Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
If you run a small business, you probably have at least one “secret sauce” that gives you an edge.
It might be a customer list, a pricing model, a manufacturing method, a supplier deal, a product roadmap, or even the way you deliver your service faster than competitors.
In practice, these valuable bits of know-how often fall into the category of trade secrets in the UK that businesses rely on every day. The good news is you can protect trade secrets in the UK - but the protection isn’t automatic. You usually need to show you’ve taken the right steps before a problem happens.
Below, we’ll break down what a trade secret is, what UK law expects from you, and the practical (and very doable) steps you can take to reduce the risk of theft, leaks, and disputes.
What Are Trade Secrets In The UK (And What Counts As One)?
A “trade secret” is confidential business information that gives your business a commercial advantage because other people don’t know it.
In the UK, trade secrets are protected through a mix of laws. This includes the long-standing common-law duty of confidence (often referred to as “breach of confidence”), and also the Trade Secrets (Enforcement, etc.) Regulations 2018, which set out a specific framework for enforcing rights in trade secrets.
Broadly, the legal tests focus on three key requirements:
- The information is secret (it’s not generally known or readily accessible).
- The information has commercial value because it is secret.
- You have taken reasonable steps to keep it secret (this part is critical for small businesses).
That last point catches many businesses out. If your company treats sensitive information casually (no controls, no agreements, everyone has access, nothing is labelled), it becomes harder to argue later that the information really was protected as a trade secret.
Common Examples Of Trade Secrets UK Businesses Should Protect
Trade secrets don’t have to be “high tech”. For many SMEs, the most valuable information is commercial rather than technical.
- Customer and lead lists (including buying patterns, key contacts, and renewal dates)
- Pricing strategies, margins, discount structures, and tendering approaches
- Supplier terms (especially exclusive arrangements and negotiated rates)
- Product formulas, recipes, prototypes, and manufacturing processes
- Software logic (source code may also be protected by copyright, but “how it works” can be a trade secret)
- Sales scripts, ad account structures, marketing playbooks, and conversion data
- Business plans and expansion plans (especially where timing matters)
- Internal financial data, forecasting, and investor materials
Trade Secrets Vs Confidential Information Vs IP: What’s The Difference?
You’ll often hear “trade secrets”, “confidential information”, and “IP” used interchangeably - but they’re not the same thing.
- Confidential information is a broader label for information you don’t want shared. Trade secrets are generally the most valuable subset of confidential information (and tend to require higher protection standards).
- Intellectual property (IP) includes rights like copyright, trade marks, and patents. A trade secret is not “registered” in the way a trade mark or patent is - it’s protected by secrecy and your internal controls.
- Patents vs trade secrets: a patent gives you legal protection in exchange for public disclosure. A trade secret stays private, but if it becomes public, protection can be lost.
For many small businesses, the most practical approach is to protect what you can as IP, and treat your confidential know-how as trade secrets with strong contractual and operational safeguards.
Why Should Small Businesses Take Trade Secrets Seriously?
Trade secrets are often where your value really sits - especially if you’re a service business, a tech startup, or a growing SME with a lean team.
The risk usually isn’t a dramatic “corporate espionage” scenario. It’s more everyday than that:
- a key employee resigns and takes a client list
- a contractor reuses your processes for another client
- a co-founder dispute turns into a fight over access to documents
- a supplier receives your commercial terms and passes them on
- your team shares files using personal devices or unsecured channels
When trade secrets aren’t protected from day one, you can face:
- Revenue loss (clients poached, undercut pricing, copied offerings)
- Reputational damage (leaks of sensitive negotiations or customer data)
- Costly disputes (time and legal fees trying to contain the damage)
- Valuation issues (investors and buyers often want to see controls and clean ownership)
The positive side is that trade secret protection isn’t just a “legal” task - it’s good business hygiene that makes you easier to scale and sell.
How Do You Protect Trade Secrets In The UK In A Practical, “From Day One” Way?
To protect trade secrets in the UK, the law generally expects you to take reasonable steps. What’s “reasonable” depends on your business, but most SMEs can cover the essentials with a clear plan.
Step 1: Identify What Your Trade Secrets Actually Are
If you can’t define it, you can’t protect it.
A simple starting point is to create an internal “confidential information register” with categories like:
- Sales and customer data
- Operational processes
- Product/technical know-how
- Supplier/commercial terms
- Strategy/financials
Then decide who should have access, and why.
Step 2: Limit Access (Need-To-Know Only)
One of the strongest indicators that you treat information as a trade secret is access control.
- Use role-based permissions in your drive and internal tools
- Remove “everyone can access” folders for sensitive materials
- Use strong passwords and multi-factor authentication
- Keep a clean offboarding process (disable accounts immediately)
Even small operational steps (like locking down your CRM exports) can make a big difference if you ever need to show a court you acted reasonably.
Step 3: Mark And Handle Information Like It’s Confidential
This sounds basic, but it matters. If you treat documents as confidential, it’s easier to prove later that they were intended to be protected.
- Label documents clearly (e.g. “Confidential”, “Internal Use Only”)
- Use separate folders for sensitive materials (pricing, proposals, supplier terms)
- Don’t share confidential documents via informal channels without safeguards
- Train your team on what can/can’t be forwarded outside the business
Step 4: Put Clear Policies In Place (And Actually Use Them)
Policies help you set expectations, reduce mistakes, and show you took reasonable steps.
