Here's a somewhat simpler approach:
If they have a separate Internet connection, then i would just give them a dedicated VLAN, and make their Internet router part of that VLAN. Your existing environment doesn't need to have an IP address on their VLAN.
When the time comes to enable communication between the different units, you could add an address for your routing switch on their VLAN in order to route between the environments, and add ACLs to control traffic between the two.