And it makes sense to me that a business would leverage that data in ways to benefit themselves.
Big fat nope on that one. This is exactly what the GDPR is about. I’m giving you my data for a specific purpose, and unless I tell you otherwise, you have no fucking business using that data for anything else. Gonna be interesting to see how this one plays out in the EU.
Iirc,mass effect lets you buy anything you miss in a store later, at least