Privacy Policy for Isomass Ltd

Privacy Policy

This privacy policy sets out how Isomass Ltd uses and protects any information that you give us. Should we ask you to provide certain information by which you can be identified; you can then be assured that this information will only be used in accordance with this privacy statement. If Isomass changes this policy in the future, you will be notified when this happens. You can always check our website: at any time to ensure that you are happy with how we process personal data.

If you have any questions regarding how we store your personal data, or would like to make a request concerning your personal data, please email

Under GDPR, Isomass Ltd is the Data Controller.

Our registered address is: St Johns Innovation Centre, Cowley Road, Cambridge CB4 0WS.

You can call us on (a local call rate) 0845 838 3399 between 8am and 5pm, Monday – Friday.

We don’t have nor are we required to appoint a Data Protection Officer (DPO) under the terms of the GDPR; contacting us using the details above will enable us to deal with any enquiries.

This privacy policy details how we process your personal data as a customer, prospective customer or supplier and from this point on in this policy applies to our customers. Employees are covered by a separate privacy policy in the employee handbook.

What is personal data? Under the EU’s General Data Protection Regulation ‘Personal Data’ is defined as:“any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.

Why does Isomass Ltd need to collect and store personal data?

In order for us to provide you with our products and services, we may need to collect personal data for correspondence purposes, including contacting the right person regarding queries, sales and invoices, and to deliver goods to site. We are committed to ensuring the information we collect and use is appropriate only for this purpose. We may pass your personal data on to our service providers who are contracted to Isomass Ltd in the course of our dealings with you. Our contractors in turn are obliged to keep your details securely and use them only to fulfill the service they provide you on our behalf. Once your service need has been satisfied, they will dispose of the details in line with Isomass Ltd’s procedures.

We do not collect or use data about our customers that is classified under GDPR as ‘special categories’.

How Isomass Ltd uses your information

Isomass Ltd will collect, store and use the information you provide in a manner that is compatible with the EU’s General Data Protection Regulations (GDPR). We will endeavour to keep your information up to date and not store it for longer than is necessary. In some instances the law sets the length of time information has to be kept, but in most cases Isomass Ltd will use its discretion to ensure that this information will not be kept beyond our normal business requirements. Further our aim is not to undertake not to ask irrelevant or unnecessary questions and the information you provide will be subject to rigorous measures and procedures to minimise the risk of unauthorised access or disclosure.

The basis for processing your personal data

We use a combination of legitimate interest and gathering consent to process personal data, depending on the situation. We are a specialist manufacturer, supplying products and services aimed at builder’s merchants, general builders, developers, carpenters, plasterers, and other specialist trades involved in the construction of residential properties.

We have an active customer base and market our products and services to our customers and prospective customers. Personal data is processed in a way that you might reasonably expect and therefore has minimal impact on your privacy.

If you are an individual or run a business as a sole trader or a partnership that is not related to the building and construction industry and haven’t previously entered into dialog/negotiation with us, we will ask for your consent to process your data. Conversely, if you work for a Limited company, PLC, or similar, and we are processing your personal data, your rights under GDPR and PECR are unaffected unless we need to satisfy a legal obligation or as part of a contract.

Categories of personal data processed by Isomass Ltd

In the course of negotiating, marketing and doing business with customers we may collect any combination of the following categories of personal data:

  • 1. Name, job title and/or trade
  • 2. Contact details, including email address, postal address, social network handle and telephone numbers
  • 3. Location, including additional addresses and GPS coordinates
  • 4. Communication, including telephone recordings, voice mail, email
  • 5. Transactional, including purchases from Isomass Ltd, credit information if the business is a sole trader or partnership

Using your personal data

We will use the information you provide for the following purposes:

Internal record keeping: we may use a system to record our customers’ names and contact details, along with dates of orders and brief descriptions of when our team have corresponded, met or talked to our customers. Also delivery addresses, names and contact details necessary to deliver our goods to your site or supplied by customers as referees when opening a credit account. This helps referencing past orders / invoices are correct and provide the level of service our customers have come to expect.

Business correspondence: from time to time we get in touch with our customers via post, email or phone; this includes sending invoices, arranging meetings, keeping customers updated with their orders, catalogue requests, invitations to events, sending gifts, account management, opening times over holidays, unplanned closures (e.g. due to poor weather conditions), changes to our terms and conditions, or prices.

Delivery to site: Occasionally we may also use a courier or delivery companies to get our goods to site, or goods will need to be delivered direct by the manufacturer or our supplier; these are third parties working on our behalf and their obligations are detailed above.

Customer feedback and market research: we may ask customers to provide feedback about their recent experience by email and may also contact customers for market research purposes by email, post or phone.

Website: We use cookies on our website, which you can read more about here. We may also use analytics that track site visitors as they use the website and use this to improve the website.

Customer testimonials: Where customers are providing testimonials about the service they’ve received from Isomass Ltd, they will be asked to sign an agreement giving us permission to use their testimonial with their name, company name and position, and we keep the agreement on record, giving a copy to the customer for reference.

