Unfortunately, more and more countries are acquiring mandatory data retention laws, which not only makes it legal for ISP to store your data but, in most cases, it's actually mandatory. These laws can differ very much from country to country. So the best thing is to check what is legally acceptable in your country.