Privacy Policy

Privacy Policy

Privacy Notice and Cookies Policy for Independent Supplier Network

Last updated: 9 February 2026

Independent Supplier Network (“ISN”, “we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy.

This notice explains what personal data we collect, how we use it, who we share it with, how long we keep it, and your rights.

1) The personal data we collect

We may collect and use the following categories of personal data:

  • Enquiry data: name, phone number, email address, property address, and details you provide when you contact us by phone, email, or form.
  • Service data: records of services requested, correspondence, notes, and updates relating to your enquiry or project.
  • Technical data: IP address, browser type, device information, pages visited, and approximate location based on IP.
  • Marketing preference data: your choices about receiving marketing communications.
  • Cookie/analytics data: data collected via cookies and similar technologies (see section 8).
2) How we collect your data
  • Directly from you (for example, when you call us, email us, or submit a form).
  • Automatically through cookies and website technologies.
  • From trusted partners where you have asked for or would reasonably expect a referral relevant to your enquiry.
3) How and why we use your personal data (lawful bases)

We use your data to:

  • Respond to enquiries and provide requested services (pre-contract steps/contract).
  • Assess your needs and direct you to the most relevant support (legitimate interests).
  • Operate, secure, and improve our website and services (legitimate interests, and consent where required for cookies).
  • Send service updates and important communications (contract / legitimate interests).
  • Send marketing communications (consent where required, or legitimate interests where permitted by law).
  • Comply with legal and regulatory obligations (legal obligation).
4) Sharing your information with Exactum, ILA, and ISN

When you make an enquiry by phone, email, or website form, we may share relevant personal data with one or more of the following organisations:

We only do this where we reasonably believe it allows us (or the receiving organisation) to provide enhanced and/or relevant services to your enquiry.

We share only the data that is necessary for that purpose, and only where there is an appropriate lawful basis. Depending on the circumstances, the receiving organisation may act as an independent data controller for its own services.

If you would like to object to this type of sharing, please tell us when you contact us and we will record your preference where legally possible.

5) Other recipients of personal data

We may also share personal data with:

  • IT, hosting, website, CRM, and communication providers.
  • Analytics and advertising partners (for example, Google and Microsoft) where permitted by your cookie choices.
  • Professional advisers (legal, accounting, insurance).
  • Regulators, law enforcement, courts, or government authorities where required by law.
  • A buyer/successor in the event of a business reorganisation, merger, or sale (with appropriate safeguards).
6) International transfers

Some suppliers may process personal data outside the UK. Where this happens, we use appropriate safeguards (such as adequacy regulations or approved contractual safeguards) to protect your personal data.

7) Data retention

We keep personal data only for as long as necessary for the purposes set out in this notice, including legal, accounting, and reporting requirements. Typical periods are:

  • General enquiries: up to 24 months from last meaningful contact.
  • Service/project records: up to 7 years after completion/closure (or longer where legally required).
  • Cookie/analytics data: according to cookie settings and provider retention windows.
8) Cookies and similar technologies

We use cookies and similar technologies to operate our site, understand usage, and improve marketing effectiveness.

Strictly necessary cookies are required for core website functions and may be set without consent.

Analytics and advertising cookies are only used where required consent has been given via our cookie banner/preferences tool.

Technologies we may use include services provided by:

You can change your cookie preferences at any time using our cookie settings tool (where available) and your browser controls.

9) Security

We use appropriate technical and organisational measures to protect personal data. However, internet transmissions are not completely secure and we cannot guarantee absolute security of data transmitted online.

10) Your rights

You have rights under UK data protection law, including the right to:

  • be informed about how your data is used;
  • access your personal data;
  • request correction of inaccurate data;
  • request erasure in certain circumstances;
  • request restriction of processing in certain circumstances;
  • object to processing (including certain direct marketing and legitimate interests processing);
  • data portability (where applicable);
  • withdraw consent at any time, where processing is based on consent.

To exercise your rights, contact us using the details above or via our contact page.

11) Complaints

If you have concerns about how we handle personal data, please contact us first so we can try to resolve the issue. You also have the right to complain to the Information Commissioner’s Office (ICO).

12) Third-party websites

Our website may contain links to external websites. We are not responsible for the privacy practices of third-party sites. Please review their privacy notices separately.

13) Changes to this notice

We may update this notice from time to time. Any material changes will be posted on this page with an updated “Last updated” date.