Guides
Website migration without losing SEO: the checklist we use
The before, during and after checklist we use to move a website without losing Google rankings: URL inventory, 301 redirect map, launch-day steps and…
· 11 min read
For most UK small businesses, good website hosting costs £5 to £40 a month before VAT. A brochure site runs happily on decent shared hosting or an entry-level managed WordPress plan; an online shop or a busy site needs managed WordPress, a managed VPS or cloud hosting, typically £30 to £120 a month. What you should pay for is daily off-site backups, a UK or EU data centre, free SSL, current PHP versions and support that answers. What you can skip: paid SSL certificates, “unlimited” plans, and email bundled in with the website.
Hosting is one of those purchases where the cheapest and most expensive options are both usually wrong for a small business. Below we compare the four main types, explain what UK GDPR does and does not require about where your data sits, give typical UK prices with three worked annual budgets, and finish with the red flags and a recommendation by type of business.
The four types of hosting, compared
| Type | What it is | Typical UK price (excl. VAT) | Good for | Watch out for |
|---|---|---|---|---|
| Shared hosting | Your site shares a server with hundreds of others | £3–£15 a month | Small brochure sites, low traffic | Slow neighbours, big renewal increases, basic backups |
| Managed WordPress | Shared or container hosting tuned for WordPress, with updates, caching and staging handled | £15–£50 a month per site | Most business WordPress sites, small shops | Visit limits, plugin restrictions, add-on pricing |
| VPS (virtual private server) | Your own slice of a server with guaranteed resources | £5–£40 unmanaged, £30–£120 managed | Shops, several sites, custom PHP or Laravel apps | Unmanaged means you are the sysadmin |
| Cloud (AWS, Google Cloud, Azure) | Pay-as-you-go infrastructure that scales on demand | From about £10 to hundreds a month, plus set-up time | Custom software, SaaS, traffic spikes | Unpredictable bills without monitoring, needs expertise |
These ranges are typical of UK and international providers selling to UK customers at the time of writing. Introductory prices are often a fraction of the renewal price, so always compare the second-year cost.
Shared hosting
Fine for a five-page site for a plumber in Cardiff that gets a few hundred visits a month. The risk is that you share CPU, memory and sometimes an IP address with other customers. If one of them gets hacked or sends spam, your site can slow down or your IP can end up on a blocklist. Good shared hosts manage this well. The £1-a-month ones generally do not.
Managed WordPress
The default we recommend for most business WordPress sites. You get server-level caching, automatic backups, a one-click staging copy for testing changes, and a host that knows WordPress when something breaks. Check what “managed” covers, though: some hosts update WordPress core but not plugins, and plugins are where most security problems start. Our guide to WordPress maintenance plans explains where hosting ends and maintenance begins.
VPS
A VPS gives you guaranteed resources and full control, which suits WooCommerce shops, custom PHP or Laravel apps, and agencies hosting several sites. An unmanaged VPS is cheap because you do the work: security patches, firewall, backups, monitoring. If nobody in your business wants that job, pay for a managed VPS or pay someone to manage it.
Cloud
AWS, Google Cloud and Microsoft Azure all have UK regions in or near London (Azure also has one in Cardiff). Cloud makes sense for custom software, SaaS products and anything with spiky traffic, where you want to scale up for a busy hour and back down again. For a ten-page brochure site it is overkill. The bill is also usage-based, so set up budget alerts from day one. Our cloud solutions and DevOps work is mostly in this territory.
UK data centres and UK GDPR: what the law actually says
A common misunderstanding first: UK GDPR does not require your website or customer data to be stored in the UK. What it requires is that personal data is kept secure and that transfers outside the UK are covered by a lawful mechanism. According to the ICO’s guidance on international transfers, the UK currently treats the EU and EEA as adequate, so hosting in Dublin, Frankfurt or Amsterdam is straightforward. Transfers to the US are covered for organisations certified under the UK Extension to the EU-US Data Privacy Framework (the “data bridge”), or otherwise need contractual safeguards.
