A practical pre-launch checklist for a small UK business website: domain and hosting, HTTPS, legal pages and cookie consent, company details, accessibility, speed, search setup, backups and what to check after going live.
Launching a website is exciting, but it's easy to miss things that matter later: a cookie banner that doesn't actually block cookies, a contact form that sends to nowhere, or no backups. Work through this checklist before you announce your site. It's general guidance, not legal advice.
1. Domain and hosting
- Register the domain in your business's name (or your own if you're a sole trader), not a web designer's, and keep the login.
- Turn on auto-renew and two-factor authentication for your registrar and hosting accounts.
- Record where DNS is managed and who has access.
- Check the hosting plan covers your expected traffic, storage and email needs.
2. Security basics
- Serve the whole site over HTTPS, with HTTP redirecting to HTTPS. Many hosts include free certificates.
- Use strong, unique passwords and two-factor login for the CMS.
- Remove unused plugins, themes and test accounts.
- Turn on automatic updates where safe, or schedule regular updates.
3. Legal pages and data protection
- Privacy notice: if you collect personal data, for example through contact forms, newsletters, analytics or orders, UK GDPR requires you to explain what you collect, why, your lawful basis, how long you keep it and people's rights.
- Cookies: under PECR, you need consent before setting non-essential cookies such as most analytics and advertising cookies. A compliant banner must actually block those cookies until the user agrees, and rejecting should be as easy as accepting.
- ICO data protection fee: most organisations that process personal data must pay an annual fee to the ICO unless exempt. Use the ICO's self-assessment tool.
- Terms: if you sell online, set out terms of sale, delivery, returns and the 14-day cancellation right for most distance sales.
4. Business information
Limited companies must show their registered name, company number, place of registration and registered office address on their website. Sole traders using a trading name should show their own name and an address for documents. Include a clear way to contact you.
5. Content
- Proofread every page, and check prices, opening hours and contact details.
- Replace placeholder text and stock "lorem ipsum".
- Make sure you have the rights to all images, fonts and text.
- Add a helpful 404 page.
6. Accessibility
- Use descriptive alt text for meaningful images.
- Check colour contrast and readable font sizes.
- Make sure the site works with a keyboard alone, and forms have labels.
- Use proper headings in order.
The WCAG 2.2 guidelines are the widely used standard. An accessible site is also easier for everyone to use.
7. Speed and mobile
- Test on real phones as well as a desktop browser.
- Compress images and use modern formats where possible.
- Run a free test such as Google PageSpeed Insights and fix the biggest issues first.
8. Search engines
- Give each page a unique title and description.
- Make sure the site isn't still set to "discourage search engines" from development.
- Create an XML sitemap and submit it in Google Search Console and Bing Webmaster Tools.
- Set up redirects from old URLs if you're replacing an existing site.
- Add or update your Google Business Profile for local businesses.
9. Forms and email
- Test every form and check where submissions go, including the spam folder.
- Set up email authentication records (SPF, DKIM and DMARC) for your domain so messages aren't marked as spam.
- Add spam protection to forms.
10. Backups and monitoring
- Set up automatic backups stored separately from your hosting, and test restoring one.
- Add free uptime monitoring so you know if the site goes down.
- Monitor domain and certificate expiry dates.
After launch
- check analytics are recording (with consent);
- watch Search Console for crawl errors;
- review the site every few months for outdated content and broken links.
Frequently asked questions
Do I need a cookie banner if I don't use analytics?
If you only use strictly necessary cookies, you don't need consent, but you should still explain them.
Do I need a privacy policy for a simple brochure site?
If you collect any personal data, including through a contact form or email link, yes.
Sources and further reading
- ICO: Guide to UK GDPR and PECR
- ICO: Data protection fee
- GOV.UK: Running a limited company, display your name
- W3C: WCAG 2.2
- Google Search Console
Facts checked on 20 October 2026. Spotted an error? Tell us and we will correct it.