Privacy policy

The short version

• You can use RebateHub, including the rebate finder, without giving us any personal information.
• If you ask for quotes and tick the consent box, we send your request to up to 3 independent installers who serve your area. They pay us a fee for each request we send. That is the only way your information is passed on for money.
• Email alerts are a separate, optional choice. Every email has an unsubscribe link.
• We don’t sell or rent lists to data brokers, and we don’t use your information for unrelated advertising.
• We count visits with PostHog in a way that stores nothing on your device and doesn’t identify you. Anything that uses cookies, for analytics or for personalized ads, stays off unless you turn it on.
• Some guides and reference pages show ads from Google. They aren’t based on you unless you allow it, and they never appear on our forms.
• Some of our service providers store information outside Québec and outside Canada, mainly in the United States.
• You can withdraw consent, see your information, correct it or ask us to delete it at any time: privacy@rebatehub.ca.

Who is responsible

RebateHub.ca is an independent, privately owned website. It is not a government agency or a utility. The business below is responsible for the personal information described in this policy, including information we hand to service providers to process for us.

Operator

1001413013 Ontario Inc. (operating RebateHub.ca)

Mailing address

250 Consumers Rd, Suite 611, North York, ON M2J 4V6, Canada

Privacy Officer (person in charge of the protection of personal information)

Sajjad P.

Email

privacy@rebatehub.ca

Our Privacy Officer is the person in charge of the protection of personal information under Québec law and is accountable for our compliance with PIPEDA. Write to the Privacy Officer at the email or mailing address above for any question, request or complaint about your personal information.

What we collect

We collect personal information directly from you, through the forms on this site and the emails you send us, and a small amount automatically when your browser requests a page. We don’t buy personal information or collect it from other sources.

We ask only for what we need. Phone is optional. We never ask for your income, social insurance number, banking details or rebate application numbers. Please don’t include them in notes.

Why we use it

We use personal information only for the purposes below, and we ask your consent for each one separately:

• Quote requests: to send your request to the installers who serve your area, to check that it is genuine, and to follow up if something goes wrong.
• Waitlists and email alerts: to email you about the programs and rebate changes you asked about, only if you ticked that box.
• Contractor partners: to talk with your company about leads and sponsorships, and to run our agreement with you.
• Consent records: to prove what you agreed to and when, and to honour withdrawals.
• Security: to block spam, fraud and abuse of our forms, and to keep the site running.
• Audience measurement: to understand which pages help people, in aggregate, and, only if you turn on Analytics, across your visits.
• Advertising: to show ads on some guides and reference pages, which helps pay for the free tools. Ads are personalized only if you turn on Advertising.
• Legal obligations: to answer privacy requests, keep required records and comply with the law.

If we want to use your information for a new purpose, we’ll ask for your consent first, unless the law allows or requires the new use.

Your consent and choices

• Consent boxes are never pre-ticked, and each purpose has its own box.
• Sharing with installers is required to send a quote request, because that is what the request is. Email alerts are optional and don’t affect your request.
• You can withdraw consent at any time by writing to privacy@rebatehub.ca, using the unsubscribe link in any email, replying STOP to a text, or telling the installer directly. See our unsubscribe page.
• Withdrawing consent stops future use and sharing. It doesn’t undo what has already happened lawfully: an installer who already received your request keeps it only as long as our agreement allows, and we tell them you’ve withdrawn.

Who we share it with

Installers, only with your consent

When you ask for quotes and tick the consent box, we send your name, contact details, postal code, city, the upgrades, your timeline, whether you own the home, your home and heating details and your note to up to 3 independent installers who serve your area and install that upgrade. We don’t pass on your answer about income-tested programs. Installers pay us a fee for each request we send them.

Installers are separate businesses. Once they have your request, they are responsible for it under their own privacy obligations. Each one signs our partner terms, which limit use of your information to your request, require them to identify RebateHub as the source, honour unsubscribe and do-not-call requests, protect your information, and delete it when you ask. You can ask us at any time which installers received your request.

Service providers

We use a few companies to host the site, store requests, route them, send email, measure audience and show ads. They act on our written instructions, may use your information only to provide their service to us, and must protect it. They are listed under “Where it’s stored”.

Other cases

• When the law requires it, for example a valid court order, or to protect someone’s safety or investigate fraud, as the law permits.
• If the business is sold or merged, the buyer may receive personal information needed to continue the service, under an agreement that requires it to protect the information and use it only for the same purposes. We would tell you about the change.

Apart from the paid introductions you ask for, we don’t sell, rent or trade personal information, and we never send it to government programs on your behalf.

Where it’s stored

Our service providers store or process personal information outside Québec and outside Canada, mainly in the United States and, for some providers, the European Union. While it is there, it is subject to the laws of that country and may be accessible to its courts, police and national security authorities.

Before we send personal information outside Québec, we assess the privacy risks: how sensitive the information is, why it is sent, the security and contractual protections in place, and the legal framework of the country. We use a provider only if that assessment shows the information will be adequately protected, and we rely on written terms that require the provider to protect it and use it only for our purposes.

Installers you agree to be introduced to are businesses in Canada that serve your area.

How long we keep it

We keep personal information only as long as we need it for the purpose it was collected for, or as the law requires. Then we securely destroy it, or anonymize it under the rules that Québec law sets for anonymization.

Cookies and analytics

The site works fully without cookies. We use your browser’s own storage only for things that are strictly needed, such as remembering your privacy choices.

