You don't have to send the customer's name, etc. Perhaps can obfuscate some of the data before you send it, too, which might involve sending data to other models.