> We also delete the credit card and email from Stripe (our payment provider).

The email isn't actually deleted - Stripe's logs will permanently hold that data. If you don't want to retain the email address, you'll need to send receipts etc yourself.