Every member renewing in the next seven days. The run is approved for billing only if each one has consent on file with its proof, has had a renewal reminder in the last year, and can cancel the same way they signed up. Holdover charges nobody; it hands the approved list to whoever does.
A member is the reference your site gives them — never a name, an email address or a card. The consent is the date they gave it, how, which version of the renewal terms they saw, and where the proof is kept.
Each member is owed a reminder at least once a year saying how often they are charged, how much, and how to cancel. Holdover does not send email; it tells you who is due and records the day it went.
A member's record — with its proof of consent — can be deleted only once three years have passed since the consent and a year has passed since the contract ended.