Ownership and security
- The domain is registered in your name, on an account you control, with auto-renew on. Losing a lapsed domain is painful and avoidable.
- HTTPS works everywhere, and the plain-http and “www” versions redirect to one address.
- Logins use strong passwords and two-step verification — the hosting, domain and website editor.
Looks and works right
- Checked on a real phone — most of your visitors will use one.
- Images are sized for the web, not straight off the camera; a slow site loses visitors.
- The contact form actually delivers — send a test — and has spam protection.
- A friendly 404 page for links that don't exist.
Findable
- Every page has its own title and description, written for people, not stuffed with keywords.
- Add the site to Google Search Console and submit your sitemap.
- Link it from your Google Business Profile — see my guide to getting found locally.
Legal and safe
- A clear privacy statement saying what you collect and why. If you use tracking cookies you'll need consent; cookie-free analytics avoid the banner.
- Backups of the site and its content, and you know how to restore them.
After launch Look at Search Console a couple of weeks later. It tells you which searches you appear for and flags any pages Google can't read.
