How to avoid lead/contact dupes

how is SF currently setup to ensure that we do not have dupe records in SF – I understand that it is currently setup to match with email.

Is there a way to match with both email and telephone number as people sometimes use different email addresses?

Note: checked with HubSpot and it cannot be changed "their end"