Bracton

UK SMALL BUSINESS · LEGAL DOCUMENTS

Small Business Legal Toolkit

The contracts, policies and protections most UK small businesses need — drafted by solicitors, cited to the legislation.

Covers

Employment and HR
Freelancers and consultants
Debt recovery and late payments
Shareholder protection
Website compliance
Intellectual property

Built for owners, founders, freelancers, agencies, and trades businesses that need solicitor-drafted documents — not boilerplate templates.

Fast-start toolkit

Most Small Businesses Start Here

Start with the documents that control the highest-frequency SME risks: hiring, freelancers, founder relationships, confidentiality, and unpaid invoices.

Browse all documents

Employment Contract

Put pay, hours, probation, confidentiality, notice, role duties, and core employment terms in writing before a new hire starts.

Freelance Agreement

Control scope, fees, delivery dates, IP ownership, confidentiality, status, and termination before project work begins.

Non-Disclosure Agreement

Protect pricing, client lists, pitch materials, product plans, credentials, and other confidential information before disclosure.

Letter Before Action

Escalate an unpaid commercial invoice with a formal, evidence-led demand before deciding whether to bring a claim.

Late Payment Interest Calculator

Estimate statutory interest and fixed compensation for qualifying late commercial payments before making a demand.

GETTING STARTED

The legal risks most small businesses overlook

The most expensive legal problems for SMEs are often not obscure. They are ordinary operational gaps: work starts without terms, founders never agree exit rules, invoices are chased late, websites collect data without clear explanations, and managers make decisions with no record. Each risk below has a practical fix.

Working Without Written Contracts

Risk: Many SMEs start work after a friendly call, a short email, or a purchase order that never deals with scope, payment terms, liability, cancellation, ownership, or what happens if the project changes.

Operational consequence: When the relationship becomes difficult, the business is left reconstructing the deal from messages and assumptions. That can turn a manageable disagreement into an expensive dispute about what was actually agreed.

Recommended action: Use written terms before work starts. At minimum, record the parties, services, deliverables, fees, payment dates, acceptance process, confidentiality, IP ownership, liability position, termination rights, and escalation route.

No Shareholder Protection

Risk: Founder-led companies often rely on goodwill rather than a shareholders agreement. That may feel efficient at launch, but it leaves core questions unanswered when people contribute unequally or want different futures.

Operational consequence: Deadlock, unexpected exits, share transfers to unsuitable third parties, unclear voting thresholds, and disagreements over dividends can freeze the company when it most needs fast decisions.

Recommended action: Agree founder rights, reserved matters, transfer restrictions, leaver treatment, deadlock mechanics, and decision-making rules early, while everyone is still aligned.

Assuming You Own Freelancer Work

Risk: Paying a designer, developer, marketer, photographer, or copywriter does not automatically answer every ownership question. Copyright and moral rights need careful handling.

Operational consequence: A business may discover it cannot freely adapt, sell, license, or transfer commissioned work, or that the freelancer can reuse important material in ways the business did not expect.

Recommended action: Use clear IP assignment or licence wording in the freelance or consultancy agreement, supported by a scope of work that identifies deliverables, source files, acceptance criteria, and payment milestones.

Weak Debt Recovery Processes

Risk: Late payment is often treated as an accounts problem, but weak contract terms and inconsistent chasing can damage cash flow and reduce leverage before escalation begins.

Operational consequence: Unpaid invoices consume management time, make payroll and supplier payments harder, and leave the business deciding between absorbing the loss or threatening action it is not ready to take.

Recommended action: Set clear payment terms, keep evidence, chase promptly, calculate statutory interest and compensation where applicable, and use a measured letter before action only when escalation is genuinely being considered.

Missing Website Compliance Documents

Risk: Businesses that sell, take enquiries, use analytics, process personal data, or run subscriptions need website terms and privacy information that reflect how the site actually works.

Operational consequence: Copied terms, unclear cancellation wording, missing business identity details, and vague privacy notices can create customer disputes, chargebacks, regulatory risk, and avoidable support friction.

Recommended action: Map the user journey, explain payment and cancellation terms clearly, publish privacy information in plain language, and keep cookie and marketing choices aligned with actual technology in use.

Poor HR Documentation

Risk: Early employers sometimes treat contracts, probation notes, flexible working decisions, disciplinary records, and grievance files as admin to be tidied later.

