Probably stored indefinitely. Imagine 30 years from now, a company being able to go back and check on the current president's ride history when he was in his 20s.
Not just a company, the current state of things is every private company database will be hacked and leaked and available to the general public.
Treat all data you give to someone else as public data now and use fake info where ever possible.