A subject access request will require any company to turn over data it has collected on you, and it's pretty simple to do.