5 HR Policies every small business needs (and doesn't always have)
When a small business owner gets in touch with me for the first time, it's rarely to ask for a policy. It's usually because something has already gone wrong. Perhaps an employee has taken time off with no clear return date, or two members of staff have fallen out and there's no process to fall back on. Or maybe a disciplinary situation has escalated because nobody followed a fair procedure, simply because there wasn't one to follow.
In almost every case, a short, clearly written policy would have prevented the problem, or at least made it far easier to handle fairly. You don't need fifty employees before you need HR policies, you need them the moment you take on your first one.
Why policies matter, even with a small team
Policies aren't red tape for red tape's sake. They protect the business legally, they give employees clarity on what's expected of them, and they save you from having to make up a fair process from scratch under pressure, in the middle of a difficult situation. A written policy also signals to your team that you take their working environment seriously, which matters just as much when you're small as when you're a big employer.
The five policies every small business should have
A Health & Safety policy: even in an office or hybrid environment, you have a legal duty of care to your employees. This is a legal obligation when you have 5 or more employees but at any stage, it shows you've thought about risk and taken reasonable steps.
Disciplinary & Grievance procedures: under the Employment Rights Act 1996, it is a legal requirement for employers to provide clear disciplinary and grievance handling processes that align with the ACAS Code of Practice. These are important to set out the fair process for handling conduct issues, and for providing a route for employees to raise concerns.
An Equal Opportunities policy: provides a statement of intent that you treat people fairly regardless of background, have a framework to prevent discrimination, and a process for anyone who feels that hasn't happened.
A Data Protection or Privacy policy: covers how you collect, store and use personal data about staff and customers, and what happens if something goes wrong. Under the UK GDPR and Data Protection Act 2018, it is a legal requirement for employers to inform staff and individuals how their personal data is collected, used, and secured.
Getting started
You don't need all five perfect on day one, but you do need a plan to get there. Start with whichever policy addresses your biggest current risk, usually disciplinary and absence for growing teams, and build out from there.
Ready to take the next step? If you'd like a hand putting these in place without starting from a blank page, my HR policy templates are a good starting point, or get in touch for a free policy audit.

