Yeah of course, but not allowing deletion as a standard seems sketchy at best. Revoking access doesn’t stop personal data being stored on these servers. No lawyer but seems to be a breach of GDPR to me.