The basics
So they can find your records. Don't add more sensitive ID than they ask for.
Your request
Rights and wording vary by place; this cites the most relevant law honestly.
Your request
Sending it:
- Send it to the company's privacy contact — often privacy@ their domain, or a form linked in their privacy policy (look for "Your privacy rights").
- They may need to verify it's really you. Use their official channel; don't email extra sensitive ID unless asked.
- Keep a copy and the date. Many laws require a response within roughly a month (it varies).
- Ignored? You can complain to your data protection authority — e.g. your national DPA (EU), the ICO (UK), the California Privacy Protection Agency / AG, or the Data Protection Board (India).