John Gaskell
Director at The Business Transfer Group
John is a senior member of the Blacks Brokers team with extensive experience leading successful national sales operations. He plays a central role in developing the team’s approach to client service, drawing on a deep belief that positivity, care and drive are the defining qualities of any great salesperson. John delivers comprehensive training across the organisation that instils a client-first ethos at every level.
Most business owners spend years building something valuable. When they decide to sell, one of the first things they realise is that the process of selling requires them to share a great deal of sensitive information with people they do not yet know and may never fully trust. Financial records, customer details, staff arrangements, supplier terms, lease documents and operational systems all need to be disclosed at some point if a buyer is going to be able to properly assess what they are buying.
Managing that disclosure carefully is one of the most important parts of running a good sale process. Done well, it protects the business, maintains staff and customer confidence, prevents competitors from gaining access to commercially sensitive information and gives genuine buyers what they need to proceed with confidence. Done poorly, it can destabilise a business before it has even been sold.
This guide covers how confidentiality works in a business sale, what protections are available and what sellers can do practically to manage sensitive information through the process.
Ready to Sell Your UK Business?
Get expert support with valuation, marketing, due diligence and negotiations so you can sell your business quickly and for maximum value.
Why confidentiality matters in a business sale
The moment it becomes known that a business is for sale, a range of risks materialise simultaneously. Staff begin to worry about their futures and may start looking for other jobs. Key customers or clients may begin reviewing their supplier relationships. Competitors who learn that the business is on the market may use the information to approach customers or staff directly. Suppliers may tighten terms. Lenders may ask questions.
None of these outcomes is inevitable, but all of them become more likely once the sale is public knowledge. The goal of confidential marketing is to find serious, qualified buyers and give them the information they need to make an informed offer, while keeping the fact of the sale away from everyone else until the right moment.
That moment is usually completion, or at the very least a point late enough in the process that the transaction is substantially certain and the practical steps to manage the transition, including communicating with staff and key customers, can be handled in a controlled and planned way.
The non-disclosure agreement
The non-disclosure agreement, also called a confidentiality agreement or NDA, is the legal foundation of confidential marketing in a business sale. It is signed by prospective buyers before they receive any meaningful information about the business, and it establishes the legal obligations that govern how that information can be used.
A well-drafted NDA in a business sale context will typically cover:
The definition of confidential information, which should be broad enough to cover all material information about the business, including financial records, operational details, customer and supplier relationships, staff arrangements and any other non-public information disclosed in connection with the potential transaction.
The permitted purpose, which restricts the buyer to using the information only for the purpose of evaluating whether to proceed with the acquisition. They cannot use it to set up a competing business, approach staff or customers, or share it with third parties who are not directly involved in the evaluation.
Restrictions on disclosure, which set out who within the buyer’s organisation or advisory team can access the information. This typically allows disclosure to the buyer’s solicitor, accountant and other professional advisers but prohibits wider sharing.
The obligation to return or destroy information if the buyer decides not to proceed, which establishes the principle that the seller’s information does not remain in the buyer’s hands indefinitely after they walk away.
The term of the obligations, which in a business sale context is typically two to five years, reflecting the ongoing commercial sensitivity of the information disclosed.
Sellers should ensure that the NDA is signed before substantive information is shared, not after. Sharing financial information informally and then seeking retrospective confidentiality protection is a significantly weaker position.
Anonymous marketing and controlled information release
The NDA governs what a buyer can do with information once they have it. But the other important tool in confidential marketing is controlling what information is released and at what stage.
A well-managed sale process releases information in stages, with each stage requiring a greater level of commitment and qualification from the buyer before more sensitive details are disclosed.
The first stage is an anonymised teaser. This is a brief overview of the business that sets out the broad parameters of the opportunity without identifying the specific business. It typically covers the sector, the general location, the scale of the business and the headline financial performance. A buyer reading a well-constructed teaser should be able to assess whether the opportunity is broadly of interest without being able to identify the business from the description alone.
Buyers who express interest in the teaser are asked to sign an NDA. Once that is in place, they receive the information memorandum, which is a detailed document covering the business in full, including its financials, its operations, its staff structure, its premises and its trading history. This document identifies the business specifically and contains the information a buyer needs to form a view on value and decide whether to make an offer.
Buyers who make an offer that the seller wishes to consider proceed to a site visit and meeting with the seller. These are managed carefully, usually outside normal business hours or in a way that does not alert staff, and the seller controls what is discussed and what is shown.
Following heads of terms, the buyer enters formal due diligence, where the most sensitive information, including individual staff details, customer contracts and the full financial records, is disclosed. By this stage, the buyer has made a significant commitment to the process and the confidentiality obligations are well established.
Managing staff confidentiality
Staff are both the most important people to protect information from and the people who most deserve to be told at an appropriate point. These two things are not as contradictory as they might seem.
The goal is not to deceive staff permanently. It is to manage the timing of disclosure so that it happens at a point where the transaction is sufficiently advanced that the news can be accompanied by clear information about what will happen, who the buyer is and what the implications are for the team.
