What cookies are, briefly

Cookies are small files a website stores in a visitor’s browser – used for things like remembering login details, tracking visits for analytics, or powering advertising. Some are essential for the site to function; many others exist purely to gather data about the visitor.

What the law actually requires

Under UK data protection rules (built on the Privacy and Electronic Communications Regulations, alongside UK GDPR), non-essential cookies – most analytics and advertising cookies – require the visitor’s clear, informed consent before they’re set, not just a notice telling them cookies exist. Consent has to be a genuine choice, which means “accept” and “reject” need to be equally easy to select.

Where most banners go wrong

• A prominent “Accept All” button next to a hidden or fiddly way to decline
• Cookies being set before the visitor has made any choice at all
• No easy way to change your mind later
• No actual record kept of what was consented to and when

What a properly compliant setup looks like

Non-essential cookies (analytics, marketing, embedded video trackers) blocked by default until consent is given. A banner that offers “Accept,” “Reject” and ideally “Manage preferences” with equal visual weight. A record of consent kept, so you can demonstrate compliance if ever asked. A simple way for visitors to revisit and change their choice later.

This isn’t just a legal box to tick

Getting this right also builds trust – visitors increasingly notice when a site handles their data thoughtfully, and a clumsy, manipulative cookie banner is a small but real dent in first impressions.

What to check on your own site today

Open your site in a private browser window. Does anything load before you’ve made a cookie choice? Is declining actually as easy as accepting? If either answer is uncomfortable, it’s worth sorting sooner rather than later.

Every site under Chris X Creative’s Compliance service includes a properly configured cookie consent system with a consent log kept automatically, so you’re covered without having to think about it. Get in touch if you’d like your current setup reviewed.

What SSL actually does

An SSL certificate encrypts the connection between a visitor’s browser and your website, so any information passed between the two – a contact form submission, a password, payment details – can’t be intercepted or read by anyone in between. It’s the difference between “http” and “https” in your web address.

The trust signal is immediate

Every major browser now visibly flags non-HTTPS sites as “Not Secure” right in the address bar. Most visitors won’t know the technical detail, but they will notice the warning – and plenty will leave rather than risk it, especially on a contact or checkout page.

It affects your Google rankings

Google has confirmed HTTPS as a ranking signal. It’s not the single biggest factor in your search position, but on a level playing field, a secure site has a real edge over an insecure competitor.

It’s required for anything involving payment or personal data

If you take payments, bookings, or collect any personal information through a form, SSL isn’t optional – it’s a basic expectation, and in many cases a legal one under UK data protection requirements.

The good news: it’s usually simple and often free

Modern hosting typically includes a free SSL certificate as standard, with automatic renewal so it never quietly expires and breaks your site. The days of SSL being an expensive add-on are largely over – the real risk now is a site where it was never set up properly in the first place, or one where an expired certificate has gone unnoticed.

How to check your own site

Look at your website address in the browser bar. If it starts with “https://” and shows a small padlock, you’re covered. If it says “http://” without the “s,” or shows a warning, that needs sorting – ideally today rather than “at some point.”

Every site Chris X Creative hosts includes SSL as standard, monitored so it’s renewed automatically and never silently lapses. If you’re not sure about your current site, it takes two minutes to check – just ask.

Bewdley Carnival turned 100 this year. It’s the event I grew up watching — the same streets, the same river, generations of the same families turning up every June. For the centenary, I wanted to build something that would help it run for the next hundred years a little better than it ran for the last. So on evenings and weekends, alongside my actual work, I built the carnival a proper raffle system — one that could take money safely online or in person, never let someone win a prize after the draw had closed, and quietly refund them if it somehow did, without a volunteer having to notice and untangle it by hand.

It worked. By the end, the raffle alone had raised £4,000, with proceeds going towards four local causes: Bewdley Concert Band, Hugs, Summerdyne Nursing Home, and The William Mills Foundation — each of them set to be genuinely better off because of it.

Here’s the thing, though. Nobody paid me to build that system. And I think that’s exactly why it turned out the way it did.

