Yeah I really hate that kind of thing. I went into a gas station once, and at the registers it had a tiny little label saying they had CCTV with facial recognition, for crime prevention and “legitimate interest” - the GDPR term that websites always hide and sneak in pre-ticked, even when you think the main points are completely unchecked. There wasn’t even a clear way to opt out either, just a QR code you could scan. I didn’t scan, I’ve avoided that place since.
I also vote for finding a new weed shop, but ideally do tell them your reason why.