Legal Documents for Small Business in the UK: The Essential Set for 2026
TL;DR: The legal documents for small business United Kingdom owners actually need come to seven, and they arrive in a predictable order as the business grows. Two of them are not documents you draft at all but registrations, including with Companies House. This sets out the seven, ranks them by priority, and explains how to produce the set.
Rising small business formation is keeping this a consistently high-volume search category in the UK through 2026. Most checklists answering it list categories in the abstract and stop, leaving you with a list of things you do not have and no way to get them.
This one is ordered by when you actually need each item, because trying to produce all seven at once is how none of them get done.
7 Documents Every Small Business Needs
Your incorporation and registration records. Not drafted, but foundational. A UK company is incorporated at Companies House, which issues the certificate of incorporation, and the company's registered name and number come from that record. Every contract you sign should use them exactly. If you are trading as a sole trader instead, you register for self assessment with HMRC rather than incorporating.
Customer terms and conditions. The contract between you and everyone who buys from you. Whether for a website, an app, a product business or a service business, this governs more relationships than any other document you have, and it is where the Consumer Rights Act 2015 and UK GDPR both bite. Most small businesses copy someone else's without reading it.
A privacy notice, and your data position. Often forgotten because it is not a contract. If you process personal data you need a privacy notice, a lawful basis for each processing activity, and in many cases registration with the Information Commissioner's Office and payment of the data protection fee. Where a supplier processes data on your instructions, a written processing agreement is a legal requirement.
A confidentiality agreement. Needed earlier than owners expect, because it comes before everything else: the contractor you are about to brief, the supplier you are about to show numbers to, the partnership conversation.
Employment contracts. From the first hire. The section 1 written statement of particulars under the Employment Rights Act 1996 is a day-one right, and pension auto-enrolment duties attach separately. The contract records the deal above the statutory floor.
Contractor and freelance agreements. Distinct from employment contracts, and the distinction matters more than the paperwork suggests, because status is judged on the reality of the relationship and English law recognises employee, worker and self-employed.
Supplier terms, and a lease if you take premises. What you buy, on what terms, with what remedies. And if you take premises, a lease, where Stamp Duty Land Tax may apply on qualifying leases and the drafting is only part of the job.
The document that is not on the list. A shareholders' agreement, if you have co-founders. It is left off deliberately because it does not belong on a self-serve checklist. It decides what happens when founders disagree, and it is the single document where getting it wrong is discovered years later, when it cannot be fixed. Take advice on that one.
Which to Prioritise First
Priority | Document | Trigger | Cost of not having it |
|---|---|---|---|
1 | Registration records | Before trading | Contracts naming an entity that does not exist |
2 | Confidentiality agreement | Before the first outside conversation | Information disclosed with no protection, unrecoverable |
3 | Customer terms | Before the first sale | No agreed terms, unlimited exposure, disputes about what was promised |
4 | Privacy notice and ICO position | Before collecting personal data | Regulatory exposure, and a legal duty you are simply not meeting |
5 | Employment contract | Before the first hire | Statutory entitlements apply anyway, plus disputes about the terms above them |
6 | Contractor agreement | Before the first freelancer | Ownership of work product defaults away from you |
7 | Supplier terms and lease | Before committing spend or premises | You are on their terms, whatever those are |
The ordering principle is not importance, it is irreversibility. Confidentiality ranks high because information disclosed without protection cannot be un-disclosed. Customer terms rank above employment contracts because sales usually start before hiring, and every sale made on no terms is an exposure you cannot retrospectively fix.
The two most commonly missed
Intellectual property assignment from contractors. Under the Copyright, Designs and Patents Act 1988 the author is the first owner, so a commissioned work belongs to the contractor unless assigned, and an assignment must be in writing signed by them. Small businesses routinely believe they own logos, code and designs they paid for, and frequently they do not. Easy to fix at engagement, awkward afterwards when the contractor has no particular reason to cooperate.
Employers' liability insurance. Compulsory for most employers, with penalties for not holding it, and not part of a standard business policy by default. It is not a document you draft, which is exactly why it gets forgotten.