When ChrisXCreative isn’t what pays my mortgage, I only take on work — client or otherwise — that I actually want to do. There’s no pressure to say yes to something I don’t believe in, and no client waiting on an invoice pushing me to cut a corner just to ship it faster. I built the raffle system properly — refund logic tested twice over, prize tracking that wouldn’t quietly lose a winner in a spreadsheet — not because someone was watching a deadline, but because I cared whether it was right. That’s a luxury full-time freelancing rarely affords you. When your income depends on the next project, “good enough” starts creeping in whether you want it to or not.

Keeping this a sideline also means I get to pick depth over volume. I could have taken on ten small client sites in the time I spent on that raffle system. Instead, I spent months in one place — learning things about payment webhooks, database quirks, and what actually breaks under pressure that no quick client job would ever have taught me. That depth is worth more to me than the extra invoices would have been.

And there’s something else, harder to put a number on. The carnival didn’t need me to be a professional running a business. It needed someone from the town who understood what mattered and was willing to build it properly, for free, because it was worth doing right. That’s not a role a full-time agency owner has time for. It’s a role a sideline does.

None of the four causes set to benefit from that £4,000 know how the raffle worked behind the scenes. They don’t need to. They just know the support is coming, and it’ll help. That gap — between the quiet, unglamorous work of getting something right, and the very real difference it makes once it’s out in the world — is what I keep coming back for. And I don’t think I’d have built it the way I did, or wanted to as much as I did, if it had been my job rather than my choice.

A hundred years ago, someone in this town decided Bewdley needed a carnival. This year, because I keep my business small enough to still choose my work rather than chase it, I got to help make sure it’s still standing in another hundred.

Chris runs ChrisXCreative, a web design and hosting business based in Kidderminster, alongside his day job — and is the volunteer digital lead behind Bewdley Carnival’s plugin suite and payment systems.

Claim and complete your Google Business Profile

This is the single biggest lever for local visibility. A fully completed profile – correct opening hours, categories, photos, services, and a steady trickle of reviews – directly influences whether you appear in the local map results (“the map pack”) that show up above the regular search listings.

Get your business details consistent everywhere

Your business name, address and phone number should match, word for word, across your website, Google Business Profile, Facebook page and any directory listings. Inconsistencies (e.g. “St.” in one place and “Street” in another) quietly confuse Google’s confidence in your location.

Have a real page for each service and area

If you offer three services across two towns, don’t cram it all onto one homepage. Dedicated pages – “Boiler repairs in Kidderminster,” for instance – give Google clear, specific content to match against specific searches, and give visitors exactly the information they came for.

Collect reviews, don’t just hope for them

Reviews affect both rankings and conversion – people trust other customers more than they trust your own marketing copy. Make it easy: a direct link you can text or email after a job is done gets far more responses than hoping people remember to search you out.

Write locally relevant content

A blog post about a local event you sponsored, a case study from a nearby customer, or answers to questions people in your area actually ask, all give Google more reasons to associate your site with your location – and give real people more reasons to trust you.

Don’t ignore the basics

None of the above works well if your site is slow, isn’t mobile-friendly, or is missing basic technical setup like an SSL certificate and clean page titles. Local SEO sits on top of a technically sound website – it can’t fix a broken foundation.

Local SEO is a long game built from small, consistent things done properly rather than one clever trick. If you’d like a straightforward review of where your site currently stands, Chris X Creative is happy to take a look and tell you honestly what’s worth fixing first.

Speed affects everything

Cheap, overcrowded shared hosting means your site is sharing resources with hundreds of other websites – some far busier than yours. When one of them has a traffic spike, your site can slow down too, with no warning and nothing you did wrong. Slow sites lose visitors and rank worse on Google, which actively factors page speed into search results.

Uptime is trust

If your website goes down while a potential customer is trying to find your phone number or check your opening hours, that’s a lost enquiry – and possibly a lost customer to a competitor whose site was working. Proper hosting includes monitoring that flags problems before they become hours-long outages.

Security isn’t optional

Small business websites are targeted by automated attacks constantly – not because anyone specifically wants to hack you, but because bots scan the entire internet for known weaknesses. Budget hosting rarely includes firewalls, malware scanning or timely security patching. Proper hosting does.

