What happened when a coffee shop asked customers to pay for food and drinks with personal data