Well, within reason. You need a policy that allows this to happen, but, for example, it can't just reach into 3 months' worth of PIT database backups. But you can say "we will delete your user now, and your data will roll out of our backups after 3 months." That's reasonable while still delivering the main objective: companies can't keep your (identifiable) data forever.