Pre-Sale Non-Disclosure Agreements (NDAs): Templates and Tips

If you're considering selling your business or seeking investment, you’ll need to share sensitive information with potential buyers or backers. But how do you protect your trade secrets, customer lists, and financials from being misused or leaked? That’s where a well-drafted Non-Disclosure Agreement (NDA) comes in. In this comprehensive guide, we’ll walk you through everything UK small business owners need to know about pre-sale NDAs: why they matter, what pitfalls to avoid, and how to use templates effectively—plus tips for negotiating terms that actually protect your business.

When you start speaking with potential buyers or investors, you’ll quickly realise they want to see the real guts of your business—customer contracts, supplier terms, profit margins, maybe even your intellectual property details. Sharing this information can be risky. Without an NDA, you essentially have no legal recourse if they use your confidential information to compete with you, poach your staff, or tip off rivals. That’s why, in the UK, a Non-Disclosure Agreement is a standard first step in most business sale or investment negotiations.

An NDA is a legally binding contract that obliges the recipient to keep specific information confidential and limits what they can do with it. While verbal assurances might seem friendly, they’re not enforceable in UK courts. Having a signed NDA gives you real leverage if things go wrong—allowing you to seek damages or an injunction if your confidential data is misused. This is especially crucial for small businesses, where one leak can destroy competitive advantage or derail a deal.

UK law does recognise a general duty of confidentiality in some situations, but it’s patchy and hard to prove. A properly worded NDA, tailored to your specific business and the transaction at hand, makes it clear exactly what’s protected, for how long, and what happens if the agreement is breached. This clarity is what gives buyers confidence to receive your information—and gives you confidence to share it.

• Protects trade secrets, customer lists, and financial details from being leaked or misused
• Establishes legal recourse if confidential data is disclosed or exploited
• Sets clear expectations with buyers or investors before serious talks begin
• Builds trust and professionalism in the transaction process

Not all NDAs are created equal. Some are so vague they’re unenforceable; others are overly broad and put off genuine buyers. In the UK, a good pre-sale NDA needs to be clear, reasonable, and tailored to the business sale context. Here’s what every NDA should include:

First, it must clearly define what counts as ‘confidential information’. This should be specific—think customer lists, pricing, contracts, trade secrets, business plans, and financial records. Avoid blanket definitions like ‘all information’ as UK courts may strike these down for being too vague. Exclusions are equally important: information that’s already public, received from a third party, or developed independently shouldn’t be covered.

Next, the NDA should lay out the permitted purpose—usually limited to evaluating the business for a potential sale or investment. It should also set out who can access the information on the buyer’s side (e.g., employees, advisors) and require them to sign up to the same obligations. Duration is key: too short and you risk exposure; too long and buyers may object. In the UK, 2-5 years is typical, but it depends on the type of information and industry.

• Definition of confidential information (specific, not blanket)
• Permitted use (e.g., evaluation for acquisition or investment only)
• Obligations not to disclose or misuse information
• Limits on sharing with employees, advisers, affiliates
• Duration of confidentiality (2–5 years typical in the UK)
• Exclusions (public domain, already known, independently developed)
• Return or destruction of documents after negotiations end
• Remedies for breach (injunction, damages, costs)

There’s no shortage of NDA templates online, but not all are suitable for UK small business sales. Many generic templates are written for the US or international markets and may reference non-UK law, irrelevant statutes, or unenforceable terms. This can be fatal if you ever need to rely on your NDA. Always use a template that’s specifically drafted for UK jurisdiction—ideally, England and Wales, unless you’re in Scotland or Northern Ireland, in which case check for local legal nuances.

Good starting points include GOV.UK’s sample NDAs, the British Business Bank’s practical templates, and reputable UK law firms or business networks. But a template is just that—a starting point. You must tailor it to your transaction: fill in details like parties, purpose, duration, and the specific types of information you’re protecting. Failing to customise a template is one of the most common mistakes UK business owners make.

If your deal is complex, involves sensitive IP, or you’re dealing with a powerful counterparty (such as a large private equity buyer), it’s wise to have a solicitor review the NDA before you share anything confidential. The upfront cost (£250–£750+ VAT for basic review) is small compared to the risk of a loophole or unenforceable clause. Remember, once the genie is out of the bottle, you can’t put it back in.

• Use a UK-specific NDA template (not a US or generic version)
• Customise for your business, deal, and type of information
• State the governing law and jurisdiction (e.g., England & Wales)
• Get legal review for complex or high-value deals
• Never share confidential info before both parties have signed

While most credible UK buyers and investors will sign an NDA as a matter of course, they may push back on certain terms. It’s important to anticipate these objections and know where you can flex—and where you shouldn’t. For example, buyers may object to definitions that are too broad or obligations that last forever. They’ll also push for reasonable carve-outs, such as being able to disclose to their professional advisers (accountants, solicitors) or exclude information they already know.

Another flashpoint is the duration of confidentiality. Buyers rarely agree to indefinite terms; 2–3 years is standard for most UK deals. For very sensitive information (like unique technology or trade secrets), you might push for longer, but be prepared to explain why. Likewise, investors will want to ensure the NDA doesn’t block them from investing in other, similar businesses in future—watch for ‘no poach’ or ‘non-compete’ clauses sneaking into your NDA, as these are often unenforceable under UK law and can stall negotiations.

