These types of companies usually have a place where you can request to receive all of the data they have on you.

For example, google

companies will typically have something in their TOS or privacy policies that has an email or a link.

I’m not sure about all this “purchasing of data” yak.