5 Steps to Generate Your Full Set
Confirm your own details first. Registered company name and number from Companies House, registered office, and your VAT position if registered. Every document uses these, so an error propagates through the whole set.
Work down the priority table, not across the list. Produce document one, finish it, then move on. Attempting the full set in one sitting reliably produces seven half-finished drafts.
Generate each for England and Wales. Use guided tools where they exist, since they prompt for the facts that change clauses. Confidentiality agreements, employment contracts, leases, terms and conditions, non-compete agreements and equipment purchase agreements all have dedicated generators.
Keep the set consistent. Your customer terms, supplier agreements and contractor agreements should use the same governing law, the same entity name and compatible liability positions. Inconsistency across a set creates gaps no single document reveals.
Diarise and file. Renewal dates, notice deadlines and the annual filings your company owes, then store executed versions somewhere you will find them.
Getting the set consistent
One point checklists never make: your documents have to agree with each other.
If your customer terms cap your liability at the fees paid but your supplier agreements accept unlimited liability upstream, you carry the gap between them. If your contractor agreements fail to assign intellectual property while your customer terms promise clients ownership of that work, you have promised something you do not have. If different documents name different entities, or choose different governing law, you have created ambiguity about which company owes what.
None of these problems is visible inside any single document. They appear only when the set is read together, which almost never happens until a dispute forces it.
The compliance calendar nobody hands you
The document set is the visible half of a small business's legal position. The other half is recurring obligations, and they catch new owners because nothing prompts them.
Companies House. A confirmation statement each year, annual accounts, and updates when directors, shareholders or the registered office change. Late filing attracts automatic penalties.
HMRC. Corporation tax returns and payment, VAT returns if registered, PAYE real time information if you have employees, and self assessment for directors where required.
Pensions. Auto-enrolment assessment, contributions, and re-enrolment on a three-year cycle, with a declaration of compliance to the Pensions Regulator.
Data protection. The ICO fee where payable, and keeping your records of processing current.
Insurance. Employers' liability once you have staff, and whatever else your activity requires.
None are drafting tasks, which is exactly why a document checklist alone gives a false sense of completeness. Put the recurring dates in a calendar the day you incorporate, because the penalty regimes are unforgiving of good intentions.
FAQ
What legal documents does a UK small business need?
Registration records, customer terms, a privacy notice, a confidentiality agreement, employment contracts, contractor agreements, and supplier terms or a lease.
Do I need to register with the ICO?
Many organisations processing personal data must register and pay the data protection fee. Check your position rather than assuming you are exempt.
Do I own the logo my freelancer designed?
Not automatically. Under the Copyright, Designs and Patents Act 1988 it belongs to the designer unless assigned in writing and signed by them.
Which document should I produce first?
Your registration records, then a confidentiality agreement, then customer terms. The order follows what cannot be fixed retrospectively.
Do I need a shareholders' agreement?
If you have co-founders, yes, and it is the one document here worth taking advice on rather than generating.
The order matters more than the list
A closing observation, because most owners meet this checklist and feel behind.
You are not expected to have all seven on day one, and a business that stopped trading to produce a complete document set would be making a worse mistake than one trading with gaps. What matters is that the gaps are the ones you chose rather than the ones you did not notice.
The three that genuinely should not wait are your registration records, a confidentiality agreement before you talk to anyone, and customer terms before you sell to anyone. Those three are cheap, quick and cover the exposures that cannot be repaired after the fact. Everything else can follow the trigger in the table, produced when the event that needs it actually arrives.
Key takeaways
Seven documents cover the small business set, and two of them are registrations rather than drafting.
Prioritise by irreversibility: confidentiality and customer terms before employment and supplier documents.
Data protection obligations are a legal duty, not an optional extra, and often include an ICO fee.
Get a written, signed copyright assignment from every contractor, or you do not own the work.
Take advice on a shareholders' agreement; it is the wrong document to self-serve.
Generate your small business document set with Ask.Legal
This article is general information about the law of England and Wales as at 2026, not legal advice. For advice on your circumstances, consult a qualified solicitor.