Health, Safety, and Safeguarding Policies for Small Teams

If you run a small business in the UK, health, safety, and safeguarding aren’t just tick-box exercises – they’re essential to protecting your people, your reputation, and your bottom line. But what does the law actually require for small teams? How do you put sensible, practical policies in place without drowning in paperwork? This guide breaks down what you must do, what’s best practice, and how to design policies that genuinely work for smaller businesses.

Every UK employer, regardless of size, has a legal duty to ensure the health, safety, and welfare of employees and anyone affected by their work. This is primarily set out in the Health and Safety at Work etc. Act 1974. Small teams are not exempt, though the approach can be simpler. If you have five or more employees, you must have a written health and safety policy. Even with fewer than five, it’s strongly recommended to document your approach.

Safeguarding is most relevant if your business works with children, young people, or vulnerable adults. The Children Act 1989 and Care Act 2014 set out your responsibilities. While not all businesses legally require a safeguarding policy, regulators (such as Ofsted or the Charity Commission) and clients often expect one if you work in relevant sectors. The Information Commissioner's Office (ICO) also expects policies covering data protection around vulnerable groups.

You also need to consider sector-specific regulations. For example, food businesses must comply with the Food Standards Agency hygiene rules. If your team works with hazardous substances, COSHH (Control of Substances Hazardous to Health) applies. The Health and Safety Executive (HSE) is the main regulator, and ACAS provides guidance on workplace policies.

• Written health and safety policy required if you employ five or more people
• Risk assessments must be carried out and acted upon, regardless of team size
• Safeguarding policy essential if you work with children or vulnerable adults
• Sector-specific rules may add extra requirements (e.g. food, construction)

A robust health and safety policy for a small team need not be a huge document – but it must be clear, practical, and tailored to your actual risks. The HSE recommends three core sections: a statement of intent (your commitment), responsibilities (who does what), and arrangements (how risks are managed in practice).

Your policy should start with a clear statement from the most senior person in the business, confirming your commitment. Next, define who is responsible for what – even in a very small team, it’s important to clarify who oversees health and safety, who conducts risk assessments, and who deals with incidents. For sole traders, this will be you.

The arrangements section is where you detail practical steps: how you identify hazards, carry out risk assessments, provide training, maintain equipment, and ensure first aid provision. Include procedures for reporting accidents, near misses, and unsafe conditions. Ensure your policy covers remote work, lone working, or any off-site activities – common in small businesses.

• Include specific arrangements for lone working if relevant
• Detail fire safety procedures, even if you share premises
• Name the person responsible for first aid supplies
• Describe how staff raise concerns or hazards

Safeguarding policies are vital for any business working with children, young people, or adults at risk. This includes nurseries, education providers, care services, charities, sports clubs, and some health and leisure businesses. Even if safeguarding isn’t your core activity, you may need a policy if you run events, training, or outreach involving vulnerable groups.

A safeguarding policy must clearly define what safeguarding means in your context, your commitment to protecting vulnerable people, and the steps your business takes to prevent harm. It should set out how to recognise signs of abuse or neglect, how concerns are reported and escalated, and what training staff receive. Include clear contact details for the person responsible for safeguarding (the 'Designated Safeguarding Lead'), and how to contact local authorities or the police.

Policies should also address safer recruitment (DBS checks for relevant staff), information sharing, confidentiality, and whistleblowing. You may need to reference the Disclosure and Barring Service (DBS), your local authority safeguarding board, and sector-specific regulators (e.g. Ofsted for childcare, Care Quality Commission for adult care).

• Define 'vulnerable groups' in the context of your business
• Set out steps for reporting and escalating safeguarding concerns
• Clarify what training is given and how often it’s refreshed
• Explain how you handle confidential information related to safeguarding

Writing a policy isn’t just about compliance – it’s about creating a document that works in practice for your team. Start by assessing the real risks in your business. Walk through a typical workday and identify where things could go wrong. Involve your team in this process: frontline staff often spot hazards or scenarios owners miss.

Once you’ve drafted your policy, communicate it clearly. For a small team, this might mean going through it in a team meeting, answering questions, and ensuring everyone understands their role. Make sure staff know where the policy is kept (paper copy, shared drive, or online portal) and how to access it at any time.

Review your policies at least annually, or whenever there’s a significant change – such as moving premises, growing your team, or introducing new equipment or activities. Keep a record of when you review and update the policy, and involve your team in the process to ensure it remains relevant.

• Use real-life scenarios in training to make policies memorable
• Store policies where staff can access them easily (digital or paper)
• Encourage staff to suggest improvements based on their experience
• Record when policies are reviewed and who was involved

One of the most frequent mistakes small businesses make is assuming that informal arrangements are enough. Verbal agreements and common sense are no substitute for a written policy when something goes wrong. Another common error is copying generic templates without adapting them to your actual risks or ways of working.

Failing to review and update policies is equally risky. The workplace, team, and legal environment change – your policies need to keep up. It’s also common to overlook less obvious risks, such as work-related stress, lone working, or safeguarding in digital interactions (e.g., online training, remote consultations).

Finally, not communicating policies effectively means staff may not know what to do in an emergency or when faced with a safeguarding concern. Don’t assume people will read and absorb a policy without engagement – active training and regular discussion are vital.

• Don’t treat health and safety as a one-off exercise – review regularly
• Avoid generic, copy-paste policy templates
• Include all relevant risks, including mental health and lone working
• Make policies accessible and actionable for all staff

For most small businesses, you can write your own policies using HSE and sector guidance. However, if your risks are complex – hazardous chemicals, high-risk machinery, or intensive safeguarding – it’s wise to get expert advice. This can come from a qualified health and safety consultant, your trade association, or through government-supported schemes like the British Safety Council’s ‘Speak Up Stay Safe’.

When working with children or vulnerable adults, you may need to consult your Local Authority Designated Officer (LADO) for safeguarding. Many local councils offer free or low-cost safeguarding training for small businesses. The Federation of Small Businesses (FSB) and ACAS also provide helplines and template resources.

If you’re inspected by the HSE, Ofsted, or another regulator, having evidence that you sought professional advice can mitigate enforcement action. It also reassures clients and contract partners, many of whom now require evidence of robust policies as part of due diligence.

• Use HSE’s free policy templates as a starting point
• Join FSB or similar bodies for policy support and templates
• Contact your local authority for safeguarding training and guidance
• Keep records of any external advice or training received

A policy is only useful if it’s alive and embedded in your day-to-day operations. Set a clear review date in your policy (at least annually), and trigger a review whenever there’s a significant change – a new premises, new team member, or following an incident or near miss. Record who reviews the policy and what changes are made.

Embedding policies means making them a regular part of how you work. This could include adding a health and safety or safeguarding update to your team meetings, doing short refresher briefings, or including policy summaries in new starter inductions. Encourage staff to report concerns or suggest improvements – and act on their feedback.

If you operate in a regulated sector, keep up with changes to legislation and regulator guidance. Subscribe to updates from HSE, your local authority, or sector body. A policy that’s out of date is almost as bad as having none at all when it comes to enforcement and liability.

• Set calendar reminders to review policies annually
• Include policy training in your onboarding checklist
• Use team meetings to discuss real incidents and learnings
• Keep a log of when policies are updated and by whom