Personal business information may not be under an NDA so its legal, but it is without a doubt unethical, I would never do business wiht someone who gives it out.