Operational consequence: If a claim or dispute arises, the business may have no reliable evidence showing what was agreed, how concerns were handled, or why a decision was made.

Recommended action: Issue employment contracts on time, use consistent policies, document manager decisions, keep records proportionate, and review HR templates as employment law changes.

FOUNDATIONS

Starting a business on solid foundations

Most founder disputes, dilution problems, and exit complications trace back to the same point: nothing was written down when the relationship started. A shareholders agreement is not a sign of distrust — it is the document that lets the business handle difficult decisions without destroying the relationship.

Shareholders agreements

Founder disputes rarely begin as legal disputes. They begin as operational disagreements about workload, pay, investment, risk, sales strategy, or whether one founder can leave and keep their shares. A shareholders agreement can help translate those commercial expectations into voting rights, reserved decisions, transfer rules, leaver provisions, deadlock mechanics, and exit processes. It is most valuable before conflict arises because everyone is more likely to agree fair rules while the relationship is still healthy.

Director responsibilities

Founder-directors should not treat a limited company as an informal extension of themselves. Directors owe statutory duties under the Companies Act framework, including duties around company success, independent judgement, conflicts of interest, care and skill, and benefits from third parties. In practical terms, SMEs should record major decisions, note conflicts, keep basic board minutes or written resolutions, and separate personal interests from company decisions. Good governance records are not bureaucracy for its own sake; they can be vital if investors, lenders, HMRC, buyers, or future shareholders ask how decisions were made.

Business relationships

Startups and small businesses move quickly, but informal partnerships, supplier arrangements, consultants, referral deals, and agency relationships can create hidden obligations. Email chains often miss liability caps, ownership, confidentiality, termination, exclusivity, non-solicitation, payment triggers, and what happens if a project stalls. The operational discipline is simple: if the relationship matters to revenue, delivery, IP, data, or reputation, record it in a structured document before money or confidential information changes hands.

EMPLOYMENT LAW

Hiring employees

Employment law risk grows with every hire. The issue is not only whether the business has templates; it is whether managers use those templates consistently when probation, flexible working, performance, sickness, grievances, discipline, redundancy, and record keeping become real workplace events.

Employment Contracts

Practical risk: The risk is not only failing to issue a contract. It is issuing terms that do not match the role, pay structure, place of work, hours, confidentiality expectations, probation process, restrictive covenants, or current employment law position.

Common mistakes: Common mistakes include recycling senior contracts for junior staff, omitting variable pay rules, leaving remote work expectations vague, and treating handbook policies as if they can fix weak contractual wording later.

Recommended approach: Use a written employment contract before or at the start of employment, tailor it to the role, and review it when legislation or working patterns change. The Employment Rights Act 2025 hub is a useful companion for businesses updating terms against the current reform timetable.

Probation Periods

Practical risk: Probation periods are often used as a casual safety net, but they only help if the contract explains duration, extension, notice, standards, and review points.

Common mistakes: Businesses commonly forget to hold probation reviews, extend probation without a contractual right, or dismiss without evidence of performance concerns and fair process.

Recommended approach: Set objective expectations at the start, diarise reviews, record feedback, confirm extensions in writing, and avoid treating probation as a substitute for fair management.

Flexible Working Requests

Practical risk: Flexible working decisions can create operational, discrimination, morale, and consistency issues if managers respond ad hoc.

Common mistakes: Common mistakes include giving informal refusals, failing to analyse business reasons, treating similar requests differently, or not recording why a role cannot support a requested pattern.

Recommended approach: Use a policy and request form, consider each request on its facts, assess operational impact, explore alternatives where appropriate, and keep a clear decision record.

Disciplinary Procedures

Practical risk: A conduct issue handled in frustration can become a tribunal risk if the business skips investigation, warnings, evidence, or the employee’s opportunity to respond.

Common mistakes: Small employers often mix investigator, decision maker, and appeal manager without thinking, rely on hearsay, or move straight to dismissal because the issue feels obvious.

Recommended approach: Use a consistent disciplinary policy, separate stages where practical, gather evidence, invite the employee properly, keep notes, and ensure the sanction is proportionate.

Grievances

Practical risk: Grievances are often early warnings of wider problems: bullying allegations, discrimination concerns, management failure, health issues, whistleblowing, or pay disputes.

