Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
- What Are CSR Activities (And What Counts For Small Businesses)?
Legal Considerations When Running CSR Activities In The UK
- 1) Be Careful With Marketing Claims (Avoid “Greenwashing” And Misleading Statements)
- 2) Charity Fundraising: Get The Structure Right
- 3) Employment Law: Volunteering, Time Off, And Staff Expectations
- 4) Data Protection: CSR Campaigns Can Still Collect Personal Data
- 5) Contracts And Liability: Partnerships Need Clear Terms
- Key Takeaways
“CSR” (corporate social responsibility) can sound like something only big corporations worry about.
But in practice, CSR activities are often most powerful (and most authentic) when they’re run by small businesses and startups - because you’re closer to your team, your community, and your customers.
The trick is doing it in a way that’s genuinely helpful and legally safe. If you’re not careful, well-intentioned CSR can create unexpected risks around advertising claims, employment issues, data protection, fundraising compliance, or even contract disputes.
Below, we’ll walk through practical CSR activities you can run in the UK, plus the legal considerations to help keep your business protected from day one.
What Are CSR Activities (And What Counts For Small Businesses)?
CSR activities are actions your business takes to operate responsibly and contribute positively to society, beyond simply meeting minimum legal requirements.
For SMEs and startups, CSR usually falls into a few buckets:
- Community impact (e.g. supporting local causes, volunteering, mentoring)
- Environmental impact (e.g. reducing waste, changing packaging, carbon tracking)
- Workplace practices (e.g. fair pay, wellbeing initiatives, inclusive hiring)
- Ethical trading (e.g. responsible sourcing, supplier standards)
- Product responsibility (e.g. accessibility, safer products, honest marketing)
A common misconception is that CSR has to be expensive or complicated. It doesn’t.
In fact, some of the most credible CSR activities are the ones that are:
- closely aligned with what your business does;
- measurable (even if you keep it simple); and
- embedded into your operations, not treated as a one-off PR moment.
Many businesses also document their approach in internal CSR policies so expectations are clear and consistent as the company grows.
Why CSR Activities Matter For SMEs And Startups (Beyond “Doing The Right Thing”)
Yes, CSR can genuinely improve the world around you. But from a business owner’s perspective, there are also very practical reasons to take CSR activities seriously.
1) Customers And Clients Often Expect It
Whether you’re B2C or B2B, customers increasingly want to know:
- how you treat staff and contractors;
- how you source materials;
- what your business stands for; and
- how honest your marketing claims are.
For B2B startups, CSR can come up in procurement and supplier onboarding questionnaires (especially if you’re selling into larger organisations or the public sector).
2) It Helps With Hiring And Retention
If you want great people to join your business (and stay), CSR can be part of your “why”.
That said, the legal foundations still matter - CSR won’t fix a risky employment setup. If you’re hiring, make sure you have a solid Employment Contract in place and that your policies match how your business actually operates.
3) It Can Reduce Risk (If You Choose The Right CSR)
Some CSR activities overlap with sensible risk management, such as:
- improving health and safety;
- tightening data protection practices;
- reducing misleading advertising risk by improving transparency; and
- setting supplier standards to avoid reputational issues.
In other words: CSR done properly doesn’t just create goodwill - it can create a more resilient business.
Practical CSR Activities UK Businesses Can Start This Quarter
If you’re looking for “what do we actually do?”, here are practical CSR activities you can implement without needing a corporate-sized budget.
Community CSR Activities
- Paid volunteering days (e.g. 1 day per year per employee) with a local charity or community group.
- Skills-based volunteering (marketing support, accounting help, web support, mentoring).
- Local fundraising partnerships with clear targets (e.g. donate £1 per sale up to a cap).
- School, college or startup mentoring programmes in your region.
- Donating products or services to community projects (especially effective for hospitality, retail, professional services, and tech).
If you’re sponsoring a local event, sports team, or community initiative, it’s worth documenting the terms - for example, what you’re providing, what branding is permitted, and what happens if the event is cancelled - using a Sponsorship Agreement.
Environmental CSR Activities
- Packaging and waste reduction (switch to recyclable packaging, reduce void fill, move to refill options where possible).
- Energy efficiency upgrades (LED lighting, smart thermostats, equipment servicing schedules).
- Low-carbon commuting options (cycle-to-work support, remote-first policies where appropriate).
- Supplier changes (prioritise suppliers with lower-impact logistics or sustainable materials).
