Yes they are supposed because the Code of Ethics and business standards sets out the minimum ethical standards, which organizations must attached conducting their affairs. It should not matter if the organization is privately owned or a small business.