@seb_tmg @bartholin deleting a customer's data is different than "deleting all of their transactions".

Unless a customer elects to have their "purchases" wiped out, they should NEVER be deleted.

No customer will opt-in, I guarantee that.

If you want to take security seriously, deactivate their account and require them to contact you to re-instate it.

Don't delete the records permanently.