A member would be interested to know, under GDPR, what retention periods do you set for former and current tenancy data?

In particular for the purpose of confirming Right to Acquire eligibility discounts for both your own tenants and requests from other providers.