Backups: your insurance policy

Ask yourself honestly: if your website vanished tomorrow, do you know for certain it could be restored, and how quickly? Many cheap hosting packages either don’t back up at all, or only keep a single, infrequent snapshot. Good hosting includes regular, tested backups as standard.

Support when you actually need it

When something breaks on a £3-a-month hosting plan, you’re usually on your own with a support ticket queue. With managed hosting from a company that also built your site, you’re talking to someone who already knows exactly how it’s put together.

What good hosting actually includes

• Fast, reliable servers built for WordPress
• Regular automated backups, stored separately from the live site
• Security monitoring and malware scanning
• SSL certificates kept up to date
• A real person to call when something goes wrong

Chris X Creative’s hosting is built around exactly this: uptime monitoring, backups, security and a direct line to us when you need help – not a call centre script. If you’re not sure what your current hosting actually covers, it’s worth asking.

Ease of use

Wix wins here, at least at the start. Its drag-and-drop editor is genuinely beginner-friendly. WordPress has a steeper learning curve out of the box, though a well-built WordPress site with a proper admin setup (clear menus, sensible defaults, a support contact) closes that gap considerably for day-to-day editing.

Ownership and flexibility

This is where WordPress pulls ahead. WordPress is open-source software that you effectively own – your site, your content and your data live on hosting you control, and you can move it wherever you like. With Wix, you’re building inside a closed platform: if you ever want to leave, there’s no clean way to take your site with you. You start again.

SEO performance

Both platforms can be optimised for search engines, but WordPress generally offers deeper control – over URL structure, page speed, structured data (schema markup), and the sheer range of SEO plugins available. For a business relying on being found on Google, that extra control matters more as you grow.

Cost over time

Wix’s monthly plans look cheap at first glance, but the features you actually need (removing ads, connecting a domain, e-commerce, more storage) push you up the tiers quickly. WordPress hosting costs vary, but because you own the software itself, you’re not locked into ever-rising platform fees.

Growing with your business

A one-person startup selling a handful of services might genuinely be fine on Wix for a year or two. But if you plan to add booking systems, membership areas, a blog that drives real traffic, or multiple staff logins, WordPress’s ecosystem of plugins and developers gives you far more room to grow without hitting a wall.

The honest verdict

Wix is a reasonable stopgap. WordPress, properly set up and properly maintained, is a long-term asset. If you’re building something you expect to still be running – and growing – in five years, WordPress is worth the slightly steeper learning curve.

Not sure which fits your situation? Chris X Creative builds and maintains WordPress sites specifically so you get the flexibility without needing to become a developer yourself – get in touch and we’ll talk it through honestly.

DIY builders: £0-£300 a year

Platforms like Wix, Squarespace or a basic WordPress.com plan are the cheapest route in. You’re paying mostly for hosting and a template, and doing the design work yourself. This can be fine for a very early-stage business testing an idea, but it takes real time to learn the tools, and the results often look and feel generic.

Freelancer-built sites: £500-£2,500

A freelance designer will usually build on WordPress, using existing themes and page builders, customised to your brand. You get a proper design eye and someone to ask questions to, but ongoing support, security and maintenance are often extra – or non-existent – once the site is handed over.

Agency-built sites: £1,500-£6,000+

An agency brings design, copywriting, SEO structure and photography together, plus (crucially) ongoing hosting and support afterwards. This is where most established small businesses land, because the site is treated as a long-term asset rather than a one-off purchase.

What actually drives the price up or down

• Number of pages and how much original content needs writing
• Custom design vs. an off-the-shelf template
• E-commerce, booking systems or membership areas
• Photography and illustration
• Ongoing hosting, backups, security and support

The question that matters more than the price tag

The real question isn’t “what’s the cheapest option” – it’s “what happens after launch?” A £300 DIY site with no ongoing maintenance can end up costing far more in lost leads, security incidents, or a full rebuild two years later than a well-supported site that costs a bit more up front. Think of a website less like a purchase and more like a member of staff: it needs looking after to keep doing its job.

If you’d like an honest, no-pressure quote for your situation – whether that’s a brand new site or fixing up an existing one – get in touch with Chris X Creative. We’ll tell you what you actually need, not just what’s easiest to sell.