Small business website must-haves: the 2026 checklist

Your website is often the second thing a customer sees after your Google listing. They found you on Maps, now they tap through to check you're real, you do what they need, and you're easy to contact. If the site doesn't answer those questions in a few seconds, they go back and tap the next business.

This checklist covers what every small business website needs in 2026, from the obvious to the legal bits people forget.

1. A clear answer in five seconds

When someone lands on your homepage, they should immediately understand:

• What you do. "Family-run electricians", "Neighbourhood café and bakery", "Mobile dog grooming".
• Where. "Covering Guildford, Woking and surrounding villages".
• What to do next. One clear main button: Call, Get a quote, Book, View menu.

Example homepage heading (illustration only): "Electricians in Guildford & Woking: rewires, EV chargers and safety checks". Clever slogans are fine as a secondary line, but clarity wins.

2. A page for each main service

• One page per main service or product category.
• Plain-English description of what's involved.
• Who it's for, typical situations, how long it takes, what affects the price.
• Prices or "from" prices where you can. Even a guide price builds trust and filters out poor-fit enquiries.
• Real photos of that service.
• A clear call to action on every page.

Separate pages help customers find what they need and help search engines understand what you offer. See our local keyword research guide to choose the words.

3. Trust signals (genuine ones only)

• Real photos of your work, premises and team (not stock images of strangers).
• Reviews: link to or display genuine reviews. Don't edit them, cherry-pick misleadingly, or invent them. Under the Digital Markets, Competition and Consumers Act 2024, publishing reviews in a misleading way is banned.
• Accreditations and memberships you genuinely hold, ideally linked to your listing on the scheme's website.
• Insurance and guarantees: state what you offer, accurately.
• An "About" page with real names and a bit of your story. People buy from people.

4. Easy contact, especially on mobile

• Tap-to-call phone number in the header on mobile.
• Short contact form: name, contact details, message. Only ask for what you need.
• Email address.
• Opening hours.
• Address and map (if customers visit) or areas covered (if you visit them).
• What happens next: "We reply within one working day" (only if true).
• Messaging options (WhatsApp, Facebook Messenger) if you'll actually reply.

Test your form: send yourself an enquiry each month to make sure it still arrives.

5. Fast and mobile-first

• Loads quickly on a phone using mobile data.
• Text readable without zooming; buttons big enough to tap.
• No pop-ups covering the content as soon as the page opens.
• Images compressed and sized properly.

Google's guidance says a good experience means the main content loads within 2.5 seconds (LCP), the page responds to taps within 200 milliseconds (INP) and doesn't jump around (CLS of 0.1 or less). Our website speed guide explains how to test and fix this.

6. Search engine basics

• Unique page titles for each page, saying what and where.
• One main heading (H1) per page that matches the page's purpose.
• Meta descriptions that summarise each page.
• Descriptive image alt text.
• Clean, readable web addresses, for example /services/ev-charger-installation/.
• Name, phone and area/address in the footer, matching your Google Business Profile exactly.
• XML sitemap and robots.txt (most platforms create these automatically).
• Connected to Google Search Console and Bing Webmaster Tools (both free). See our free Google tools guide.
• Optional: LocalBusiness structured data to describe your business in a machine-readable way.

7. Security and reliability

• HTTPS (the padlock). Most hosts and builders provide free SSL certificates. Browsers warn visitors about non-secure forms.
• Platform, theme and plugins kept up to date (especially on WordPress).
• Backups, stored somewhere other than the website server.
• Strong passwords and two-factor authentication on your website, domain and hosting accounts.
• You own your domain name, registered in your or your business's name, with renewal reminders going to an email you check. Losing a domain because a card expired is more common than you'd think.

8. Accessibility

An accessible website works for more people, including those using screen readers, keyboards or zoom. The basics:

• Good colour contrast between text and background.
• Headings used in order (H1, then H2, then H3).
• Alt text describing meaningful images.
• Forms with labels, not just placeholder text.
• Links that make sense on their own ("View our menu", not "click here").
• The site usable with a keyboard alone.

The W3C's Web Content Accessibility Guidelines (WCAG) are the recognised standard. Under the Equality Act 2010, service providers must make reasonable adjustments for disabled people, which is another good reason to build accessibility in.

9. UK legal essentials

These aren't optional extras. (This is general information, not legal advice. Check with a professional for your situation.)

• Company details (limited companies): the Company, Limited Liability Partnership and Business (Names and Trading Disclosures) Regulations 2015 require your registered name, company number, registered office address and part of the UK where registered to be shown on your website. A footer works well.
• VAT number if you're VAT registered and your site is used for business.
• Privacy notice: if you collect any personal data (contact forms, sign-ups, analytics), UK GDPR requires you to explain what you collect, why, how long you keep it and people's rights. The ICO has guidance and a privacy notice generator for small organisations.
• Cookies: tell visitors what cookies you use. Strictly necessary cookies don't need consent. Under changes made by the Data (Use and Access) Act 2025 (in force from February 2026), some analytics cookies used only to improve your own service can be set without consent, provided you give clear information and a simple way to object. Advertising and most third-party tracking still need consent. Check the ICO's current guidance before choosing a cookie set-up.
• Email marketing consent: if you collect emails for marketing, use an unticked opt-in box and keep a record of consent (PECR and UK GDPR).
• Terms and conditions if you sell online or take bookings or deposits, including cancellation rights where the Consumer Contracts Regulations apply.

10. Keep it alive

• Review the site every quarter: are hours, prices, services and photos still right?
• Add new work photos and update service pages with what customers ask.
• Remove anything out of date (old offers, closed services, staff who've left).
• Check Search Console monthly for errors.

Quick self-check

Open your website on your phone now and ask:

1. Can I tell what this business does and where, in five seconds?
2. Can I call them with one tap?
3. Do I see real photos and real reviews?
4. Did it load quickly?
5. Is the company information, privacy notice and cookie information there?

If any answer is "no", that's your first job.

Sources

• legislation.gov.uk: The Company, LLP and Business (Names and Trading Disclosures) Regulations 2015, regulation 25
• ICO: Guidance on the use of storage and access technologies (cookies)
• ICO: Statement on the commencement of the Data (Use and Access) Act
• ICO: Make your own privacy notice
• W3C: Web Content Accessibility Guidelines (WCAG) overview
• web.dev: Web Vitals
• GOV.UK: Fake reviews guidance (CMA208)

This guide is general information, written to be accurate as of October 2026. Platforms and rules change, so check the official sources linked above. Examples are illustrations, not real businesses or results. Nobody, including BizBoost AI, can guarantee a ranking position on Google, Bing or Apple Maps.