In what way? A business can refuse to service any individual as long as it’s not a direct violation of things like civil rights laws.
Again, this is not discrimination if it’s done for specific individuals, even if it’s done using data collected in aggregate. Banning a protected group wouldn’t be illegal. But banning a specific person would not.
Whether it’s legal to sell that same data as a list of undesirables is the open untested question.