---
title: "Scrubbing a customer's data"
description: "Anonymise a customer who has asked to be erased, and understand exactly what is removed and what stays."
---

> Documentation Index
> Fetch the complete documentation index at: http://localhost:4321/llms.txt
> Use this file to discover all available pages before exploring further.

# Scrubbing a customer's data

> **Administrators only**
>
> This part of the portal is only visible to people with the **Administrator** role. If you can't see it in your menu, ask an administrator. See [Roles and permissions](/reference/roles-and-permissions).

**Compliance > Scrub Data** anonymises a customer, so nothing that identifies them remains in your system.

> **This cannot be undone**
>
> Once scrubbed, a customer's details are gone for good. Consider exporting their data from [Subject access request](/compliance/subject-access-requests) first.

## Scrub a customer

1. **Search by email address**

   Enter the customer's email and choose **Search**.
2. **Read the preview**

   The page lists what will be anonymised and counts each kind of record. Nothing has changed yet.
3. **Read any warnings**

   A red box appears if there are **upcoming bookings**, **still-valid season passes**, or **paid orders not yet posted**. See below.
4. **Choose Anonymise customer**

   You're asked to **type the customer's email address** to confirm. If it doesn't match, nothing is changed.

## What is anonymised

- Their name, email address, phone number, saved children and waiver signature.
- The rider names on bookings they made, and their own name on bookings others made.
- Season passes and shop orders no longer show who they belong to, and **delivery addresses are erased**.
- Voucher uses no longer show who used them.
- Their address is **erased from any connected marketing tool**.

## What stays

Bookings, passes and orders **remain, without anything that identifies the person**, so your accounts still add up. Payment records held by **Stripe aren't changed** from here: they're kept for as long as the law requires.

If the same person books again later, they start as a **new customer**.

## Check before you continue

> **The warnings matter**
>
> - **Upcoming bookings** lose their rider names, so you won't know who is coming.
> - **Still-valid season passes** are no longer connected to a named person.
> - **Paid orders not yet posted** lose their delivery address, so you can't send them. Dispatch or refund those first.

Where you can, wait until upcoming bookings have passed, or cancel or refund them first.

## Afterwards

The confirmation lists how many bookings, rider entries, orders, passes and voucher uses were anonymised, and which marketing tools had the customer erased. An anonymised customer's page can't be edited.

Source: http://localhost:4321/compliance/scrub-data/index.mdx