Is a 4 digit password with a predictable username secure?

There is a company I am with that has decided to keep my personal information (Full Name, Phone number, Email, DoB, Address, Full phone history, and billing information) behind a web system protected by only a 4-digit PIN.

They can't remove this information for 45 days. They can't disable the PIN access.

My complaints are met with "This is a standard and secure system"

I think that maybe if I show them the responses here that action may be taken.

I've been waiting for 2 weeks for the "Chief Privacy Officer" to respond to my email.