"that all data we collect is “personal data,”

And as the company is based in the EU and is a processor of BritBox (based in New York) & processes data IN the EU, then hey, US folks the GDPR applies to YOUR Data. So, the rights under the GDPR will apply to you. https://twitter.com/PrivacyMatters/status/1101039070493491200