Policies have been adopted for many reasons within web services and Service-oriented Architecture in general. However, while they are a favoured method of management, this only occurs at the service level and in the software domain. Policies already exist in a narrow variety more focussed on service properties such as authorisation. As a significant number of web services become available, more emphasis needs to be placed on management of services in the business domain. In this paper, we propose a policy framework that can be used to express business requirements for web services, at a business level that is more abstract than the current high-level composition and orchestration technologies.