes, most online shops that I have an account with seems to do GDPR compliance correctly by simply adjusting their contract they have with the customer. In order to do the service which I customer has bought and send an item to a location they need the shipping location, so they changed the contract to say "we are storing the location for the purpose of sending you the item you bought". They can't go and sell that information to a third-party, but they can store it for the purpose that I as a customer requested of them.