As of May 25, 2018, a new law is in effect in the EU called GDPR. You can read more about this regulation here. This essentially extends the protections on personal data for individuals in the EU, and as part of this individuals can request that businesses remove that data from their systems.
Should you hear from a customer in the EU with a request to remove their data, you will need to notify Craftsy of this by contacting our customer support team. You will also need to take action to comply with that request in regards to your own records. Craftsy cannot provide legal guidance on how to handle these requests, and it is recommended that you seek outside counsel regarding this regulation.