For example, if your team uses work devices and cloud tools, an Acceptable Use Policy can spell out what’s allowed (and not allowed) when accessing and sharing business information.
Depending on your setup, you may also want policies covering:
- information classification (public / internal / confidential / trade secret)
- BYOD (bring your own device) use
- remote working and secure file sharing
- incident reporting if something is sent to the wrong person
What Contracts And Legal Documents Help Protect Trade Secrets UK Businesses Rely On?
Trade secret protection is often won or lost in your paperwork.
Contracts won’t stop every breach, but they give you:
- clear legal rights if something goes wrong
- practical leverage to get information returned or deleted
- a strong foundation for injunctions and damages claims
Non-Disclosure Agreements (NDAs)
If you’re sharing sensitive information with someone outside your business (like a supplier, potential buyer, investor, freelancer, or collaborator), consider a tailored Non-Disclosure Agreement.
For SMEs, an NDA is especially useful when:
- you’re discussing a new product or concept before launch
- you’re giving access to pricing, margins, or supplier terms
- you’re in early talks with a potential business partner
- you’re outsourcing work that exposes your internal processes
Key terms to get right include:
- what counts as “confidential information” (and what doesn’t)
- permitted use (e.g. only for evaluating a project)
- who can access it within the receiving party
- return/destruction obligations
- how long confidentiality lasts (often several years, sometimes longer)
Employment Contracts And Confidentiality Clauses
For staff, your first line of defence is usually your Employment Contract.
At a minimum, your employment documentation should cover:
- confidentiality obligations during employment
- confidentiality obligations after employment ends
- clear ownership of work product created for the business
- rules about returning property and deleting data on exit
In some cases, you may also consider restrictive covenants (like non-solicitation of customers). These need to be carefully drafted to be enforceable and proportionate - so it’s worth getting tailored advice rather than copying a template.
Contractor Agreements And Outsourcing
Contractors often have broad access but less day-to-day oversight, which can increase risk.
If you engage freelancers or agencies, a proper Contractor Agreement can cover confidentiality, permitted use, data handling, and ownership of deliverables (which is essential if the contractor is creating valuable materials for you).
This is particularly important for:
- developers and product builders
- marketing consultants with access to customer data
- sales contractors working with leads and pipelines
- operations consultants documenting your internal processes
IP Ownership (So You Don’t Accidentally Lose Control)
Not everything should be a trade secret. Some things should be clearly owned as IP by your business.
For example, if a contractor builds materials, software, designs, or written content, you may need an IP Assignment so your business owns what you’ve paid for (rather than relying on assumptions).
This helps prevent a common problem: you try to enforce confidentiality, but the other side argues they “own” the work or can reuse it.
What If Someone Misuses Your Trade Secrets In The UK?
If you suspect a trade secret has been taken or misused, it’s important to act quickly - but also carefully.
In many cases, early action can stop further damage and improve your options (for example, getting an urgent order to prevent continued use or disclosure).
Typical Warning Signs
- a departing employee downloads large volumes of files
- customers mention they were approached with “your” pricing or pitch
- a competitor launches something suspiciously similar soon after a resignation
- a contractor refuses to return access or hand over files
- confidential documents appear in places they shouldn’t (emails, shared drives, public links)
Immediate Practical Steps To Take
Every situation is different, but these are common first steps:
- Secure access: disable accounts, reset passwords, revoke tokens, change shared credentials.
- Preserve evidence: don’t delete audit logs, emails, device records, or messages connected to the issue.
- Contain the leak: identify what information is affected and who has received it.
- Check your contracts: confirm what confidentiality and return obligations apply.
- Take legal advice early: especially if you may need urgent relief.
If the issue involves staff conduct, it’s also worth understanding your obligations and options around confidentiality breaches, including how to manage the situation in a fair and documented way.
Legal Remedies That May Be Available
Depending on the facts, UK law may allow you to pursue remedies such as:
- Injunctions (to stop use or disclosure)
- Orders to deliver up or destroy materials containing the trade secret
- Damages (financial compensation) or an account of profits
- Costs orders in some circumstances
What you can realistically achieve depends heavily on:
- whether the information qualifies as a trade secret
- whether you took reasonable steps to protect it
- how quickly you acted once you discovered the issue
- how clearly your contracts define confidentiality and ownership
This is why prevention matters so much. It’s far easier (and cheaper) to show you protected your trade secret properly than to try to rebuild the story after the fact.
Key Takeaways
- UK law can protect trade secrets, but you’ll usually need to show the information was secret, commercially valuable, and protected with reasonable steps.
- Common trade secrets for SMEs include customer lists, pricing structures, supplier terms, processes, product roadmaps, and technical know-how.
- Practical protection starts with identifying what your trade secrets are and restricting access on a need-to-know basis.
- Use contracts to strengthen your position - especially NDAs for external discussions, strong confidentiality clauses in employment and contractor arrangements, and clear IP ownership documentation.
- If you suspect misuse, act quickly: secure access, preserve evidence, contain the issue, and get legal advice early so you don’t lose valuable options.
- Trade secret protection is most effective when it’s built into your business operations from day one, not added after a dispute starts.
General information only. This article is not legal advice and may not reflect the most recent legal developments. If you need advice on your specific situation, get in touch with a lawyer.
If you’d like help protecting trade secrets in the UK, drafting confidentiality clauses, or putting the right agreements in place, you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.


