Launching a website with a hidden flaw is expensive in a uniquely quiet way. A broken contact form doesn't crash anything — it just silently loses you every enquiry until someone notices. A missing redirect doesn't show an error to you — it just hands your old Google rankings to your competitors.
This is the checklist we run before any site we build goes live. It's written for UK small business owners: no developer jargon where plain English will do, and notes on why each check matters so you can prioritise if you're short on time. Work through it in order — the sections are sequenced so the most silently-expensive failures get caught first.
Forms and contact details (the money checks)
- Submit every form on the site yourself — and confirm the message actually arrives in your inbox, not just that the page says "thanks".
- Check where form notifications go — the right email address, checked by a real person, with a backup recipient if possible.
- Test the form's confirmation email to the customer, if there is one — right sender name, right wording, lands in inbox not spam.
- Click every phone number on mobile — it should start a call (
tel:link), not just sit there as text. - Click every email link — correct address, no typos. One wrong character loses every enquiry it ever receives.
- Check your address and opening hours everywhere they appear — footer, contact page, about page — and make sure they match.
- Test forms with rubbish input — does it handle a missing email or a pasted essay gracefully?
Content and links
- Read every page aloud, once. You'll catch more errors in ten minutes of reading aloud than an hour of silent skimming.
- Click every link on every page — including footer links, which are written once and forgotten.
- Check for placeholder text — search the site for "lorem", "TBC", "coming soon" and your developer's test phrases.
- Verify names, prices and claims — job titles, service prices, "10 years' experience" — someone will check.
- Confirm every image is yours to use — licensed, purchased or your own. Stock photo lawsuits are real and target small businesses.
- Check image quality on a big screen — nothing stretched, pixelated or obviously generic.
- Make sure each page has one clear next step — a visible call to action above the fold and at the bottom.
SEO — keep the rankings you have, earn the ones you don't
- Set up 301 redirects from every old page URL to its new equivalent. The single most expensive thing to forget: without redirects, your existing Google rankings die with the old URLs.
- Check every page has a unique title tag — around 50–60 characters, front-loaded with what the page is about.
- Write a meta description for every page — around 150 characters, written to earn the click.
- One H1 per page, matching what the page is actually about.
- Confirm the site resolves on one address only — www or non-www, http redirecting to https — not four competing versions.
- Generate and check the XML sitemap — every real page in, every test page out.
- Check robots.txt isn't blocking the site. Development sites are often set to "noindex" — forgetting to remove it means Google ignores your new site entirely.
- Add schema markup — at minimum LocalBusiness with your name, address, phone and service area. It's foundational for AI search visibility.
- Verify the site in Google Search Console and submit the sitemap on launch day.
- Set canonical tags so near-duplicate pages point Google at the right version.
Speed and mobile
- Run the site through PageSpeed Insights — aim for green Core Web Vitals on mobile, not just desktop.
- Compress every image — oversized images are the number one cause of slow small-business sites.
- Test on a real phone over mobile data, not just your office wifi — ideally on both iPhone and Android.
- Check tap targets on mobile — buttons and menu items comfortably thumb-sized, nothing overlapping.
- Test the mobile menu — opens, closes, every link works.
- Check text is readable without zooming on a phone — if you're pinching, your customers are leaving.
- Look at the site on a tablet — the forgotten screen size where layouts most often break.
Legal and compliance (UK specifics)
- Privacy policy page — required under UK GDPR if you collect any personal data, which a contact form does.
- Cookie notice — if you run analytics or marketing cookies, you need consent, not just a banner that says "we use cookies".
- Terms of service — especially if you take payments or bookings through the site.
- Company information — if you're a limited company, the Companies Act requires your registered name, number and office address on the site.
- Accessibility basics — alt text on images, sufficient colour contrast, forms usable by keyboard. It's the law (Equality Act 2010), and it also helps your SEO.
Tracking and measurement
- Install analytics (GA4 or a privacy-friendly alternative) and confirm it's actually recording — visit the site and watch yourself appear in real time.
- Set up conversion tracking for form submissions and phone clicks — otherwise you'll never know what's working.
- Exclude your own visits from analytics so you don't spend six months celebrating your own traffic.
- Connect Google Search Console to Analytics for search query data.
Security and resilience
- HTTPS everywhere — valid SSL certificate, padlock showing, no "mixed content" warnings.
- Confirm who owns the domain name — it should be registered to you, not your designer. Check now, not during a dispute.
- Know where your backups are — what's backed up, how often, and how you'd restore it.
- Update all default passwords — hosting, CMS, email — and store them somewhere safer than a spreadsheet named "passwords".
Launch day and the week after
- Crawl the live site for broken links (a free tool like Broken Link Checker or Screaming Frog's free tier does this in minutes).
- Re-test every form on the live domain — forms that worked in staging can silently fail after the move. Test them again in a week.
- Watch Search Console for the first month — crawl errors, pages dropping out of the index, and 404s from old URLs you forgot to redirect will all show up here first.
The checks people most often skip
If you only have an hour, do these five: test every form on the live site (1), set up the 301 redirects (15), remove the noindex block (21), run the mobile speed test (25), and verify analytics is recording (37). Between them they cover the failures we most often find when auditing sites that launched without a checklist — usually months later, after the damage is done.
A launch is also the cheapest moment to get the foundations right. Retrofitting proper structure, speed and schema onto a live site costs far more than building it in — which is why this checklist is baked into every web design project we deliver rather than run as an afterthought.
Frequently Asked Questions
How long does this checklist take to run?
For a typical small business site of 10–20 pages, a thorough pass takes half a day. The SEO section takes longest if redirects haven't been planned. It is always cheaper than the quietest failure it prevents — a dead form or a de-indexed site can cost months of enquiries.
Do I need all 47 checks for a small five-page site?
The list shrinks naturally with the site — fewer pages means fewer links, titles and images to check — but no section can be skipped entirely. Small sites fail the same ways big ones do: broken forms, missing redirects, no analytics.
What's the most common launch mistake you see?
Two, repeatedly: launching with the development site's "noindex" setting still on, so Google ignores the new site for weeks; and redesigning without 301 redirects, so years of accumulated rankings simply evaporate. Both are five-minute fixes before launch and months of recovery after it.
My site is already live — is it too late?
Not at all. Run the same checklist as an audit: most items can be fixed on a live site, and the tracking, SEO and speed sections usually surface quick wins. Our free website audit does exactly this — we check your live site against these criteria and send you a written report within 48 hours.