- Simple carbon tracking (start with electricity, fuel, travel - you don’t need perfection to begin).
A helpful approach for startups is to pick one environmental metric you can track consistently (e.g. packaging volume or electricity usage) and improve it quarter-by-quarter.
Workplace And People-Focused CSR Activities
- Living wage commitments (or a clear pay progression plan if you’re not there yet).
- Structured wellbeing support (mental health first aiders, access to an EAP, wellbeing budgets).
- Inclusive hiring practices (fair interview scoring, accessible job ads, skills-based role requirements).
- Training and development plans (including for junior staff, apprentices, or career changers).
- Clear reporting channels for concerns (bullying, harassment, fraud, safety concerns).
If you’re encouraging a “speak up” culture as part of your CSR activities, having a proper Whistleblower Policy can help set expectations and show that complaints will be handled appropriately and consistently.
Ethical Trading And Supplier CSR Activities
- Supplier code of conduct (labour standards, modern slavery expectations, anti-bribery expectations).
- Payment practices (committing to paying small suppliers on time can be a meaningful CSR lever).
- Responsible sourcing (traceability for high-risk inputs like textiles, electronics, food products).
- Local procurement (where it makes sense commercially and operationally).
For many SMEs, ethical trading CSR is simply about choosing a few standards that match your risks, then baking them into onboarding and purchasing processes.
Legal Considerations When Running CSR Activities In The UK
CSR is meant to reduce harm - but if it’s not structured properly, it can create risk.
Here are the key legal areas to consider when planning and promoting your CSR activities.
1) Be Careful With Marketing Claims (Avoid “Greenwashing” And Misleading Statements)
If you’re talking publicly about CSR, you’re usually also making marketing claims - even if it doesn’t feel like “advertising”.
In the UK, misleading statements can trigger issues under consumer protection rules and enforcement action by regulators. Green and ethical claims are also assessed against the ASA’s CAP Code (and BCAP Code for broadcast ads), and many businesses use the CMA’s Green Claims Code as a practical benchmark for what “good” looks like.
Common risk areas include claims like:
- “carbon neutral” (without a clear basis);
- “plastic-free” (when some components still use plastic);
- “100% ethical” (very difficult to substantiate);
- “we donate profits to charity” (without clarity on what percentage and when).
A good rule: only say what you can prove, and keep records of what your claim is based on (supplier confirmations, invoices, audit results, calculations).
2) Charity Fundraising: Get The Structure Right
If you’re collecting money “for charity” (whether online, in-store, or through a campaign), it’s important to get the compliance piece right upfront.
In many cases, a business that raises money for a charity in connection with sales or promotions will be treated as a “commercial participator” under UK charity fundraising laws. That can trigger specific disclosure requirements to customers (for example, explaining how much will be given and which charity will benefit) and may require a written agreement with the charity.
Also note that some fundraising activity may require registration or formal arrangements depending on how it’s run and where, and separate rules may apply in different parts of the UK (England & Wales, Scotland, and Northern Ireland).
Either way, you should be clear on:
- what exactly you’re promising customers (fixed amount vs percentage vs “up to”);
- how and when the donation will be made;
- who holds the money in the meantime; and
- what happens if you have to cancel the campaign.
Even when there’s no complicated approval required, clarity matters. Vague charity promises can lead to complaints, reputational damage, and disputes with customers or charities.
3) Employment Law: Volunteering, Time Off, And Staff Expectations
Many CSR activities involve your team - volunteering days, community events, fundraising challenges, and donation drives.
From an employment law perspective, you’ll want to think through:
- Is participation optional or expected? If it’s effectively mandatory, treat it like work time.
- Health and safety for volunteering or event activities (risk assessments, supervision, suitability).
- Expenses and reimbursement policies (travel, meals, equipment).
- Equality and accessibility - make sure CSR events don’t exclude people with disabilities, caring responsibilities, or religious commitments.
This is also where having clear employment documents helps avoid confusion later, including a properly drafted Employment Contract and policies that reflect what you actually expect from staff.
4) Data Protection: CSR Campaigns Can Still Collect Personal Data
CSR often involves mailing lists, event sign-ups, photos, testimonials, volunteer registers, and donation records.
If you’re collecting personal data (names, emails, photos, payment info), UK GDPR and the Data Protection Act 2018 may apply. Practical steps usually include:
- only collecting data you actually need;
- being transparent about how you’ll use it;
- storing it securely and limiting access; and
- having a lawful basis for processing (for example, consent or legitimate interests).
