General Discussion

Residents of Europe and at least California can use what are called Data Subject Requests to demand any company provide all the information that company knows about them.
The 2015 european law GDPR, and the California Consumer Privacy Act (and subsequent laws) created some protections.
(There is a requirement that the business have more than 50,000 Californian's information)
All websites collecting information about California residents are required to have a prominent explanation of the Data Subject Request request procedure.
Complaints can be lodged here: https://oag.ca.gov/contact/consumer-complaint-against-business-or-company

https://cppa.ca.gov/regulations/consumer_privacy_act.html