UK Business Record Retention: How Long to Keep Paperwork

If you run a small business, paperwork can build up fast. Invoices, receipts, payroll reports, contracts, HR records, emails, customer messages – it all adds up.

At some point, you’ll ask the very practical question: how long to keep paperwork before you can safely shred it (or delete it) without creating legal or tax headaches later on.

The good news is: once you understand the main record retention rules and why they exist, it becomes much easier to set a simple system that keeps you compliant and keeps your admin under control.

Below, we’ll break down the key record retention requirements for UK businesses (especially SMEs), what “paperwork” really includes, and how to build a sensible retention policy that works in real life.

Why Does “How Long To Keep Paperwork” Matter For Your Business?

Keeping business records isn’t just about being organised (although that helps). It’s mainly about being able to prove what happened if you’re ever asked.

Common situations where your records matter include:

• HMRC checks (income tax, corporation tax, VAT, PAYE, expenses and benefits)
• Customer disputes (refunds, chargebacks, “you never delivered”, “this wasn’t as described”)
• Supplier disputes (payment disagreements, quality issues, delays)
• Employment issues (grievances, disciplinaries, holiday pay, sickness absence)
• Data protection requests (for example, a subject access request where someone asks for the personal data you hold about them)
• Insurance claims (property damage, professional indemnity issues, public liability)

In other words, deciding how long to keep paperwork is a risk-management issue. If you delete records too early, you might struggle to defend yourself or prove compliance. If you keep everything forever, you can create data protection risks and make it harder to find what you actually need.

So the goal is balance: keep the right records for long enough, store them securely, and delete them when you no longer have a lawful reason to keep them.

What Counts As “Paperwork” For Record Retention?

When we talk about “paperwork”, we don’t just mean physical paper in a filing cabinet.

For most UK businesses, paperwork includes any business record, whether it’s on paper or digital. That can include:

• Sales invoices, purchase invoices and receipts
• Bank statements and payment confirmations
• VAT records and VAT returns
• Payroll records (PAYE, RTI submissions, payslips, pension auto-enrolment records)
• Contracts with customers, suppliers, contractors and partners
• Emails and messages that form part of an agreement or show key decisions
• Employee records (right to work checks, disciplinary letters, training records)
• Health and safety records (accident book entries, risk assessments)
• GDPR-related records (consents, privacy notices provided, data requests and responses)

It’s also worth noting that emails can be evidence of agreements and instructions. If your business relies heavily on email, it helps to understand whether emails are legally binding and when they can count as “written notice” under a contract.

How Long To Keep Paperwork: Common UK Retention Periods (Practical Guide)

There isn’t one single rule that covers every type of document for every business. Instead, record retention depends on what the record is for (tax, company law, employment, health and safety, GDPR, and so on).

That said, there are some common “starting point” retention periods most UK small businesses use.

1) Accounting Records And Tax Paperwork (Often 6 Years, But It Depends)

For many businesses, a practical baseline is to keep core accounting and tax records for around 6 years - but the correct period can vary depending on your business type and the specific tax involved.

This typically includes:

• Sales and purchase invoices
• Receipts and expense claims
• Bank statements
• Accounting books and ledgers
• Year-end accounts and supporting documents

Some key nuances to keep in mind:

• Self Assessment (sole traders/partnerships): HMRC commonly requires records to be kept for at least 5 years after the 31 January submission deadline for the relevant tax year.
• Corporation Tax (companies): a common HMRC expectation is that records are kept for at least 6 years (and sometimes longer in specific circumstances).
• VAT: VAT records are commonly kept for at least 6 years (including VAT account and supporting evidence).

If you’re VAT registered, you’ll usually also need to keep VAT records and VAT account information. If you’re unsure what needs to be captured on invoices in the first place, it helps to align your processes with invoice requirements so your paperwork stands up to scrutiny later.

Practical tip: Don’t just keep the final accounts. Keep the supporting evidence too (like receipts and supplier invoices). That’s often what HMRC will want to see if they ever query a figure.

