Most of our clients tend to opt for a 90 day period. But this is flexible to suit your organisation and your GDPR requirements.