If I was a supplier, I'd want to verify the address to make sure multiple people aren't using the same ID. You could have a Supplier Only page thats's password protected. And part of the Supplier agreement could be to not use that resource as a marketing tool... as in, they can't just login and harvest all the names.
Maybe have to log in and supply the number and last name to get a result as an extra security measure. (if it was just a number, you'd be able to type in random numbers to get all sorts of results)
It wouldn't (I'm assuming) be just a page where anyone could go and see everyones personal info. |