– photo and position stay with the provider.
Every change is logged (who, when, before → after). The provider is notified and can undo it within 48 hours.