Your hosting company processes personal data on your behalf (contact form entries, customer accounts, orders), which makes it a processor. You need a written contract with the terms set out in Article 28 of UK GDPR. Reputable hosts publish a data processing agreement; if yours cannot point you to one, that is a problem.
So why pay attention to location at all? Three practical reasons:
- Speed. A server in London or Manchester answers a UK visitor faster than one in Texas, though a CDN such as Cloudflare narrows that gap for static files.
- Simplicity. UK or EU hosting keeps your privacy notice and transfer records simple.
- Client and sector expectations. Public sector buyers, healthcare, legal and financial clients often ask for UK hosting in their supplier questionnaires, whatever the law strictly requires.
Hosting location is only one part of compliance. Your cookie banner, privacy notice and form handling matter just as much; our guide to cookie banners and UK law covers the website side.
Backups: the feature that matters most
Hosting failures are rare. Hacked plugins, a botched update or someone deleting the wrong page are not. The backup is what gets you back, and it is the feature cheap hosts skimp on. Look for:
- Daily automatic backups of files and database (hourly for busy shops)
- At least 14, ideally 30 days of history, because problems are often noticed late
- A copy stored off the server, ideally with a different provider
- One-click restore you can run yourself, without a support ticket or a fee
- A restore you have actually tested at least once
Some budget hosts charge £20 to £50 to restore a backup, or keep only one copy on the same server as the site. If that server fails, the backup goes with it. Whatever your host offers, keep a second, independent backup somewhere else. It costs a few pounds a month and it is the cheapest insurance you will buy.
SSL certificates: free is fine
Every site needs HTTPS. Browsers flag sites without it as “Not secure”, and it is a basic requirement for any form or checkout. The good news is that free certificates from Let’s Encrypt, or the free certificate from Cloudflare, give you exactly the same encryption as a paid one. Paid “extended validation” certificates used to show a company name in the address bar, but mainstream browsers stopped doing that years ago. Unless a contract specifically demands an organisation-validated certificate, do not pay £50 to £200 a year for one. Any host still charging for basic SSL in 2026 is telling you something about its pricing.
Keep email hosting separate
Many hosting plans include “free” email mailboxes. We advise almost every client not to use them for business email. Here is why:
- Deliverability. Mail sent from a shared web server shares its reputation with everyone else on it. Dedicated email providers are far better at landing in the inbox.
- Resilience. If the website is hacked, suspended or being moved, your email keeps working.
- Freedom to move. You can change web host without migrating years of mailboxes.
- Features. Shared calendars, proper spam filtering, mobile apps and two-factor login.
Microsoft 365 and Google Workspace both have entry plans that, at the time of writing, cost roughly £5 to £8 per user per month before VAT. Whichever you choose, set up SPF, DKIM and DMARC records for your domain. Google and Yahoo have required these from bulk senders since 2024, and they help every business stop criminals sending invoices that appear to come from you. Our cybersecurity services include checking these records.
What hosting really costs: three worked budgets
Illustrative annual costs before VAT, using mid-range prices. Your own numbers will differ, but the proportions are typical.
| Item | Sole trader, brochure site | Service business, 5 staff | Online shop, 3 staff |
|---|---|---|---|
| Domain (.co.uk) | £12 | £12 | £12 |
| Website hosting | £96 (shared, £8/month) | £300 (managed WordPress, £25/month) | £720 (managed VPS, £60/month) |
| Off-site backup | Included | Included | £60 (£5/month) |
| SSL | £0 | £0 | £0 |
| Business email | £72 (1 user at £6/month) | £360 (5 users at £6/month) | £216 (3 users at £6/month) |
| Yearly total | £180 | £672 | £1,008 |
These exclude maintenance (updates, security monitoring, small fixes), which is a separate cost and often worth more than the hosting itself. For the full picture of running costs, see how much a website costs in the UK.
