At several places I've seen they keep certain data such as phone, address, etc as a bullshit "business need" to "prevent abuse" and "prevent promo reuse" and keep forever even through CCPA.
Also they keep the record of the delete request, which contains the PII you ask to remove.
Also they keep the record of the delete request, which contains the PII you ask to remove.