Log each request in the request register on Data & privacy, so its deadline is tracked. From the candidate's profile you can export everything held about them, or delete every record of them.
When someone asks to be erased, choose to stop them being added back: a later application or import with their email or phone is refused.