Skip to main content
Independent retail operators often receive questions from shoppers about what information is kept on file and how to delete it. This guide explains how to handle customer privacy requests and preserve records when a legal hold or dispute is active.

​
Handling customer data deletion requests

Under state and regional privacy regulations (including CCPA/CPRA and GDPR), customers have the right to request access to or deletion of their personal records.

​
Step 1: Verify the requester’s identity safely

Before modifying or removing store records, make sure the person making the request is actually the customer:
  • Ask for the customer name, alias, or phone number currently saved in your register.
  • Verify a past purchase date, general product category, or receipt total.
  • Do not collect new sensitive records (such as driver’s licenses, social security numbers, or payment card details) just to verify a routine retail request.

​
Step 2: Check for open balances or active transactions

In DRX, automated retention cleanup will not delete customer profiles that have an active positive credit balance or an unresolved balance due.
  • Open Customers and search for the customer’s alias or phone number.
  • Review their open balance. If money is still owed or store credit remains, resolve the balance with the customer before removing the profile.

​
Step 3: Remove personal identifiers

Once verified and balances are settled:
  1. Open the customer profile in Customers.
  2. Select Edit Customer.
  3. Clear optional contact fields, including phone numbers, emails, and delivery street addresses.
  4. If you want to keep the account line for internal tracking, you can update the customer name to a generic label or alias.
  5. Save the customer record.

​
Step 4: What is deleted versus what is retained

When a customer profile is cleared or deleted:
  • Permanently deleted: Customer names, phone numbers, delivery addresses, and personal notes are purged from active store records.
  • Retained for lawful accounting: Completed sales receipts, itemized quantities sold, tax collected, and payment tender totals remain in your register history. Tax authorities require businesses to retain sales transaction records for statutory audit periods. These retained records do not contain marketing contact details.
A legal hold is an administrative freeze placed on business records when a legal dispute, regulatory inquiry, or court proceeding arises. When a legal hold is in place, you must preserve responsive records and suspend standard deletion routines.
  • A customer or former staff member threatens formal litigation or arbitration.
  • Your store receives a written dispute regarding a major transaction or chargeback.
  • You receive a formal regulatory notice, inspection demand, or subpoena.

​
How to preserve records during a hold

  1. Identify the affected accounts: Locate the customer profiles, transaction dates, or staff member records related to the dispute.
  2. Suspend retention cleanup: Store administrators must temporarily disable retention cleanup under Settings → Privacy Protocol Dashboard or coordinate with legal counsel to suspend purging routines while the matter remains active.
  3. Preserve register exports: If you download monthly sales reports, inventory logs, or register summaries, store those files in a secure, backed-up folder. Do not overwrite or delete saved report files during an active dispute.
  4. Notify your management crew: Make sure supervisors and cashiers know not to alter or delete notes on the affected accounts until the dispute is formally resolved.

​
Handling in-person regulatory or law enforcement visits

If an inspector, regulatory investigator, or police officer visits your retail store requesting customer purchase records:
  1. Remain calm and professional: Ask for their official credentials (agency identification badge and business card).
  2. Request formal paperwork: Inquire whether they are conducting a routine store inspection or serving a formal written warrant, court order, or subpoena.
  3. Do not hand over raw register devices: Point-of-sale registers contain records for all of your store’s shoppers. You should not hand over register credentials or allow browsing through unrelated customer accounts.
  4. Notify ownership and legal counsel: Contact the store owner, business manager, or your store’s attorney immediately. For software or account guidance, contact DRX support.