A retailer needs to honor GDPR right-to-erasure requests across B2C Commerce, Marketing Cloud, and Service Cloud. What OOTB privacy features exist in each platform, and when would a custom orchestration layer be required?