Assuming you don’t live in California, and can’t follow through on your threats, you’re better off using GDPR - it’s got more teeth.

Also feel free to harass them on whatever public forum works for you and contact their exec via LinkedIn.