Marketing: customers may receive marketing messages by email and SMS, and in this event we will always provide a means of opting out. Customers will be able to manage their email preferences using links at the bottom of our messages. The frequency of such emails will be no more than one per month. We may send literature by post and it is always related to the industry our customers work in.

Other information we have access to

Systems we use or access may record information about you through your interaction with them. E.g. if you open our emails on your mobile device and have GPS switched on, the email platform we use may record your location – this is usually managed by you with settings on your device. By liking or following Isomass Ltd on social media networks that you are a member of, we may be able to see information about you depending on your privacy settings on the social network you’re using.

Organisations that process data on our behalf

When considering other organization’s (processors) that may be involved in the processing of your data, (for the most part our information is stored on our internal systems here in our offices) we have sought assurances from other processors, where they are used; and they are as follows: Ltd – our website is hosted by this company; their privacy policy is available at which if applicable may detail future measures they have in place for the processing any personal data.

Couriers and delivery companies: we’re unlikely to always able to deliver direct to site using our own vehicles and use courier and delivery companies including

We do not pass or sell personal data to any person or company that is not acting on our behalf.

Before you disclose to us the personal information of another person, you would be expected to obtain that person’s consent to both the disclosure and the processing of that information in accordance with the terms of this policy.

Organisations that supply us with data

We may buy contact lists from reputable providers that only supply business details that have been checked for quality and against the Telephone Preference Service and Corporate Telephone Preference Service. In this event a main provider would be

Your rights

You have the right to object to Isomass Ltd processing your personal data. Your objection would need to relate to us processing your personal data based on legitimate interest, or for direct marketing, and on specific grounds relating to your particular situation. Should we receive an objection relating to direct marketing, we will stop processing your personal data. Direct marketing includes email, phone calls and post. All our marketing emails will have an unsubscribe link at the bottom, as well as a link to update your preferences.

If you would like to make a request concerning your personal data, please email

Or write to us:

GDPR Compliance, Isomass Ltd, Units 10 & 11 Avenue Business Park, Off Brockley Rd, Elsworth, CB23 4EY

Or you can call us on (a local call rate) 0845 838 3399 between 8am and 5pm, Monday – Friday.

You have the right to know how we process your data. This privacy policy has been created for this purpose. If you have any questions that you cannot find the answer to in this policy, please don’t hesitate to contact us.

You have the right to access your personal data and any supplementary information. You can do this by contacting us and making this request. We’ll provide you with what information we have free of charge within one month of receiving your request, after we have verified your identity.

If your request is complex we’ll notify you within one month of receipt that we will need to extend this period and why, and the maximum that we are able to extend it by is a further two months. If we feel that a request is manifestly unfounded or excessive, particularly if requests are repetitive, we can charge a reasonable fee to cover the administrative costs or refuse to respond. If we refuse to respond we will explain why; you would still have the right to complain to the ICO and to a judicial remedy without undue delay and within one month.

You have the right to tell us if your information is incorrect or incomplete and for it to be rectified. Should you notice that data we hold isn’t correct, please contact us and we’ll amend it within a month of receiving your request.

Should the request for rectification be complex, we’ll let you know that we will need to extend this period and why, and the maximum that we are able to extend it by is a further two months. If we don’t take action following your request, we’ll contact you to explain why and you’ll have the right to complain to the ICO and to a judicial remedy.

You have the right to be forgotten. You can request the deletion of all your personal data when there is no compelling reason for us to continue to process it by contacting us. This includes where you feel that it is no longer necessary, where you withdraw consent, where there is no overriding legitimate interest, or if you feel it was unlawfully processed. Should there be a reason for us to refuse, such as the exercise or defence of a legal claim, we will contact you. We will endeavour to fulfil your request otherwise, although if we have used your personal data on social networks it may not be entirely possible (we would not do this without your consent).

You have the right to request that we restrict processing of your personal data. This would mean that we continue to store your personal data, but not use it going forward. You can do this by contacting us. We will retain just enough information about you to ensure that the restriction is respected in the future.

We’ll also restrict processing of your personal data if you tell us that it’s inaccurate or incomplete. Should you need to establish, exercise or defend a legal claim and we no longer need your personal data, we’ll restrict its processing.

You have the right to request your personal data to reuse it for your own use across different services. However, the type of personal data that we process is unlikely to be useful for this purpose. Please contact us if you’d like to request this and we’ll reply within one month either with the data or a reason why we’re not taking action. If we tell you we’re not taking action, you’ll have the right to complain to the ICO and to a judicial remedy without undue delay and within one month.

Isomass Ltd don’t use any form of automated decision making including profiling.

If you would like to make a request concerning your personal data, please email enquiries@Isomass

Or write to us:

GDPR Compliance, Isomass Ltd, Units 10 & 11 Avenue Business Park, Off Brockley Rd, Elsworth, CB23 4EY

Or you can call us on (a local call rate) 0845 838 3399 between 8am and 5pm, Monday – Friday.

Inaccuracies or Errors

The descriptions, pictures and other representations of products on this site may contain inaccuracies and errors. Isomass does not make any warranty or representation with respect to the accuracy or completeness of any such information. LAST UPDATED: February 2016