Our understanding (I work at an agency) is that you must keep the data that you is part of a contractual agreement. Purchase histories are a typical example of data you may not wipe.