How to Build a Customer Data Protection Model That Survives Real-World CX