Common mistakes: Ignoring a complaint because it is emotional, informal, or inconvenient can make matters worse. So can retaliating, allowing managers named in the complaint to control the process, or failing to communicate next steps.

Recommended approach: Acknowledge promptly, identify the issues, investigate proportionately, keep records, respond in writing, and consider whether the complaint reveals a broader policy or management training issue.

Redundancy

Practical risk: Redundancy is an operational restructure, but it is also a legal process. The risk increases where selection pools, consultation, scoring, alternatives, and payments are not handled carefully.

Common mistakes: Common mistakes include deciding before consultation, selecting a person rather than a role, using subjective criteria, ignoring maternity and family rights, or failing to calculate statutory redundancy correctly.

Recommended approach: Plan the business case, consult before decisions are final, use objective criteria, consider alternatives, document meetings, and calculate payments carefully.

Record Keeping

Practical risk: In employment disputes, the business with clear records is usually in a stronger position than the business relying on memory.

Common mistakes: A common mistake is keeping no written trail for probation concerns, flexible working decisions, performance warnings, pay changes, sickness conversations, or complaints.

Recommended approach: Keep proportionate records of key decisions, store documents securely, avoid excessive personal data, and make sure managers understand that notes may later be scrutinised.

FREELANCERS & CONTRACTORS

Working with freelancers and contractors

Freelancers and contractors are essential to modern SMEs, but fast engagements create recurring legal questions: what exactly is being delivered, who owns it, what is confidential, when is payment due, and whether the working relationship still looks genuinely independent.

→ See the freelance hub for contracts, IR35 guidance, and scope-of-work templates.

Scope Creep

Email-only projects usually fail when “small extras” become normal. Define deliverables, assumptions, exclusions, client dependencies, change control, and acceptance criteria. A scope of work can sit underneath a freelance or consultancy agreement so both sides know what is included and what requires a new quote.

Scope of Work

Intellectual Property Ownership

Paying for work is not the same as owning every right in the work. The agreement should say whether IP is assigned, licensed, or retained, when transfer happens, what happens to pre-existing materials, and whether the freelancer can use the work in a portfolio.

Freelance Agreement

Confidential Information

Freelancers may see pricing, client data, product plans, credentials, source code, processes, and strategy. Confidentiality clauses and NDAs can help control disclosure before a full commercial agreement is signed.

Non-Disclosure Agreement

Payment Disputes

Milestones, deposits, acceptance tests, late-payment rights, expenses, and suspension rights should be clear before delivery begins. If payment depends on subjective “satisfaction”, disputes become harder to resolve.

Freelance Agreement

Contractor Status Risks

Calling someone self-employed is not decisive. Actual control, mutual obligations, integration, substitution, financial risk, and working practices matter. Businesses should make contracts reflect reality and review long-running engagements.

Contractor vs Employee guide

Statements Of Work

Statements of work are useful where the relationship has multiple phases or repeat projects. They keep the master terms stable while documenting deliverables, dates, fees, responsibilities, and acceptance criteria for each piece of work.

Scope of Work

DEBT RECOVERY

Getting paid

Late payment is one of the most common legal problems for small businesses because it sits between finance, client management, evidence, and escalation. A good process protects cash flow without turning every delay into a dispute.

The strongest recovery position is built before the invoice is overdue: accurate quotes, clear payment triggers, named customer entities, prompt invoices, delivery evidence, and a consistent escalation owner.

Starting work before payment triggers are agreed

A deposit, milestone, or acceptance process is easiest to negotiate before delivery starts. Once the work is complete, the customer has less incentive to resolve vague payment wording.

Letting disputed extras stay informal

Scope creep should be priced and approved in writing. If extra work is handled through calls and goodwill, the business may struggle to prove why the invoice increased.

Threatening court action too early

A premature or inaccurate threat can damage credibility. Build the evidence pack first, check the debtor details, and use a measured letter before action when escalation is realistic.

Late Payment Of Commercial Debts

Late payment is a legal and cash-flow issue. Clear payment terms should exist before work starts. For qualifying business debts, statutory interest and fixed compensation may be available, and commercial leverage improves when the invoice, contract, delivery evidence, and due date are organised.

