Privacy Policy
Effective 2026-08-23 ยท Version 1
RebateStack operates rebatestack.ca, a free database of Canadian home energy rebate programs. This policy explains what personal information we collect, why, who we give it to, and how you can get it back or have it deleted. It is written to meet our obligations under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).
1. What we collect, and when
Using the calculator: nothing. Your province, heating type, income band and system size are processed entirely in your browser. They are never transmitted to us and never stored.
If you submit the quote request form, we collect what you type into it:
| Information | Why we collect it |
|---|---|
| Full name | So the contractor knows who they are contacting |
| Postal code | To match you with installers who service your area |
| Phone number | So contractors can call or text you with a quote |
| Email address | So contractors can email you a written quote |
| Project type and timeline | So contractors can prepare a relevant quote |
| Your calculated rebate estimate, province, heating fuel and system size | Passed to the contractor so the quote accounts for the rebate you may qualify for |
| A record of your consent: the exact wording you agreed to, and the date and time | CASL requires us to prove we had your permission. We keep this to protect you and us. |
| Your IP address | Recorded automatically by our form provider for spam prevention |
2. Who we give it to, and what they do with it
If you tick the consent box and submit the form, we disclose the information above to up to three independent HVAC and heat pump contractors operating in your area, so that they can contact you with quotes.
These contractors are separate businesses. They are not owned by, employed by, or controlled by RebateStack. Once we pass your information to them, their own privacy practices govern what they do with it, though we require by contract that they use it only to contact you about your project and not resell it.
Your information is also processed by our hosting and form provider, Netlify, which stores form submissions on our behalf. Netlify's infrastructure may process data outside Canada, which means it can be subject to the laws of the country where it is processed.
We do not sell your personal information to data brokers, lead aggregators, or advertising networks.
3. Consent, and how to withdraw it
We rely on your express consent, given by ticking an unchecked box before you submit the form. The box is never pre-ticked. Submitting the form is entirely optional, and the calculator works fully without it.
You can withdraw your consent at any time by emailing us at the address below. Withdrawing consent stops us from sharing your information with any further contractors. It does not undo disclosures already made, so if a contractor already has your details you may need to ask them directly to stop contacting you and to delete your information.
4. How long we keep it
We retain quote request submissions and their associated consent records for three years from the date of submission. CASL places the burden of proving consent on us, and three years reflects that obligation. After that period, submissions are deleted.
5. Your rights
- Access. You can ask us for a copy of the personal information we hold about you.
- Correction. You can ask us to correct information that is inaccurate or incomplete.
- Deletion. You can ask us to delete your submission.
- Withdrawal. You can withdraw consent to future sharing at any time.
- Complaint. If you are not satisfied with how we handled your request, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
We will respond to access and correction requests within 30 days.
6. How we make money
RebateStack is free to use and carries no advertising. If you choose to request quotes, we may receive a referral fee from the contractor we connect you with.
That fee never changes your rebate estimate, never changes which programs we show you, and never changes how we describe them. Our rebate data is compiled from government and utility sources and no company can pay to appear in it, be rated more favourably in it, or be left out of it.
7. Security
The site is served over HTTPS. Form submissions are transmitted encrypted and stored by our form provider under their access controls. No system is perfectly secure, and we cannot guarantee absolute security, but we limit access to submissions to those who need it to operate the service.
8. Children
This service is intended for homeowners and is not directed at children. We do not knowingly collect personal information from anyone under 18.
9. Changes to this policy
If we change this policy we will update the effective date and version number at the top. Material changes affecting how we share your information will not be applied retroactively to submissions already made under an earlier version.
10. Contact
Questions, access requests, corrections, deletions or consent withdrawals go to our Privacy Officer: