Anonymize and flag records on user deletion requests

Your records keep PII after a deletion flag, forcing manual redaction. It anonymizes entries, flags them, and sends confirmation so privacy officers can close requests same day.