This is a weird thread. I can't figure out how an agent at British Airways knowing what British Airways flights you search for on the British Airways website is surprising or upsetting? Why anyone would expect to have to 'authorise retention' for information related to the very product the company provides, i.e. travel?
You are searching for travel on a company that provides travel but you don't like the company knowing where you might like to travel