2) Payroll And PAYE Records (Commonly At Least 3 Years, Sometimes Longer)

If you employ staff, payroll paperwork is a major category and can include:

• PAYE records and RTI submissions
• Employee pay details and deductions
• Pension auto-enrolment records
• Sick pay and statutory payments information

A common minimum is to keep PAYE records for at least 3 years after the end of the relevant tax year (and many businesses keep payroll and supporting records for longer - for example, where it ties into broader tax/accounting retention, or to help manage disputes).

Payroll record retention can overlap with your HR documentation too. If you’re hiring and want to make your HR setup clearer from day one, having a proper Employment Contract (and consistent HR processes) makes it easier to understand what you should keep and why.

3) Company Records (Limited Companies Often Keep Some Records Longer)

If you operate through a limited company, there are additional company-law records to consider (for example, under the Companies Act 2006), such as:

• Registers of directors and shareholders
• Records of resolutions and decisions
• Statutory books
• Filings and confirmation statements

Some corporate records are effectively “keep for the life of the company” documents, because they explain ownership, decision-making authority, and corporate governance history.

It’s also worth being aware that the Companies Act has its own retention rules for accounting records (which can differ depending on whether the company is private or public), so limited companies often end up following both company-law and tax-driven retention practices.

If you’re maintaining formal decisions, clear board minutes can be a simple but powerful record to retain properly, especially if there’s ever a dispute between directors or shareholders.

4) Contracts And Commercial Paperwork (Often 6 Years, Sometimes 12)

Commercial paperwork often includes customer contracts, supplier contracts, service agreements, and key communications about what was agreed.

Many businesses keep contracts for at least 6 years after the relationship ends because (in many cases) the time limit to bring a claim for breach of contract is 6 years.

However, if a contract is executed as a deed, the time limit to bring certain claims is commonly 12 years - which is why deeds are often retained for longer.

Practical tip: Keep the signed contract, any variations/amendments, and key notices (like termination letters or renewal confirmations). A lot of disputes come down to “what version was in force at the time?”

5) Customer Records And GDPR Retention (Keep Only As Long As Necessary)

This is where many small businesses get stuck. You may be thinking: “I want to be safe, so I’ll keep everything.”

But under UK GDPR and the Data Protection Act 2018, you’re expected to follow the storage limitation principle – meaning you should not keep personal data for longer than necessary for the purpose you collected it for.

So, instead of asking only “how long to keep paperwork”, you also want to ask:

• Why do we still need this record?
• Is it still accurate and relevant?
• Are we keeping more personal data than we need?

For a practical approach, it can help to align your business processes with GDPR-friendly retention thinking, including data retention periods and setting clear deletion rules.

Also remember: if someone makes a data request, you’ll need to find and provide relevant data within strict timelines. Being ready for that is easier if your retention and filing systems are organised. Many businesses build this into their workflow for Subject Access Requests, especially if you hold staff or customer information across multiple systems.

6) Employment And HR Records (Varies - Set A Clear Schedule)

Employment paperwork is a broad category. It can include:

• Right to work checks
• Holiday records
• Sickness records and fit notes
• Performance documentation
• Disciplinary and grievance records
• Training records and certifications

Retention depends on the type of record and why you may need it later (for example, to respond to an employment tribunal claim, to evidence pay and working time compliance, or to meet health and safety requirements).

Some examples of rules that can apply in practice include:

• Right to work checks: commonly kept for the duration of employment plus 2 years.
• Working time records: commonly kept for 2 years.
• PAYE/payroll-related records: commonly at least 3 years after the end of the relevant tax year (often longer in practice).

Practical tip: Even if you’re trying to keep things “light” as a small business, you still want to be consistent. A simple retention schedule can prevent the common mistake of keeping sensitive HR data indefinitely without a lawful reason.

What If You Close The Business Or You’re No Longer Trading?

When you wind down, it’s tempting to throw everything out and move on. But record retention doesn’t necessarily stop just because you stop trading.

