How do I handle a right-to-be-forgotten request?

Delete the customer from their profile or from the customer list. Their orders are retained for financial records, but all their personal information is marked deleted and anonymised.