Work, learning & leisure
Infection control in premises
An infection control plan for a small business is a short written document that names the risks on the premises, the cleaning and ventilation measures in place, and the person responsible for each. It does not need to be long, but it does need to be specific to the building and the work done there, and it needs a date and a review point. A customer notice and a staff sickness policy are separate documents that sit alongside it.
Last checked on 15 September 2026
An infection control plan for a small business is a short written document that names the risks on the premises, the cleaning and ventilation measures in place, and the person responsible for each. It does not need to be long, but it does need to be specific to the building and the work done there, and it needs a date and a review point. A customer notice and a staff sickness policy are separate documents that sit alongside it.
How do I write an infection control plan for a small business?
Start with the premises, not with a template. Walk through the space and list the points where people gather, touch the same surfaces, or breathe the same air for long periods: the till, the door handle, the staff kitchen, the waiting area, the counter, the toilets. For each point, write down what is done about it and how often. A plan that says "high-touch surfaces are cleaned" is weaker than one that says which surfaces, with what product, and at what interval.
Name a person. In a small business this is usually the owner or a nominated manager, and the plan should record who covers when that person is away. Name the records kept: cleaning schedules, ventilation checks, staff absence. Name the review date, at least once a year, and the trigger for an earlier review, such as a change of layout or a new activity on the premises.
A written plan also helps when guidance changes. Public health bodies revise their advice, and a business that has written down its reasoning can see quickly which parts still hold. For a worked example of how a plan is set out for a single site, and how the practical side of infection control is explained in plain words, an independent magazine on the subject, small business infection control plan, sets out the same material for owners and managers. The plan itself stays with the business; it is not sent anywhere and it is not a certificate.
Keep the language plain. Staff who have to follow the plan should be able to read it in one sitting. If a step cannot be described in a sentence, it is probably two steps.
What rules should I put on a customer notice?
A customer notice works when it asks for few things and asks for them clearly. Most premises need no more than four or five lines. The usual content is: do not enter if you have symptoms, use the hand gel at the entrance, keep a distance where queues form, follow the one-way route if there is one, and ask staff if you need help.
Write the rules as requests to the customer, not as descriptions of the business. "Please use the hand gel by the door" is a rule. "Hand gel is provided" is not. Put the notice where the customer stops anyway: at the entrance, at the till, at the head of a queue. A notice that is read while walking past is not read.
State the date on the notice. Guidance changes, and a notice without a date cannot be checked against anything. If a rule is no longer required, take the notice down rather than leaving it up out of habit; a notice that contradicts current practice teaches customers to ignore notices.
Keep signage consistent across the premises. If the entrance asks for a distance and the counter does not, customers will follow the counter. Where a rule applies only to part of the building, say so on the notice at that point.
What is a fair staff sickness and return to work policy?
A fair policy does three things: it tells staff when to stay away, it tells them how to report absence, and it tells them what happens when they come back. The first part should be written in terms of symptoms and risk, not in terms of a diagnosis the member of staff may not have. A common and workable rule is that a member of staff with a fever, vomiting or diarrhoea stays away until a set period has passed since symptoms stopped, and that anyone with a respiratory illness avoids close work with customers or vulnerable people while symptoms are at their worst.
The second part is administrative. Who is told, by when, and by what method. This should be short and should not depend on a single manager being reachable.
Return to work is the part most often left out. A fair policy says whether a conversation happens before the first shift back, who holds it, and what is recorded. It should also say what adjustments are possible: a phased return, a change of duties for a period, or extra breaks. These are ordinary management measures and do not require a medical opinion to arrange.
Pay and leave entitlements sit outside the infection control plan and are governed by the contract and by statutory rules. The plan should not attempt to restate them; it should point to where they are written down.
Where does the plan sit among the other documents?
Three documents, three jobs. The plan is internal: it records what the business does and who does it. The customer notice is external: it asks for specific behaviour at specific points. The sickness and return to work policy is contractual and administrative: it governs the relationship with staff.
Keeping them separate makes each one easier to update. When guidance changes, the notice usually changes first, the plan second, and the policy rarely. When the layout of the premises changes, the plan changes and the notice may need moving rather than rewriting.
All three should carry a date and a named owner. A document without a date cannot be reviewed, and a document without an owner is not reviewed.
How often should any of this be reviewed?
At least once a year, and sooner if something changes: a new room, a new queue, a new activity such as serving food, a change in the number of staff, or a period of high absence. The review does not need to be a meeting. A walk through the premises with the plan in hand, marking what is out of date, is enough, provided the changes are then written down.
Records matter more than the review itself. A cleaning schedule that is signed, a ventilation check that is dated, and an absence log that is kept are the evidence that the plan is being followed. They also show where the plan is unrealistic: if a step is never recorded, it is probably not being done, and the plan should be changed to something that can be.
Finally, keep the plan where staff can find it. A document held only on the owner's computer is not a plan in use. A printed copy in the staff area, with the date visible, does more work than a longer document nobody opens.
What sources should a small business follow?
National public health bodies publish the underlying guidance, and their advice is the reference point for any plan. In the United Kingdom, the UK Health Security Agency publishes guidance on infection prevention and control, and equivalent material is issued by the World Health Organization, the European Centre for Disease Prevention and Control, and the US Centers for Disease Control and Prevention. These documents are written for health and care settings as well as for the public, and a small business will usually need only the general sections.
Read the guidance once, write the plan from it, and then work from the plan. Checking the guidance every week produces churn; checking it at the review date, or when something changes, produces a document that stays accurate.
Sources read for this page: gov.uk, read on 15 September 2026.