Personal data must be kept for no longer than necessary.
We have a corporate retention schedule and retain information processed for the purposes of law enforcement in accordance with the retention schedule unless there is a legitimate reason to retain it for longer.