You may want to check local regulations — if there’s a legal requirement to delete the data, I’d try to take advantage of that.

On a related note, I cannot recommend Immich enough! I had previously used other self hosted solutions but Immich is just fantastic — great desktop and mobile, awesome locally run ML, great shared link support, an overall awesome experience. (I’m not affiliated at all. Bit of a “gateway drug” to self hosting…)