Archive, export or anonymise a customer

Three actions look similar but do very different things. Pick the one that matches the request in front of you.

Delete and restore

Delete on a customer's row, or in the row actions, deactivates the record. The dialog says the customer will be deactivated. They disappear from the Active tab and appear under Archived, with everything intact. Press restore there to bring them back.

Use this for a guest you do not expect again, or for a record created by mistake.

Export data

Export data in the profile's actions menu downloads the customer's record as an Excel spreadsheet. It covers personal details, address, dive profile, health and gear, and waivers, but not bookings, courses or rentals. This is what you hand over when a customer asks what data you hold about them. There is no import in the other direction: customers arrive through your own dialog, the registration link or the booking page, not from a CSV or Excel file.

GDPR delete

GDPR delete in the same menu opens the dialog GDPR deletion - anonymise customer. It permanently erases the personal data: name, email, phone, date of birth, sex, nationality, address, passport number, medical notes and dietary requirements, plus the IP address and device recorded on every waiver signature. Bookings and waiver records are kept for audit purposes, under the name "Anonymised User". Confirm with Anonymise permanently.

Use this when a customer asks to be erased. It cannot be undone, and the customer no longer appears under Active or Archived. To erase an archived customer, restore them first.

Note: Certifications, dive counts, gear sizes, uploaded waiver files, and the name, signature and medical answers on signed waivers are not removed by an anonymisation. Notifications in the bell that name the customer keep showing their original name until they are removed, 30 days after they were read and in any case 90 days after they were posted.

Which one when