POPI violation

I was utterly shocked when I was at a Woolworths store in N1 City. So I returned items (school shoes and a dress) I bought this some time ago and because they never had stock of the sizes I just thought I would wait to exchange, anyway I went to the store and finally returned my items no longer having the receipt but happy for them to put it on a gift card ****ill they get stock of the sizes I want to repurchase) the cashier that was helping me then asked my bank card and I happily handed it over to her she typed in my last 4 digits and tella me what I "purchased" at Woolworths, burgers fish fingers etc which by the way is not even accurate because I never bought those items and that at a Tygervally store. I last used my card at Woolworths in Saldanah bay keep in mind not even buying food items. So now 101 things go through my mind had someone created ***** on my bank card? Then my husband said try his bank card once again she puts the 4 didgits and it pops up that he bought shoes of 799 and a jacket etc Shocked because we never bought those items. Anyway this was now a whole POPI situation to me because firstly she nevwr told me why she needs my bank card, secondly who gave her the right to put my card digits and see my activities on my account? No I was highly annoyed and reported this to the manager. Woolworths needs to train their staff of the popi act or it will land them in so much trouble.