If your CSR activity involves sign-up forms or online campaigns, make sure your Privacy Policy matches what you’re doing in practice (and not just what a template says).
5) Contracts And Liability: Partnerships Need Clear Terms
A lot of CSR is collaborative - you might work with:
- another small business on a joint campaign;
- a charity or community group;
- a local venue for an event; or
- a sponsor, brand partner, or supplier.
Even friendly collaborations can go sideways if nobody has written down the basics.
Depending on the relationship, you might need an agreement covering:
- who is responsible for what (and by when);
- who pays which costs;
- how branding and IP can be used;
- what happens if a partner pulls out; and
- insurance and liability allocation.
If you’re collaborating with another founder-led business, it’s also worth being clear internally about decision-making and authority - especially if two owners disagree on CSR spend. This is one reason many startups put a Shareholders Agreement in place early, so key decisions are governed by agreed rules rather than stress and guesswork.
How To Build A CSR Plan That’s Practical, Credible, And Legally Safe
Once you’ve seen the options, the next challenge is choosing CSR activities that you can actually maintain.
Here’s a straightforward way to build a CSR plan that works for SMEs and startups.
Step 1: Choose 1–3 Focus Areas That Match Your Business
Try not to do everything at once. Pick CSR activities that align with:
- your industry’s biggest impacts (e.g. packaging, supply chain, energy);
- your team’s skills and interests; and
- your customers’ expectations.
For example, a digital agency might focus on skills-based volunteering and ethical procurement, while a product business might focus on packaging reduction and responsible sourcing.
Step 2: Define What You’ll Do (And What You Won’t Do)
CSR can spiral if boundaries aren’t clear.
Write down:
- what your CSR activities include (e.g. 2 volunteering days per person per year);
- your budget or caps (e.g. donation matching up to £X); and
- what requires leadership approval (e.g. partnerships, sponsorships, public statements).
Step 3: Document Processes So You Stay Consistent
Even a simple internal policy can make CSR easier to run and easier to defend if questions arise later.
Depending on what you’re doing, you might document:
- CSR principles and commitments;
- how you approve partnerships and donations;
- how you handle complaints or concerns raised by staff or the public; and
- how you track and report progress.
If two or more founders are running the business together, it can also help to align on CSR decision-making within your broader business governance (and if you’re operating as co-owners but not incorporated yet, a Partnership Agreement can help clarify authority, spending, and responsibilities).
Step 4: Track Simple Metrics And Keep Evidence
Good CSR doesn’t require flashy reporting - but you do want to be able to support the statements you make.
Consider tracking:
- volunteering hours completed;
- amount donated and dates paid;
- waste reduced (kg/month) or packaging units reduced;
- supplier changes and confirmations;
- staff engagement survey trends.
Keeping records also makes it much easier to avoid accidental misleading claims.
Step 5: Communicate Carefully (Honest, Specific, Not Over-Claiming)
When you promote CSR activities on your website or social media:
- be specific (“we donated £2,500 in Q3 to X cause”) rather than vague (“we donate lots to charity”);
- avoid absolute claims (“zero impact”, “100% sustainable”) unless you can substantiate them; and
- don’t imply endorsements that don’t exist (for example, saying a charity “partners with us” without confirmation).
When in doubt, keep it factual and measurable. “Here’s what we did” is usually safer than “here’s what we are”.
Key Takeaways
- CSR activities aren’t just for big corporates - SMEs and startups can run meaningful, credible CSR by focusing on community, environment, workplace practices, ethical trading, and product responsibility.
- The most effective CSR activities are aligned with your business, easy to measure, and sustainable over time (rather than one-off campaigns).
- Be careful with marketing and sustainability claims - only say what you can prove and keep records to back it up (and consider the ASA CAP Code and CMA Green Claims Code when drafting public statements).
- CSR involving staff should be planned with employment law and health and safety in mind, especially around volunteering time, expenses, and accessibility.
- CSR campaigns can trigger UK GDPR obligations if you collect personal data through sign-ups, photos, mailing lists, or donation records.
- If you collaborate with charities, partners, or sponsors, consider whether you need clear written terms (for example, a Sponsorship Agreement) to manage expectations and liability.
This article is general information only and doesn’t constitute legal advice. If you’d like advice on your specific circumstances, you should speak to a qualified lawyer.
If you’d like help putting your CSR approach on solid legal foundations - whether that’s drafting the right policies, reviewing your marketing claims, or documenting partnerships - you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.