Depending on your business structure and what records you hold, you may still need to keep key records for several years after closure. That could include tax records, employee records, customer transaction records, and any paperwork needed for ongoing warranties, guarantees, or disputes.

If you’re planning to shut down (or you’ve already stopped trading), it’s worth thinking about your recordkeeping after closing a business, so you don’t accidentally dispose of something you’ll need later.

Also consider:

• Who will be responsible for storing the records post-closure (especially if there were multiple directors/partners)?
• Where will you store them, and how will you secure them?
• How will you respond if HMRC, a former customer, or a former employee contacts you later?

How To Set Up A Simple Record Retention Policy (Without Overcomplicating It)

You don’t need a corporate-level compliance department to get this right. A clear, practical system is usually enough – and it can save you serious stress later.

Step 1: Categorise Your Records

Most small businesses can start with categories like:

• Tax and accounting
• VAT (if applicable)
• Payroll and pensions (if you have staff)
• Contracts and legal
• Customers and sales
• HR
• Health and safety

This makes it easier to apply different retention rules without constantly guessing.

Step 2: Decide A Retention Period For Each Category

This is the heart of deciding how long to keep paperwork.

A sensible approach is to set a baseline period (for example, 6 years for many core finance/tax records), then adjust where needed for:

• your legal structure (sole trader vs limited company)
• VAT and PAYE requirements
• long-term warranties/guarantees
• regulated activities (if applicable)
• contracts signed as deeds
• employee/HR requirements
• GDPR storage limitation (don’t keep personal data “just in case”)

If you’re unsure, it’s worth getting tailored advice. “Too long” can be a problem in GDPR terms, and “not long enough” can be a problem in tax and dispute terms.

Step 3: Store Records Securely (And Make Them Easy To Find)

Secure storage is both a commercial and legal issue. You want to protect confidential information (pricing, margins, supplier terms), and you also want to protect personal data.

Good practices include:

• Limit access to those who genuinely need it
• Use role-based access in cloud systems
• Keep a clear folder structure (by year, then by month or project)
• Back up data regularly
• Lock physical files in a cabinet (especially HR files)

Step 4: Put Deletion And Shredding On A Schedule

Many businesses are great at saving documents and terrible at deleting them. But controlled deletion is part of good compliance.

You might set a quarterly or annual review, where you:

• identify records that have hit their retention deadline
• confirm there’s no ongoing dispute/audit requiring preservation
• securely delete digital data
• shred paper records (don’t just bin them)

Important: If a dispute is brewing (or you’ve received a complaint, a solicitor’s letter, or a tax query), pause deletion for anything relevant. Deleting records at the wrong time can create bigger problems.

Key Takeaways

• How long you should keep paperwork depends on the type of record (tax, VAT, payroll, contracts, HR, GDPR) - and while 6 years is a common practical baseline for many finance and company records, different rules can apply depending on the tax and your business structure.
• “Paperwork” includes both paper documents and digital records, including emails and messages that evidence agreements and key decisions.
• Under UK GDPR and the Data Protection Act 2018, you should generally avoid keeping personal data longer than necessary, so having a clear retention schedule helps reduce risk.
• Limited companies often need to retain certain company records for longer periods, sometimes for the life of the business, to evidence ownership and decision-making.
• Contracts are commonly kept for 6 years after they end, but contracts executed as deeds are often kept for 12 years.
• Even if you stop trading, you may still need to retain key records for several years, so plan your storage and access arrangements before closing.
• A simple retention policy (categories, timelines, secure storage, scheduled deletion) is usually enough to keep a small business compliant and organised.

Note: This article is general information only and isn’t tax or accounting advice. Record retention can vary depending on your circumstances (including ongoing disputes, audits, regulatory duties, and the type of records you hold), so it’s worth getting tailored advice where needed.

If you’d like help putting a record retention policy in place, reviewing your contracts, or getting your GDPR compliance set up properly, you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.