A supplier meeting can quickly turn sensitive. You may need to reveal production costs, customer research or an unfinished product design before another company can give you a useful quote. A non-disclosure agreement helps a UK business share that information for a defined purpose without treating it as public property.
Usually called an NDA or confidentiality agreement, it creates contractual duties around information that one party receives from another. Protection depends on what the agreement covers, how information is handled and whether its restrictions are lawful.
When does a small business need an NDA?
Consider an NDA before discussing information that could cause commercial harm if copied, circulated or used outside the proposed relationship. Common situations include asking manufacturers to assess prototypes, inviting agencies to review unpublished marketing strategies, showing partners financial forecasts, or allowing contractors access to proprietary processes.
Not every introductory conversation requires one. Public product specifications and general descriptions rarely justify lengthy restrictions. Ask what you must reveal, to whom and why. Start with a high-level discussion, then sign the agreement before disclosing sensitive details.
The UK Intellectual Property Office recommends using an NDA when sharing confidential inventions or ideas with potential collaborators. It also advises considering professional help rather than assuming a conversation is confidential simply because it feels private.
Choose a one-way or mutual confidentiality agreement
One-way NDA
A one-way agreement protects information flowing mainly in one direction. For example, a bakery developing a packaging innovation may disclose its designs to a prospective manufacturer. The manufacturer receives confidentiality obligations, while the bakery does not necessarily receive equivalent information.
Mutual NDA
A mutual NDA makes sense when both sides exchange sensitive material. A software developer and a retailer exploring an integration might each share technical and commercial plans. Reciprocal terms can simplify negotiations, but each business should check whose information is covered and how it may be used.
The NDA clauses worth checking carefully
Identify confidential information clearly
Define the protected material, such as pricing models, source code, unpublished designs, customer lists or information identified as confidential during meetings. The definition can include verbal disclosures if the agreement explains how those are recorded or confirmed. An excessively vague reference to every conversation creates uncertainty.
Limit the permitted purpose and access
State precisely what the recipient may do with the information: perhaps evaluate a supply proposal, and nothing more. Limit access to people who genuinely need it, with appropriate confidentiality obligations on employees, advisers and authorised subcontractors. An NDA should not silently grant permission to exploit a design or use a customer database for marketing.
Include sensible exclusions
Well-drafted NDA clauses normally exclude information already public through no breach, already lawfully known to the recipient, independently developed without using protected material, or lawfully obtained elsewhere. They should also address disclosure required by law, regulation or a court, with notice to the owner where lawful and practicable.
Set duration, return and remedies
Distinguish the period in which information may be exchanged from the period confidentiality must continue. A three-year obligation may fit some commercial discussions, whereas genuine trade secrets may warrant longer protection while they remain secret. Cover return or secure destruction of materials, reasonable retention for legal or backup purposes, and what happens after talks end.
An agreement may allow a business to seek damages or an injunction for breach, but neither remedy is automatic. The facts, applicable law and evidence matter. Specify governing law and courts with care; England and Wales, Scotland and Northern Ireland do not have identical legal systems.
A practical example: sharing a product idea with a manufacturer
Imagine a Manchester-based skincare company seeking a contract manufacturer for a new dispenser. It wants accurate pricing but does not want the supplier using its drawings for another brand.
The company first describes the required capacity and materials without revealing the distinctive design. Before sharing detailed CAD files, it signs a one-way NDA naming the supplier, restricting use to quotation and feasibility assessment, and identifying authorised recipients. Each shared file is dated and labelled; the company retains emails recording what was disclosed.
If negotiations end, it requests return or deletion under the agreed terms. That sequence matters: an NDA signed after unrestricted disclosure may not solve everything, and a signed agreement is harder to enforce if nobody can establish what information the recipient received.
What an NDA cannot lawfully achieve
Commercial confidentiality is different from silencing misconduct. Employers must not use NDA wording to suggest workers cannot report crimes, make legally protected whistleblowing disclosures or exercise employment rights. Acas guidance also says agreements should not prevent workers reporting discrimination or harassment. Additional whistleblowing protection for qualifying disclosures about sexual harassment came into force on 6 April 2026.
Do not recycle a supplier NDA as an employee settlement agreement. The parties, legal protections and purpose are different. Employment-related restrictions deserve specialist advice, especially when misconduct allegations are involved.
An NDA is not a substitute for data protection compliance. If customer or employee personal data is shared, UK GDPR duties still apply. Where a service provider processes personal data on your behalf, a separate contract meeting applicable data-processing requirements may be necessary. Our guide to UK GDPR responsibilities can help frame those questions.
Common mistakes that weaken confidentiality protection
Downloading a generic NDA UK template and changing only company names is tempting. Problems appear later: the wrong legal entity signs, the permitted purpose allows unwanted reuse, or the agreement omits contractors receiving information. An indefinite restriction over ordinary public information can also be difficult to justify.
Equally risky is treating the document as the whole security plan. Restrict shared folders, use access controls, keep disclosure records and remove permissions after discussions. If a proposal becomes a commercial relationship, the final contract should preserve necessary confidentiality terms. See our overview of business contract terms for the wider contractual picture.
Frequently asked questions
Is an NDA legally binding in the UK?
It can be, provided it satisfies the relevant requirements for an enforceable agreement and its terms are lawful. Written signatures and clear wording make obligations easier to evidence, but signing alone does not make every restriction enforceable.
How long should an NDA last?
There is no single standard term. Choose a duration reflecting the information’s sensitivity and commercial life. An adviser can help distinguish ordinary business information from trade secrets needing longer-lasting protection.
Can I use a free NDA template?
A template is a useful starting point for straightforward discussions. Check the parties, purpose, exclusions, duration, disclosure requirements and governing law. High-value technology, cross-border arrangements and employee matters often justify tailored legal advice.
Does an NDA protect an idea from being copied?
It can restrict a recipient’s use or disclosure of confidential details, but does not create ownership of an invention or replace patents, copyright, design rights or other intellectual property protections. Decide which protection fits before making a sensitive disclosure.
Conclusion
A non-disclosure agreement gives UK businesses a practical way to explore opportunities without giving away sensitive commercial information. Keep terms proportionate, sign before revealing important details and control access afterwards. For valuable secrets or complicated relationships, a solicitor can help ensure the document protects what genuinely needs to remain confidential.