Debt Recovery Process

A sensible process moves from invoice to reminder, formal demand, letter before action, and only then claim escalation. That sequence helps preserve relationships while showing the debtor that the business is organised and serious.

Letters Before Action

A letter before action matters because it frames the claim, evidence, deadline, and proposed next step. It should be accurate, proportionate, and supported by documents. Aggressive but unsupported threats can weaken credibility.

Small Claims Process

Escalation may be considered when the debt remains unpaid and the evidence supports the claim. Businesses should avoid empty threats: if court action is mentioned, the business should understand cost, time, evidence, and enforcement realities.

Practical escalation checklist

  1. 1Check the contract, purchase order, quote acceptance, credit terms, and any dispute clause before taking a position.
  2. 2Confirm the invoice is accurate, due, sent to the right legal entity, and supported by the correct VAT, PO, and payment details.
  3. 3Collect emails, purchase orders, delivery evidence, acceptance notes, timesheets, call notes, and any customer sign-off in one evidence pack.
  4. 4Send a polite reminder that preserves the commercial relationship and asks the customer to identify any genuine dispute immediately.
  5. 5Escalate internally: decide who owns the chase, what settlement authority exists, and whether further work should be paused.
  6. 6Send a formal demand if the invoice remains unpaid, stating the sum due, the basis of the claim, the deadline, and the next step.
  7. 7Calculate statutory interest and fixed compensation if the late-payment regime applies, and explain the calculation clearly.
  8. 8Send a letter before action only when escalation is a genuine option and the business is prepared to follow through.
  9. 9Consider claim escalation if the debtor still does not engage or pay, after weighing cost, evidence, enforceability, and commercial value.

WEBSITE COMPLIANCE

Website compliance and online trading

Online compliance is practical customer infrastructure. The goal is that customers understand who they are dealing with, what they are buying, how payment works, what cancellation rights apply, how data is used, and how complaints are handled.

Treat the website as a live sales process, not a static policy folder: review the checkout journey, renewal emails, cancellation screens, complaint responses, analytics tags, and marketing forms whenever the business changes how it sells.

Website Terms And Conditions

Website terms should mirror the actual site journey: who can use the site, what customers may do with content, how accounts work, what happens during outages, how complaints are raised, and what liability limits apply. Copying a competitor’s terms is risky because their payment flow, returns process, subscription model, jurisdiction, and risk appetite may be different.

Privacy Policies

If a site collects enquiries, runs analytics, takes payments, manages accounts, sends marketing, or uses third-party tools, users need clear privacy information that reflects the real data flows. Map forms, CRM fields, payment processors, analytics tags, mailing lists, support tools, and retention periods before publishing policy wording.

Cookie Compliance

Cookie wording should match the tracking, analytics, advertising, chat, embedded media, and consent tools actually deployed. A common failure is claiming users can choose while non-essential cookies fire before consent, or leaving old tags live after a marketing campaign ends.

Checkout Wording And Refunds

Checkout screens should make price, tax, delivery, renewal, cancellation, refund limits, digital-content access, and complaint routes clear before purchase. Ambiguous wording drives chargebacks, support tickets, refund demands, and poor review responses.

Consumer Contracts

Businesses selling to consumers online need clear pricing, delivery, cancellation, returns, complaint, and business identity information. Customer service scripts, receipts, FAQs, and cancellation emails should match the terms so the business does not promise one thing on the website and another in support.

Online Subscription Risks

Subscriptions create recurring revenue, but renewal ambiguity creates dispute risk. Terms and checkout copy should explain billing frequency, trial conversion, renewal dates, cancellation steps, minimum commitment, price changes, failed payments, and whether cancellation takes effect immediately or at period end.

Marketing Consent

Email and SMS growth should not outrun consent records. Keep sign-up wording specific, separate service messages from marketing, record when and how consent was collected, and make unsubscribe routes easy to use.

Customer Complaints

Complaints handling is part of compliance. Give support teams a simple process for logging the issue, preserving order evidence, applying refund rules consistently, and escalating legal or data-protection complaints before responses become inconsistent.

INTELLECTUAL PROPERTY

Protecting intellectual property

IP protection is most useful when it is operational. Know who created each asset, what the business can do with it, where the source files sit, and which contracts prove ownership before a launch, investment round, sale, rebrand, or dispute forces the issue.

