We will hold your personal data on XXX’s systems for as long as is necessary to fulfil the purpose for which it was collected or to comply with legal, regulatory or internal policy requirements.

<<Organisation Name>> will delete or destroy it from it’s systems and records, or take steps to securely archive it while protecting your identity and privacy rights as the case may be.