Stott and May

Joint and Several Liability: What JSL Means for Agencies

Joint and several liability now makes agencies liable for umbrella PAYE failures. Here is where the risk sits under JSL and how to manage it.

21 August 2026

Payroll Workflow Automation: The 2026 Compliance Case

Payroll workflow automation is now a compliance control: here is why accurate, auditable records decide how umbrellas and agencies fare under 2026 enforcement.

20 August 2026

Statutory Sick Pay 2026: Day-One Rights Explained

Statutory sick pay is now payable from day one and the lower earnings limit is gone, widening eligibility for low-paid temporary workers from April 2026.

19 August 2026

Why Payroll Workflow Automation Matters

Payroll teams are under pressure to process increasing volumes quickly, accurately and compliantly. Workflow automation can reduce repetitive administration, create more consistent processes and allow

13 August 2026

Harassment Prevention Duty: What Agencies Must Prove

The harassment prevention duty now demands evidence, not a policy in a drawer. What recruitment agencies must prove before enforcement bites in October 2026.

11 August 2026

HMRC Scheme-Promoter Penalties: The 2026 Crackdown

HMRC scheme-promoter penalties now hit facilitators and directors directly in 2026 — what recruiters and umbrella suppliers must do to stay clear.

10 August 2026

Cookie	Duration	Description
cookielawinfo-checkbox-advertisement	1 year	Set by the GDPR Cookie Consent plugin, this cookie is used to record the user consent for the cookies in the "Advertisement" category .
cookielawinfo-checkbox-analytics	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional	11 months	The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
CookieLawInfoConsent	1 year	Records the default button state of the corresponding category & the status of CCPA. It works only in coordination with the primary cookie.
elementor	never	This cookie is used by our website to allow the us to implement or change the website's content in real-time.
hubspotutk	5 months 27 days	HubSpot sets this cookie to keep a record of the visitors to the website. This cookie is passed to HubSpot on form submission and used when deduplicating contacts.
JSESSIONID	session	The JSESSIONID cookie is used by New Relic to store a session identifier so that New Relic can monitor session counts for an application.
PHPSESSID	session	This cookie is native to PHP applications. The cookie is used to store and identify a users' unique session ID for the purpose of managing user session on the website. The cookie is a session cookies and is deleted when all the browser windows are closed.
viewed_cookie_policy	11 months	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.
_GRECAPTCHA	5 months 27 days	This cookie is set by the Google recaptcha service to identify bots to protect the website against malicious spam attacks.
__hssc	30 minutes	HubSpot sets this cookie to keep a record of sessions and to determine if HubSpot should increment the session number and timestamps in the __hstc cookie.
__hssrc	session	This cookie is set by Hubspot whenever it changes the session cookie. The __hssrc cookie set to 1 indicates that the user has restarted the browser, and if the cookie does not exist, it is assumed to be a new session.
__hstc	5 months 27 days	This is the main cookie set by Hubspot, for recording visitors. It contains the domain, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session).

Cookie	Duration	Description
__cf_bm	30 minutes	This cookie, set by Cloudflare, is used to support Cloudflare Bot Management.
__hssc	30 minutes	HubSpot sets this cookie to keep a record of sessions and to determine if HubSpot should increment the session number and timestamps in the __hstc cookie.

Cookie	Duration	Description
hubspotutk	5 months 27 days	HubSpot sets this cookie to keep a record of the visitors to the website. This cookie is passed to HubSpot on form submission and used when deduplicating contacts.
_gcl_au	3 months	Provided by Google Tag Manager to experiment advertisement efficiency of websites using their services.
_hjAbsoluteSessionInProgress	30 minutes	Hotjar sets this cookie to detect the first pageview session of a user. This is a True/False flag set by the cookie.
_hjFirstSeen	30 minutes	Hotjar sets this cookie to identify a new user’s first session. It stores a true/false value, indicating whether it was the first time Hotjar saw this user.
_hjIncludedInPageviewSample	2 minutes	Hotjar sets this cookie to know whether a user is included in the data sampling defined by the site's pageview limit.
_hjIncludedInSessionSample	2 minutes	Hotjar sets this cookie to know whether a user is included in the data sampling defined by the site's daily session limit.
__hstc	5 months 27 days	This is the main cookie set by Hubspot, for recording visitors. It contains the domain, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session).

Cookie	Duration	Description
baqend-speedkit-user-id	5 months 27 days	No description available.
heyzine_session	3 months	No description
_hjSessionUser_2855694	1 year	No description
_hjSession_2855694	30 minutes	No description

is a

About

Website

Phone Number

Email Address

Joint and Several Liability: What JSL Means for Agencies

Payroll Workflow Automation: The 2026 Compliance Case

Statutory Sick Pay 2026: Day-One Rights Explained

Why Payroll Workflow Automation Matters

Harassment Prevention Duty: What Agencies Must Prove

HMRC Scheme-Promoter Penalties: The 2026 Crackdown

Stott and May

is a

About

Website

Phone Number

Email Address

Joint and Several Liability: What JSL Means for Agencies

Payroll Workflow Automation: The 2026 Compliance Case

Statutory Sick Pay 2026: Day-One Rights Explained

Why Payroll Workflow Automation Matters

Harassment Prevention Duty: What Agencies Must Prove

HMRC Scheme-Promoter Penalties: The 2026 Crackdown

Yet another cookie consent form