Website Content And Brand Assets

Website copy, images, videos, landing pages, product descriptions, guides, and design systems are commercial assets. Keep a register of who created each asset, where source files are stored, which licence applies, and whether the business can reuse the asset across channels, ads, investor decks, and future websites.

Branding And Logos

Brand names, logos, product names, and service names can become core business assets. Before spending on packaging, ads, domains, or signage, check ownership, clearance, domain control, social handles, and whether trade mark registration is commercially sensible. Supplier contracts should stop agencies registering or reusing confusingly similar branding.

Software And Source Code

For software, the practical issue is not just copyright ownership. The business needs access to repositories, deployment credentials, documentation, open-source notices, third-party licences, maintenance obligations, and a right to continue using the product if the developer relationship ends.

Agency And Freelancer Work

Commissioned creative, software, marketing, and design work should not be left to assumption. The contract should state what is delivered, when ownership transfers, whether source files and editable files are included, what pre-existing materials remain with the supplier, and whether portfolio use is allowed.

Confidential Information

Pricing models, supplier terms, client lists, processes, unpublished product plans, pitch decks, and code repositories may not be registered IP, but they can be commercially sensitive. Use NDAs before disclosure, limit access internally, and remove permissions promptly when staff, contractors, or agencies leave.

Ownership Disputes And Due Diligence

IP gaps often surface during investment, sale, rebrand, funding, or a product launch. Missing assignments, unlicensed images, agency-retained source files, and unclear freelancer rights can delay deals or force expensive rework. Deal with ownership at the start of each engagement, not during due diligence.

RISK MANAGEMENT

Biggest legal risks facing small businesses

Founder disputes

Risk: Founders assume goodwill will cover unequal effort, new investment, side projects, salary pressure, or one person wanting to leave.

Likely consequence: Decision paralysis, investor concern, blocked exits, and damage to customer or supplier confidence.

Mitigation: Agree shareholder rules, reserved matters, leaver provisions, transfer restrictions, deadlock processes, and properly recorded company decisions before conflict starts.

Unpaid invoices

Risk: The business relies on informal payment promises and only gathers evidence after the customer stops engaging.

Likely consequence: Cash-flow pressure, wasted management time, weakened supplier relationships, and reduced ability to invest.

Mitigation: Agree payment terms, invoice promptly, store delivery evidence, chase consistently, pause further work where justified, and use formal escalation when the debt is genuinely ready.

Employee claims

Risk: Managers handle performance, misconduct, grievances, flexible working, or redundancy through informal decisions that are not evidenced.

Likely consequence: Tribunal exposure, legal cost, management distraction, and reputational damage.

Mitigation: Issue contracts, use fair procedures, train managers, keep proportionate records, and handle grievances and discipline consistently.

GDPR and privacy failures

Risk: Data collection grows through forms, analytics, CRMs, marketing tools, and payment processors without one owner checking the full journey.

Likely consequence: Regulatory complaints, customer distrust, client-contract issues, and poor data handling discipline.

Mitigation: Map personal data, publish accurate privacy information, restrict access, review processors, and align marketing and cookies with consent rules.

Weak contracts

Risk: A generic template is reused for deals with different scope, pricing, IP, cancellation, delivery, or liability positions.

Likely consequence: Unclear scope, uncapped liability, payment uncertainty, termination disputes, and poor leverage.

Mitigation: Use role-specific contracts, tailor commercial schedules, set change-control rules, and update documents as products, services, or legal requirements change.

Freelancer ownership disputes

Risk: The business pays an invoice but never secures source files, editable files, assignment wording, third-party licences, or portfolio-use limits.

Likely consequence: Blocked product launches, rework, takedown threats, and uncertainty during due diligence.

Mitigation: Use written IP clauses, scopes of work, source-file requirements, acceptance processes, and assignment documents where transfer is needed.

Customer disputes

Risk: Website, checkout, invoice, refund, and support wording say different things about what the customer bought or can cancel.

Likely consequence: Refund demands, bad reviews, chargebacks, and support escalation.

Mitigation: Use clear terms, transparent checkout flows, documented complaints handling, consistent support scripts, and realistic promises.

Undocumented business relationships

Risk: Referral partners, suppliers, consultants, or collaborators act without written authority limits, deliverables, confidentiality, fees, or exit mechanics.

