Ask ten small contractors for their environmental policy and eight will go quiet. Yet a written policy pack is one of the cheapest ways to win work that bigger rivals assume is theirs. We swept the registration requirements of 557 UK buyer gates - housing associations, councils, frameworks, insurance-repair networks and consumer marketplaces - and built the contractor policies list UK buyers keep putting in front of small firms. Eleven documents, most of them one to two pages, and almost none of them legally required at your size. Here is what each one is, who asks for it, and what a sensible SME version contains.
Legal requirement or buyer expectation? Know the difference
Before you write anything, be clear about which documents the law demands and which are simply buyer habit.
- Legally required for most firms: ICO registration and the data protection fee, if you process personal data - and almost every contractor holding customer names, addresses and job photos does. A written health and safety policy is also a legal requirement once you have five or more employees, though that sits in your H&S pack rather than this one.
- Statutory only above a threshold: a modern slavery statement is only legally required once turnover reaches £36 million under the Modern Slavery Act. Buyers ask for one at a fraction of that size.
- Pure buyer expectation: everything else here. No law says a two-person plumbing firm needs a social value statement. Plenty of portals do.
Most of the contractor policies list below sits in that third bucket, and that is not a scam - buyers push their own compliance duties down the supply chain, and the portal either gets the document or quietly rejects you. The good news is that a one to two page version, honestly written for a business your size, passes almost everywhere. Nobody expects a 40-page corporate manual from a small firm, and copying one off the internet reads worse than a short policy you actually follow.
The contractor policies list UK buyers actually check
The counts below are explicit mentions at the registration or onboarding gate across the 557 UK gates in our data. Treat them as a floor: many buyers only surface document requests later, at PQQ stage, so real demand is higher for every item here.
1. Environmental policy
Your commitment to managing waste, materials and fuel responsibly. Named outright by 27 of the 557 gates - housing associations and public-estate buyers especially. An SME version covers waste segregation and disposal through licensed carriers, buying materials sensibly, fuel use, spill prevention and a named responsible person. One to two pages is genuinely fine.
2. Quality policy or QMS summary
How you make sure work leaves site right. ISO 9001 is not expected at SME level - a short quality management statement passes. Cover how you scope and price jobs, check work before sign-off, handle snags and rework, and what records you keep. Framework buyers and main contractors are the usual askers.
3. Equality, diversity and inclusion policy
The most-requested policy in our sweep at 38 explicit mentions, driven by councils, universities and housing providers. State your commitment to fair recruitment and treatment under the Equality Act, zero tolerance of harassment, that the policy applies to subcontractors on your jobs, and how someone raises a concern.
4. Modern slavery statement
Here is the honest gap between law and expectation: the statutory duty to publish a statement starts at £36 million turnover, yet 33 of our 557 gates ask for one anyway. Write a page acknowledging you are below the threshold, then commit voluntarily: right-to-work checks on everyone, operatives paid directly, and awareness of risk in agency labour and materials supply chains.
5. Anti-bribery and corruption policy
The Bribery Act applies to businesses of every size, and 10 gates - mostly frameworks and tier-1 main contractors - want your position in writing. State that nobody offers or accepts bribes or facilitation payments, set a simple rule and register for gifts and hospitality, and name who staff report concerns to.
6. GDPR and data protection policy, plus ICO registration
Tenant names, addresses, access arrangements and job photos are all personal data, so for most contractors ICO registration is a legal duty, not a buyer preference - and the register is public, so buyers can check. The fee is £52 or £78 a year for most small firms at current rates. Your policy states what data you hold, where it lives, how long you keep it, what happens after a breach, and your ICO registration number.
7. Safeguarding policy
Only needed for work in schools, care settings and around vulnerable people - just 4 gates in our data, all education or care related. Name a safeguarding lead, set conduct rules for working around children and vulnerable adults, commit to enhanced DBS checks where the role legally qualifies for them, and explain how concerns get reported.
8. Social value statement
Rarely a registration gate - 4 explicit mentions - but it decides tenders, because public-sector buyers commonly weight social value at around 10 to 20 per cent of scoring. A single page works: local hiring, apprenticeships or training you offer, spend with local suppliers, community jobs you have done, and how you cut waste.
9. Business continuity plan
Refreshingly, none of the 557 gates named this at the sign-up stage in our latest sweep - it surfaces later, in PQQ question sets. It is also the quickest to write, because you already know the answers: what happens if you are ill, if the van or tools are stolen, where your data is backed up, who phones clients, and your insurer and broker details.
10. Subcontractor management procedure
Housing PQQs love this one, because your subbies work in their tenants' homes. Document what you check before a subcontractor's first job - insurance, qualifications, right to work - how you monitor their workmanship, and what records you keep. If you already do these checks informally, this policy is just writing down your habits.
11. Complaints procedure
Consumer marketplaces such as Checkatrade and Which? Trusted Traders require one, and competent-person schemes ask too. Keep it to a page: how a customer complains, how quickly you acknowledge and respond, who they escalate to if unhappy, and the log you keep. A calm, published procedure also defuses disputes before they reach a review site.
Build the pack in a weekend
Work through the contractor policies list in the order above and treat it as one project, not eleven.
- Create one canonical folder of final PDFs with consistent filenames, so every portal upload comes from the same place and you never send an old version.
- Sign and date everything. A director's signature and a review date within the last 12 months are what assessors actually look for. Undated policies read as downloaded, not owned.
- Diarise renewals - the ICO fee, insurance certificates and each policy's annual review. An expired document can mean silent delisting from a marketplace, with no email to warn you.
- Write once, reuse everywhere. The same eleven PDFs feed every portal, PQQ and vetting scheme you will ever meet.
You do not have to draft alone either - communities like Contractor Club are full of UK trades who have already been through the same PQQs and will tell you what passed. And keep the long game in mind: if you ever sell up, documented systems are part of what a buyer pays for, as the folk at Contractor Exit will happily confirm.
Where the pack pays off
The obvious payoff is public-sector and housing work, but the same vetting logic now runs through private maintenance too. Property managers raising day-to-day jobs increasingly work through platforms like PlanaJob, which let them compare quotes from vetted contractors - so the firm that can evidence its policies on day one gets onboarded while rivals are still hunting for a template. If that is work you want, create a PlanaJob account with your pack ready to go, and skim what property managers are told to check so you know exactly what the other side of the table is reading. There are more compliance guides like this UK contractor policies list on the PlanaJob blog.
FAQ
Do I legally need a modern slavery statement below £36 million turnover?
No. The statutory duty to publish an annual statement only applies once turnover reaches £36 million. But buyers ask for one far below that, so a voluntary one-page statement - honest about your size, clear about your checks - is worth having. It costs an hour and unlocks portals that would otherwise stall.
How much does ICO registration cost a small contractor?
Most small firms pay £52 or £78 a year at current rates, depending on tier, and unlike most of this pack it is usually a legal requirement, because holding customer and employee data counts as processing personal data. Register once, note the renewal date, and put your registration number in your data protection policy.
How long should each policy be?
One to two pages, signed by a director, dated, and reviewed within the last 12 months. Assessors are checking that a policy exists, is current and matches a business of your size - a short document you visibly follow beats a long one you copied. All eleven policies in this contractor policies list should fit in one thin folder.