In a high-stakes paradox for retailers, customers are demanding deep personalisation, yet they punish brands that they perceive as violating their privacy.