Likely consequence: Profit-sharing arguments, unclear authority, and liability for commitments one person made.

Mitigation: Record commercial relationships, authority limits, deliverables, confidentiality, payment triggers, data responsibilities, and exit mechanics.

CHECKLIST

Small business legal checklist

Business ActivityRecommended DocumentWhy It Matters
Hiring staffFirst employee hiring guideHelps plan the role, offer, contract, right to work checks, payroll, pension, policies, onboarding, and probation.
Using freelancersFreelance AgreementDefines scope, fees, IP, confidentiality, status, deadlines, and acceptance.
Launching a websiteWebsite termsExplains site rules, customer journey, liability, complaints, and online trading terms.
Taking customer paymentsCustomer termsReduces disputes about price, delivery, cancellation, refunds, and failed payments.
Bringing in investorsShareholders AgreementControls voting, transfer rights, exits, reserved matters, and founder protection.
Protecting confidential informationNDASets boundaries before disclosing sensitive commercial information.
Chasing unpaid invoicesLate Payment Letter Before ActionCreates a formal escalation step supported by evidence and payment calculations.
Starting with co-foundersShareholders AgreementPrevents avoidable arguments about ownership, exits, deadlock, and decision making.
Minority shareholder sale disputeForced sale guideExplains why forced transfers need clear articles, shareholders agreement wording, leaver terms, drag rights, valuation, or a court route.
Engaging consultantsConsultancy AgreementRecords deliverables, fees, independence, confidentiality, IP, and termination.
Handling flexible working requestsFlexible Working PolicyGives managers a consistent process and helps record business reasons.
Managing disciplinary issuesDisciplinary PolicySupports fair investigation, hearings, sanctions, and appeals.
Handling grievancesGrievance processHelps identify complaints, investigate proportionately, and respond in writing.
Recording company decisionsBoard minutes or written resolutionsCreates governance evidence for directors, investors, lenders, and buyers.
Protecting commissioned workIP Assignment DeedCan transfer rights in commissioned assets where assignment is needed.
Setting payment milestonesScope of WorkLinks deliverables, acceptance, dates, dependencies, and staged payments.
Selling onlineWebsite terms and privacy policySupports transparent checkout, cancellation, data, and customer service processes.
Preparing for redundancyRedundancy pay calculatorHelps estimate statutory redundancy pay alongside a fair consultation process.
Handling customer complaintsCustomer complaints processKeeps responses consistent, evidence-led, and commercially sensible.

TOOLKIT

Recommended legal toolkit

A practical SME toolkit combines commercial contracts, HR documents, debt recovery resources, governance documents, and online compliance materials. Start with the resources below, then adapt the toolkit around how the business hires, sells, handles data, and protects assets.

Browse all documents

Shareholders Agreement

For founders, investors, share transfers, reserved matters, deadlock, exits, and ownership protection.

Open resource →

Employment Contract

For setting written employment terms and aligning HR practice with current legal changes.

Open resource →

Freelance Agreement

For scope, payment, IP, confidentiality, status, deadlines, and delivery controls.

Open resource →

Consultancy Agreement

For professional advisory or project engagements where independence and deliverables matter.

Open resource →

NDA

For controlled disclosure of sensitive commercial information before or during negotiations.

Open resource →

Website Terms

Recommended for online trading, checkout wording, account rules, refunds, complaints, and site-use controls.

Privacy Policy

Recommended where personal data is collected through enquiries, analytics, CRM tools, payments, accounts, or marketing.

Letter Before Action

For formal escalation of an unpaid commercial invoice where court action may be considered.

Open resource →

Debt Recovery Process

Recommended as part of a staged credit-control process before a formal letter before action or claim.

Late Payment Interest Calculator

For estimating interest and compensation on qualifying late commercial payments.

Open resource →

FAQs

Frequently asked questions

Most UK small businesses should consider written contracts for staff, freelancers, consultants, customers and suppliers, plus shareholder documentation, confidentiality protection, payment terms, website compliance documents, and debt recovery templates. The exact set depends on how the business sells, hires, handles data, owns IP, and works with others.

Build your legal operating system before the dispute.

Bracton helps UK SMEs move from informal arrangements to practical written documents for hiring, freelancing, governance, confidentiality, IP, and debt recovery.