GDPR compliance?

That said, I REALLY don’t like the idea of my clients being able to delete any record of our interactions, and I am not sure how the new law applies here. Does it mean we simply archive their data in some zip file offline and inaccessible via any web interface (as opposed to deleting it entirely)?