Perhaps a compromise would be a routine that deletes marked fields after a certain amount of time. That time would be designated by the admin (possibly make it an option that can be turned off to maintain data forever and ever). Yes, data integrity would be compromised afterwards, however, if they backed up their orders ahead of time to pdf or excel, that would give reference. Just a thought going forward maybe.