The Data Retention Sketch

Help me sketch a data retention policy: [WHAT USER DATA WE COLLECT, WHERE IT LIVES, OUR INDUSTRY, WHETHER WE HAVE ENTERPRISE CUSTOMERS OR EU USERS]. Draft the skeleton: the data categories, a defensible retention period for each with the reason (legal requirement, business need, or user expectation), what deletion actually means per system (backups count), and the request process when a user asks for their data or its deletion. Keep it to one page a real company could follow. This is a working sketch - flag where counsel must confirm periods for our jurisdiction and industry before anything ships.