[kelnos]

I don't think "need" matters here. They have a record of a transaction, and they want to keep that record. I don't think I have a right to demand that they delete that data.

The GDPR/CCPA/etc. likely has different requirements here, and probably requires deletion after they're no longer needed (for tax purposes or whatever).

But I personally have financial records going back decades, so I can't fault a company for wanting to do the same thing.