Privacy & Data Practices

Privacy Policy

This policy explains how TB13 Consultants collects, uses, sources, shares, sells, and protects personal information, and the choices and rights available to consumers.

Last updated: July 10, 2026

1. Overview & Scope

TB13 Consultants ("TB13," "we," "us," or "our") provides customer lead data to businesses operating in the retail energy sector and related industries. We supply lead lists organized by state and utility, operate a client portal, and offer suppression and verification tools to our business clients.

This Privacy Policy applies to: (a) personal information contained in the lead data we source, maintain, and provide to our clients; (b) information we collect from the business clients and vendor partners who use our services; and (c) information we collect from visitors to tb13consultants.com (the "Site"). By using our Site or services, you acknowledge the practices described here.

2. Information We Collect

Depending on the context, we may collect:

Consumer / lead information (sourced from third parties):

  • Name and, where applicable, business name
  • Postal address, city, state, and ZIP code
  • Telephone number(s)
  • Email address (where provided)
  • Utility provider, service state, language preference, and lead category (e.g., residential, commercial, solar)
  • Do-Not-Call (DNC) status and consent / opt-out indicators associated with the record

Business client & vendor information:

  • Contact name, company name, business email, and phone number
  • Account credentials and portal activity
  • Records of orders, downloads, suppression uploads, and API usage

Website visitor information:

  • Information you submit through contact or inquiry forms
  • Technical data such as IP address, browser type, device information, and pages visited, collected automatically through cookies and similar technologies

We do not intentionally collect sensitive categories of personal information (such as government identifiers, financial account numbers, health data, precise geolocation, or data revealing protected characteristics) as part of our lead data.

4. How We Use Information

We use personal information to:

  • Compile, organize, deduplicate, verify, and maintain lead data;
  • Provide lead lists and related services to our business clients;
  • Apply suppression lists and honor Do-Not-Call and opt-out requests;
  • Operate, secure, and improve our Site, client portal, and vendor API;
  • Communicate with clients and vendors and respond to inquiries; and
  • Comply with legal obligations and enforce our agreements.

5. How We Share & Sell Information

We sell and share personal information. Our core business involves providing lead data to business clients for a fee. Under privacy laws such as the California Consumer Privacy Act (as amended by the CPRA), this activity may constitute a "sale" or "sharing" of personal information. We disclose personal information to:

  • Business clients who purchase lead lists or access data through our portal or API;
  • Service providers (such as hosting, storage, and infrastructure providers) that process data on our behalf under contract;
  • Legal and regulatory recipients where required by law, subpoena, or to protect our rights; and
  • Successors in the event of a merger, acquisition, or sale of assets.

We do not knowingly sell or share the personal information of consumers who have opted out or who are known to be under 16 years of age. We contractually require our clients to use lead data only for lawful purposes and in compliance with applicable telemarketing and privacy laws.

6. Do-Not-Call, TCPA & Telemarketing Compliance

Lead data provided by TB13 is intended for use only in compliance with applicable laws, including the Telephone Consumer Protection Act (TCPA), the FTC's Telemarketing Sales Rule (TSR), the National Do-Not-Call Registry, and applicable state telemarketing laws.

  • We maintain a DNC status indicator on records and provide suppression tools so clients can scrub their lists.
  • Clients are solely responsible for ensuring they have a lawful basis to contact any individual, including obtaining any required prior express written consent before using an autodialer or prerecorded/artificial voice, and for honoring opt-out and revocation requests promptly.
  • Consumers may request that their information be added to our internal suppression list at any time using the contact details below.

7. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

  • Right to know / access the categories and specific pieces of personal information we hold about you;
  • Right to delete your personal information, subject to legal exceptions;
  • Right to correct inaccurate personal information;
  • Right to opt out of the sale or sharing of your personal information;
  • Right to limit the use of sensitive personal information (where applicable); and
  • Right to non-discrimination for exercising your rights.

These rights are provided under laws including the California Consumer Privacy Act (CCPA/CPRA) and comparable laws in states such as Virginia, Colorado, Connecticut, Texas, Oregon, and others. Canadian residents have rights described in Section 15.

8. How to Exercise Your Rights

To submit a request to know, access, delete, correct, or opt out, contact us using either method below:

We will verify your request by matching the information you provide against our records. You do not need to create an account to submit a request. You may use an authorized agent to submit a request on your behalf, subject to reasonable verification. We will respond within the timeframes required by applicable law and will not discriminate against you for exercising your rights.

9. Do Not Sell or Share My Personal Information

Because we sell and share personal information as described in Section 5, you have the right to direct us not to sell or share your personal information. To opt out:

Please include the name, phone number, address, and/or email associated with your record so we can locate and suppress it. We honor recognized browser-based opt-out preference signals (such as the Global Privacy Control) where technically feasible. Once you opt out, we will not sell or share your information and will not ask you to opt back in for at least twelve (12) months.

10. Data Broker Registration

Certain states, including California, Texas, Oregon, and Vermont, require businesses that meet the legal definition of a "data broker" to register with the applicable state authority and to honor deletion and opt-out requests (including through mechanisms such as California's Delete Request and Opt-Out Platform, "DROP"). Where TB13 meets the definition of a data broker under applicable law, we will register as required and comply with the associated obligations. Consumers may contact us using the details below with any questions about our registration status.

11. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, or disclosure. These include access controls, authenticated and role-based access to our systems, encryption in transit, rate limiting, and activity logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Data Retention

We retain personal information for as long as necessary to provide our services, comply with our legal obligations (including telemarketing and consumer-protection recordkeeping requirements), resolve disputes, and enforce our agreements. When information is no longer needed, we take reasonable steps to delete or de-identify it.

13. Cookies & Website Tracking

Our Site uses cookies and similar technologies to operate the Site, remember preferences, analyze traffic, and support marketing analytics. Some of these technologies may be considered a "sale" or "sharing" of personal information under certain state laws. You can control cookies through your browser settings and can exercise your opt-out rights as described in Sections 8 and 9. We honor recognized global opt-out preference signals where technically feasible.

14. Children's Privacy

Our Site and services are intended for businesses and are not directed to children. We do not knowingly collect, sell, or share the personal information of individuals under 16 years of age. If we learn that we have inadvertently done so, we will delete the information promptly.

15. Canadian Residents (PIPEDA & CASL)

TB13 Consultants is based in Canada. For personal information governed by Canadian law, we handle it in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. Canadian residents may request access to, and correction of, their personal information and may withdraw consent, subject to legal and contractual restrictions.

Commercial electronic messages we send are intended to comply with Canada's Anti-Spam Legislation (CASL), including consent, identification, and unsubscribe requirements. You may withdraw consent to receive commercial electronic messages at any time using the contact details below.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be posted on this page and, where appropriate, communicated to our clients.

17. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or want to be added to our suppression list, please contact us:

Address

18 King Street Suite 1400
Toronto, M5C 1C4