No, it’s not at all legal for the company to do this. Reply and remind them they have one calendar month to comply from the date of your original request, otherwise you will make a complaint to which ever information regulator is correct for the juridiction they’re operating in.

I’m a lawyer specialising in Data Privacy, reply here if you need more help on this one.

Also feel free to name the company.

I think I said them didn’t I, after terrorists?

I agreed that they should definitely fuck off, but this will be pushed y the security services. A change of government won’t change the drive for this sort of bollocks.

“Oh but what about the criminals, terrorists and pedos?”

What about all the people that aren’t that who loose their privacy?

Getting strong “Uncle Fediverse needs you!” Vibes