Are the police/government allowed to intercept internet sales? (UK)?

Lets say for instance that I bought some questionable (legal, but still questionable) items online. The company who I buy them from is VAT registered and sells a wide range of products. Are the government allowed to demand a list of every single name and address that bought *PRODUCT* so that they can be added to a watch list to be *randomly* targeted at a later date?