Premature disclosure to staff, even to trusted individuals, carries significant risk. People talk, and a piece of information shared in confidence with one member of staff rarely stays with one person. Once the sale is known within the team, it tends to become known more widely quickly, and the seller loses control of the narrative.
The legal framework around staff communication in a business sale is relevant here. Under TUPE, which applies to most business sales, the seller is required to inform and consult with employee representatives about the transfer before it takes place. This obligation arises at a specific point in the process and should be managed with legal advice rather than triggered too early or handled informally.
Managing customer and supplier confidentiality
Key customer and supplier relationships are often among the most commercially sensitive aspects of a business. Competitors who learn that a business is for sale may attempt to approach those customers or suppliers directly, and customers who learn of a sale may use the uncertainty to renegotiate terms or explore alternatives.
The practical protection for customer and supplier relationships during a sale is a combination of the NDA, which prevents buyers from approaching them directly, and careful management of what information is disclosed and at what stage.
Buyer-facing documents should describe the customer base in aggregate terms, covering the concentration of revenue, the length of relationships and the renewal history, without naming specific customers until a late stage of the process when the buyer has a genuine need to know and the transaction is substantially advanced.
The same applies to supplier relationships. Terms, pricing and the nature of contractual arrangements can be described generically in the information memorandum, with specific details disclosed only under due diligence where the buyer has a legitimate need for them.
Digital information security
A significant proportion of the sensitive information shared in a business sale is now transmitted and stored digitally, which introduces risks that were not present when information was shared in paper form.
Sellers should think carefully about how financial documents, management accounts and operational information are shared with prospective buyers. Emailing sensitive documents directly to multiple prospective buyers with no tracking or access control is the least secure approach and the one most commonly used.
Better approaches include using a virtual data room, which is a secure online environment where documents are uploaded once and accessed by authorised parties under controlled conditions. Modern virtual data rooms allow the seller to track who has accessed which documents, to revoke access when a buyer exits the process and to add watermarks that identify which party downloaded a specific document. For larger or more complex transactions, a virtual data room is standard practice.
For smaller transactions, using password-protected documents shared via secure file transfer rather than email attachments provides a basic level of additional protection at minimal cost.
What happens when confidentiality is breached
Despite best efforts, confidentiality breaches do occur in business sales. A buyer shares information they should not have. A member of staff finds out and tells colleagues. A competitor learns of the sale from an indirect source.
When a breach occurs under an NDA, the seller has a legal basis for seeking damages or an injunction to prevent further disclosure. In practice, the most useful response depends on the nature and extent of the breach. A technical breach that has caused no discernible harm may be best addressed through a direct conversation with the buyer rather than immediately through legal action. A material breach that has caused genuine damage to the business, such as a competitor using confidential information to approach key customers, may require more formal action.
The important thing is to address breaches promptly rather than allowing them to continue, and to take legal advice before responding in a way that might inadvertently make the situation worse.
The role of a specialist broker in managing confidentiality
One of the practical benefits of working with a specialist business broker is that they manage the confidentiality process as a standard part of the sale. They hold the information, they qualify buyers before introducing them to the seller, they obtain NDAs before releasing identifying information and they manage the staged release of information in a way that protects the seller without creating unnecessary friction for serious buyers.
Sellers who try to manage the sale process themselves often underestimate how much of their time and attention the confidentiality management alone requires, quite apart from the other demands of running the process. A broker who handles this efficiently allows the seller to focus on running the business while the sale progresses in the background.
The confidentiality that a good broker provides extends to the relationship with the seller themselves. A business that is known to be working with a particular broker, or that appears on a public listing too early in the process, loses some of the protection that confidential marketing is designed to provide.
Final thoughts
Confidentiality in a business sale is not about secrecy for its own sake. It is about protecting a business and the people in it during a period of significant change, and ensuring that the sale process does not undermine the very value it is trying to realise.
The sellers who manage confidentiality well move through the sale process with less disruption to their business, attract more credible buyers and arrive at completion with the business still performing at the level that justified the price agreed. If you are considering selling your business and want to understand how a confidential sale process works in practice, get in touch with Blacks Brokers for an initial conversation.
Sources
UK Government, Non-disclosure agreements: guidance for employers and employees (overview of NDA law and enforceability):
https://www.gov.uk/government/publications/non-disclosure-agreements/non-disclosure-agreements
UK Government, TUPE: a guide to the regulations (information and consultation obligations on business sale):
https://www.gov.uk/transfers-takeovers
Information Commissioner’s Office, Guide to the General Data Protection Regulation (handling personal data shared in a business sale context):
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/
UK Government, The Equality Act 2010 (limitations on confidentiality agreements in employment contexts):
https://www.gov.uk/guidance/equality-act-2010-guidance
UK Government, Computer Misuse Act 1990 (legal framework for unauthorised access to digital information):
https://www.legislation.gov.uk/ukpga/1990/18/contents
UK Government, Introduction to business rates: how your rates are calculated (general business context):
https://www.gov.uk/introduction-to-business-rates/how-your-rates-are-calculated
