Irreversibly nulls every identifying field on a contact while keeping the row (and its FKs from invoices, orders, etc.) intact. Blocks with HTTP 409 if the contact still has any order in a non-terminal status (new / processing) — the operator must finalise or storno them first so fulfilment is not left without a delivery address. Deletes secondary e-mails, addresses, bank accounts, custom fields, attributes, meta, ARES company records, and password history. Invalidates active sessions. Preserves accounting data: invoices carry an immutable customerSnapshot so historical bookkeeping survives the wipe.