All the banks sell their data. Its aggregated but thats all you need. You don't care if a specific person went to Chipotle, you're looking for trends.

http://www.businessinsider.com/credit-cards-sell-purchase-da...