You are assuming it is Visa or MasterCard selling transaction information but that seems unlikely (beyond aggregate, non-identifiable data).

It's far more likely that the Gap is uploading your itemized receipt data to advertising networks (complete w/ that email address they always ask you for and your CC info) under the guise of improving their own retargeting.