Audience measurement (PostHog)

To count visits we use PostHog, a service of PostHog, Inc., with data hosted in the United States. Until you turn on Analytics, it stores nothing on your device: each visit is counted with a random identifier that exists only while the page is open. We send the pages viewed (with any answers removed from the address), the referring site, events that show how the site is used (for example, that a form was sent, never what was in it), page-speed measurements, and device and browser type. PostHog works out an approximate location (country and region) from your IP address and doesn’t store the address itself. If your browser sends a “Do Not Track” signal, PostHog isn’t loaded at all.

Analytics (optional)

If you turn on Analytics in the banner, PostHog keeps an identifier in a first-party cookie (named ph_…_posthog) and in your browser’s storage for up to a year, so your repeat visits count as one browser. Where we use it, PostHog may also record how pages are used (scrolling, clicks, page layout) with every form field and anything you type hidden. If we use Google Analytics, it loads only with this same choice. None of these tools is used to identify you, build an advertising profile or decide anything about you.

Advertising (Google AdSense)

Some guides and reference pages show ads served by Google LLC. We never show ads on the rebate finder, the quote and contractor forms or our legal pages, and nothing you type into our forms is shared with Google for ads. When an ad loads, your browser contacts Google, which receives your IP address, browser information and the page address to choose the ad, count it and prevent fraud. Unless you turn on Advertising, we tell Google, through its Consent Mode, not to use advertising cookies or personalize ads, so the ads you see depend on the page, not on you; Google’s ad script may still keep a small technical setting in your browser’s storage that doesn’t identify you. If you turn it on, Google and the advertising companies it works with may use cookies to personalize and measure ads. Google’s use of this information is described in How Google uses information from sites that use its services, and you can manage Google ads at adssettings.google.com.

Your choices

Analytics and Advertising are separate choices, both off until you turn them on, and declining is as easy as accepting. You can change them at any time with the Cookie settings link at the bottom of every page. Turning a choice off deletes the cookies we set for it and reloads the page. Clearing your browser’s site data also resets them.

When you send a request, we attach how you found us: the first page you visited, the referring website’s name and any campaign tags in the link (for example utm_source). This is kept in your browser only for your visit, and lets us see which pages and partners lead to requests.

Lead scoring

When you request quotes, our system gives the request an automatic priority score based on the upgrade, your timeline, whether you own the home and how complete the request is. We use it to sort requests and to set the price installers pay. The score is not shown to you and doesn’t decide whether you can get a rebate or a quote.

We don’t make decisions about you based only on automated processing. If a request is not sent on, a person reviews it first. You can ask us what information and factors were used, ask to correct the information, and ask a person to review any outcome: privacy@rebatehub.ca.

Your rights

Wherever you live in Canada, you can ask us, free of charge, to:

• tell you what personal information we hold about you, how we use it, and who we shared it with;
• correct information that is inaccurate, incomplete or out of date;
• withdraw your consent, for example to stop installers or us from contacting you;
• delete your information, or stop sharing it;
• give you, or an organization you name, the information you provided in a structured, commonly used technological format (portability);
• stop publishing information about you, or de-index a link to it, where Québec law allows (we don’t publish personal information about homeowners);
• tell you how long we keep your information and who on our side can see it.

Write to the Privacy Officer at privacy@rebatehub.ca or at our mailing address. Tell us what you’d like and which email or phone number you used. We may ask you to confirm your identity before we act, and we use that information only to verify you. We answer within 30 days. If we can’t do what you ask, we’ll explain why and tell you how to complain. When you withdraw consent or ask us to delete information we already shared, we pass your request on to the installers who received it.

Emails, texts and calls

• Every marketing email from RebateHub identifies us, includes our mailing address and contains an unsubscribe link. We act on unsubscribes without delay, and always within 10 business days.
• Installers who contact you about your request must say who they are, tell you that you asked for quotes through RebateHub, and give you a way to unsubscribe that reaches us too. Reply STOP to a text or ask them not to call again, and they must stop.
• We may still send you messages you need about something you asked for, such as confirming your request or answering a privacy request.
• To unsubscribe from everything at once, use our unsubscribe page or write to privacy@rebatehub.ca.

Security and incidents

We protect personal information with safeguards suited to how sensitive it is: encrypted connections (HTTPS), access limited to the people who need it, two-step sign-in and strong passwords on every account that holds it, providers with recognised security programs, and bot and rate-limit checks on our forms. No system is perfectly secure, so we also keep the amount of information small and delete it on schedule.

If a privacy incident happens, such as unauthorized access to or loss of personal information, we act quickly to reduce the risk of harm and record the incident in our incident register. If the incident creates a real risk of significant harm (in Québec, a risk of serious injury), we notify the people affected, the Office of the Privacy Commissioner of Canada and, where Québec residents are affected, the Commission d’accès à l’information, as soon as possible.

Children

RebateHub is meant for adults planning home upgrades. Our forms are not intended for anyone under 18, and we don’t knowingly collect personal information from children. If you believe a child has sent us information, write to privacy@rebatehub.ca and we’ll delete it.

Questions and complaints

Please contact our Privacy Officer first at privacy@rebatehub.ca or our mailing address; we’ll look into it and reply within 30 days. If you’re not satisfied, you can complain to:

• the Office of the Privacy Commissioner of Canada;
• in Québec, the Commission d’accès à l’information du Québec;
• in Alberta or British Columbia, where provincial law applies, that province’s Information and Privacy Commissioner.

Changes to this policy

We post every change on this page with a new date and version number. If a change is significant, for example a new purpose or a new category of recipient, we’ll tell you before it takes effect, by email if you’re subscribed or with a notice on the site, and we’ll ask for your consent where the law requires it. See also our terms of use and accessibility statement.

RebateHub.ca privacy policy, version 2.4.