Finally, be wary of NDAs that require you to warrant the accuracy of your information or accept liability for indirect losses. These clauses can backfire badly. The goal is to protect your secrets, not guarantee the buyer’s success. Always read the small print and get legal advice if you’re unsure.

• Definition of confidential information—too broad or too narrow
• Duration of obligation—balance between protection and practicality
• Permitted disclosures—to professional advisers, affiliates, or group companies
• Return or destruction of information after talks end
• Exclusions for already-known or independently developed information
• No-poach and non-compete clauses—usually not enforceable or necessary

Getting an NDA in place should be one of the first steps before sharing any non-public information with a potential buyer or investor. In the UK, this process is straightforward but needs to be handled professionally. Start by explaining to the other party that you have a standard confidentiality agreement, and it’s your policy to put it in place before discussions go further. Most serious buyers and investors will expect this and won’t see it as a red flag.

Send the NDA draft early—ideally before any detailed information packs, financials, or customer data are shared. Allow the other party to review and suggest amendments, but stand firm on the core protections. Once both sides are happy, sign electronically or in hard copy. Keep a signed copy for your records and do not release any confidential information until you have it.

After signing, clearly mark all confidential documents and communications as ‘Confidential – Subject to NDA’. If you’re sharing information via a data room, ensure access is restricted and logged. When negotiations end—either successfully or because a deal falls through—promptly request return or destruction of all confidential documents, as specified in the agreement. This helps enforce the NDA’s terms and demonstrates a professional approach.

No one likes to think about a trusted buyer or investor breaking their promise, but NDA breaches do happen in the UK—especially in competitive sectors. If you suspect a breach (e.g., your customer list surfaces elsewhere), the first step is to gather evidence and check the NDA terms. Look for clauses on remedies: most well-drafted NDAs will allow you to seek an injunction (a court order to stop the leak), damages for losses suffered, and recovery of legal costs.

The UK courts take breaches of confidentiality seriously, but you’ll need to show (a) the information was genuinely confidential, (b) the NDA covered it, and (c) the recipient misused or disclosed it. This is why it’s so important to clearly mark documents and keep good records of what was shared, when, and with whom. If you do go to court, you may be able to get an urgent interim injunction within days to stop further misuse, as well as damages for losses (although these can be hard to quantify).

In practice, most NDA breaches are settled out of court. A solicitor’s letter threatening legal action is often enough to stop further disclosure and negotiate compensation. If you need to escalate, commercial litigation in the UK can be expensive (£10,000s+), so weigh the cost and likelihood of success. For most small businesses, the real value of an NDA is as a deterrent—making buyers and investors think twice before crossing the line.

Despite their widespread use, NDAs are often misunderstood or misapplied by UK small business owners. One common mistake is relying on a generic or US-based template, which may be unenforceable here. Another is failing to tailor the NDA to your specific business or transaction—leaving loopholes or ambiguous definitions that make enforcement tricky.

Many owners also overestimate what an NDA can do. An NDA won’t stop a determined party from misusing information if they think they won’t get caught; it’s not a magic shield. Nor can it prevent a buyer from using general know-how or skills acquired during talks, as these are usually excluded. And while you can include non-compete or no-poach clauses, these are rarely enforceable in the UK unless they’re very tightly drafted and justified.

Finally, a signed NDA is only useful if you actually follow up when there’s a breach. Too many owners shy away from enforcing their rights, fearing legal costs or confrontation. While court action is a last resort, a strongly worded solicitor’s letter is often enough to get results. Don’t let inertia or embarrassment stop you from protecting your business.

• Using non-UK or generic templates that lack UK legal grounding
• Failing to specify what is confidential and what is not
• Not marking documents as confidential when sharing
• Letting buyers access information before the NDA is signed
• Assuming an NDA bans all use of knowledge, not just confidential information
• Ignoring post-negotiation follow-up (return/destruction of data)

NDAs are just one piece of the puzzle when selling your business or seeking investment in the UK. They typically come just after initial expressions of interest and before you share any detailed information (like financials or commercial contracts). A well-handled NDA process sets the tone for the rest of the deal—demonstrating professionalism and protecting your negotiating position.

Once an NDA is in place, you’ll typically move to providing an information memorandum, financial statements, and perhaps access to a data room. If talks progress, you’ll negotiate heads of terms (a non-binding agreement outlining the main deal points), followed by thorough due diligence. At every stage, the NDA remains your backstop—buyers and investors are still bound to keep information confidential, even if the deal falls through.

It’s also worth noting that for certain regulated sectors (e.g., financial services, healthcare) or if your business handles personal data, there may be additional confidentiality or data protection requirements. An NDA won’t override your obligations under the UK GDPR or sector-specific laws—you’ll need to ensure buyers or investors are aware of their responsibilities if data is shared.

• NDAs come before the release of detailed business information
• Followed by information packs, heads of terms, due diligence, and contracts
• Confidentiality obligations usually survive the end of negotiations
• Additional data protection duties may apply in regulated sectors