Erase a customer's personal data (GDPR)
IRREVERSIBLY anonymizes one customer in place for a GDPR erasure request: the name becomes a placeholder, every contact field is cleared and marketing consent is withdrawn. The record and its id SURVIVE so past sales stay resolvable, and the loyalty ledger is untouched. Idempotent, and audited with the acting actor. Only call this on an explicit, verified erasure request — never to ‘clean up’ data. 404s for an unknown id.
Authorizations
Authorization: Bearer <token>. Accepts EITHER a Keycloak access token (scopes-in-token) OR an opaque POS session token; both resolve to the same pos.* scope vocabulary the route guards enforce.
Path Parameters
1Response
The anonymized customer: PII scrubbed, id and loyalty ledger preserved.
The anonymized customer: PII scrubbed, id and loyalty ledger preserved.
1110 <= x <= 9007199254740991x >= 00 <= x <= 9007199254740991^(?!\.)(?!.*\.\.)([A-Za-z0-9_'+\-\.]*)[A-Za-z0-9_+-]@([A-Za-z0-9][A-Za-z0-9\-]*\.)+[A-Za-z]{2,}$
