Selling a customer list when you retire: what's allowed

Can you sell a customer list when you retire?#

A customer list is a business asset, and retiring owners of trade companies often sell or transfer one as part of an exit. The limits come from four places: what your privacy notice and agreements told customers, privacy laws that may apply, contracts with franchisors or software vendors, and the way the transfer is structured.

A home services customer list usually holds more than names: addresses, phone numbers, emails, installed equipment, service history, maintenance agreement status and sometimes stored payment details. The more detailed the list, the more care the transfer needs.

Start with what your privacy notice promised#

Your privacy notice is the starting point because regulators hold companies to the promises they made. Find every version: the website privacy policy, terms printed on invoices or estimates, maintenance agreement terms, and any online booking or financing pages.

Public cases show how this plays out. In 2000 the FTC sued Toysmart.com to block the sale of customer data collected under a policy promising it would never be shared, and the list was ultimately destroyed rather than sold. In the 2015 RadioShack bankruptcy, the FTC's consumer protection director recommended that customer data not be sold as a standalone asset and go only to a buyer in substantially the same line of business that agreed to be bound by RadioShack's privacy policy.

Do not quietly rewrite the policy before selling. FTC staff warned in February 2024 that a company adopting more permissive data practices through a surreptitious, retroactive change to its terms or privacy policy may be engaging in unfair or deceptive conduct.

State privacy laws that may apply#

Comprehensive state privacy laws may apply depending on where your customers live and whether your company meets each law's thresholds. By MultiState's count, laws in Indiana, Kentucky and Rhode Island took effect on January 1, 2026, bringing the number of states with comprehensive privacy laws in effect to 20, including Florida's narrower law.

These laws define sale and sharing differently and give residents rights such as opting out. Whether a small trade company falls inside a given law is a question to answer state by state with counsel, not an assumption. Commercial customers matter too: California's employee and business-to-business exemptions expired on January 1, 2023, while the Colorado Attorney General states that Colorado's law does not cover individuals acting in a commercial context.

The buyer's later use brings other rules into play, such as telemarketing and email marketing laws, so the purchase agreement should make the buyer responsible for its own compliance.

Ways to hand over a book of business#

The structure of the handover changes the privacy analysis more than the price does. The options below run roughly from the most data moving to the least.

Checklist before you sell the list#

Work through these checks with counsel before you sign a letter of intent, so the answers shape the deal instead of delaying it.

• 1Collect every version of your privacy notice and customer terms, with the dates each was in use.
• 2Inventory the fields in the list and drop what a successor does not need, especially payment card data and gate or alarm codes.
• 3Check maintenance agreements and commercial contracts for confidentiality or assignment terms.
• 4Check any franchise agreement, which may give the franchisor rights over customer data.
• 5Check your field service software terms and export options before cancelling the subscription.
• 6Decide how customers will be told, and draft the notice with counsel.
• 7Put the buyer's obligations in writing: honor your privacy promises, use the data for the same kind of service and handle opt-outs.

If the company is in bankruptcy#

Bankruptcy adds specific rules. Under 11 U.S.C. 363(b)(1), if the debtor gave individuals a policy prohibiting transfer of personally identifiable information to unaffiliated persons and that policy was in effect when the case began, the trustee may not sell the information unless the sale is consistent with the policy or the court approves it after a consumer privacy ombudsman is appointed and a hearing is held.

The Bankruptcy Code's definition of personally identifiable information covers items such as a first and last name, home address, email address and a telephone number for contacting the individual at that residence, when provided by an individual to obtain a product or service primarily for personal, family or household purposes. A residential service customer list can fit that description, so a wind-down officer should involve counsel before marketing it.

Illustrative: a retiring plumber hands over the book#

Illustrative: a fictional plumbing company owner is retiring without a family successor. The customer list, equipment histories and maintenance agreements sit in a field service platform, and the website privacy policy says the company does not sell customer information.

Rather than sell the list to the highest bidder, the owner agrees an asset sale with a nearby plumbing company. The list, phone numbers and goodwill move; the buyer agrees in writing to honor the existing policy; payment data is excluded; and customers receive a letter introducing the new company and explaining how to opt out.

Where SourceX fits after a retirement#

SourceX does not buy or broker customer lists. What it assesses is different: whether operational records such as job notes, service histories, estimates and call transcripts can be licensed to AI developers with names, addresses and contact details removed.

If a retiring owner keeps rights to those records after transferring the list, the SourceX five-step transaction starts with a metadata-only fit check and a rights review that reads the same privacy notices and purchase agreement described here. If the records moved with the list, the rights usually moved too, and the decision belongs to the buyer.