Start with one customer identity
Define what represents a company, an individual and a contact person. Keep the relationship between them clear so a shared email address or a change of contact does not create a second customer.
Review existing records before adding a new one. Match using appropriate identifiers and human review rather than assuming a similar name proves identity.