[wongarsu]

Even for GDPR stuff you can delay the hard delete for a day or so, which should give the user some time to notice and correct a mistake.