One more number worth knowing: uptime. A host promising 99.9 % uptime is allowing itself about 8 hours 45 minutes of downtime a year. At 99.99 % it is about 53 minutes. For a brochure site, 99.9 % is plenty. For a shop taking £2,000 a day, those extra hours are worth paying to avoid, especially if they fall on a Saturday in December.
Red flags when choosing a host
- “Unlimited” everything. There is always a fair-use limit, usually buried in the terms and enforced at the worst moment.
- A renewal price three or four times the intro price, shown only in small print.
- Backups on request or for a fee, or stored only on the same server.
- No data processing agreement and no clear statement of where data is stored.
- Old PHP versions as the default. WordPress needs a currently supported version of PHP 8; anything older is a security and speed problem.
- No staging site on a plan sold for business WordPress.
- Your domain registered in the host’s or developer’s name rather than yours. Always own your domain, and see our guide to choosing between .co.uk, .uk and .com if you have not registered one yet.
- No SFTP or SSH access, or no way to download a full copy of your site. You should always be able to leave.
- Support that is only a chatbot, with no way to reach a person when the site is down.
Checklist before you buy
- Data centre in the UK or EU, with a published data processing agreement
- Daily off-site backups with at least 14 days of history and self-service restore
- Free SSL with automatic renewal
- Current PHP 8 version and the ability to choose it
- Staging environment for testing changes
- Server-level caching or support for a CDN such as Cloudflare
- Renewal price written down, not just the first-year offer
- Domain registered in your business’s name, with your own login
- Email hosted separately, with SPF, DKIM and DMARC set up
- Support by phone or ticket with a stated response time
- Uptime monitoring that alerts you, not just the host
Our recommendation by type of business
- Sole trader or small brochure site: a reputable shared host or an entry-level managed WordPress plan with UK or EU servers, £5 to £20 a month. Spend the difference on good content.
- Established service business where the site brings in leads: managed WordPress, £20 to £40 a month, plus a maintenance plan. Downtime here means missed enquiries.
- WooCommerce or other online shop: managed WordPress with a WooCommerce-specific plan, or a managed VPS, £30 to £120 a month. Hourly backups during trading hours. Test checkout speed under load before Black Friday, not during it.
- Custom software, portal or SaaS: cloud hosting in a UK region with automated deployments, monitoring and budget alerts. This is a job for a developer or DevOps engineer, not a control panel.
- Health, legal, financial or public sector work: UK hosting with a clear data processing agreement and a provider that can show recognised security certifications, because your clients will ask.
A fast host also makes the rest of your work easier. If your site is already on decent hosting and still slow, the problem is usually the theme and plugins rather than the server; our WordPress speed guide and Core Web Vitals explainer show where to look.
We are based in London and set up, migrate and look after hosting for businesses across the UK, from a single WordPress site to cloud infrastructure for custom software. If you want someone to review your current hosting or move you somewhere better, you can book hours at our standard rates, see our IT infrastructure management service, or get in touch and tell us what you have now.
Frequently asked questions
How much should a small business pay for website hosting in the UK?
Typically £5 to £40 a month before VAT for a business website, and £30 to £120 a month for an online shop or busy site. Compare renewal prices, not introductory offers, and check what backups and support are included.
Does UK GDPR require my website to be hosted in the UK?
No. UK GDPR requires personal data to be secure and any transfer outside the UK to be lawful. Hosting in the EU or EEA is covered by UK adequacy regulations. You do need a data processing agreement with your host, as it acts as your processor.
Do I need to pay for an SSL certificate?
For almost all small business sites, no. Free certificates from Let's Encrypt or Cloudflare provide the same encryption as paid ones, and browsers no longer display company names for paid extended validation certificates.
Should I use the email that comes with my hosting?
We advise against it for business email. A dedicated provider such as Microsoft 365 or Google Workspace gives better deliverability, keeps email working if the website has problems, and lets you change web host without moving mailboxes.
What is the difference between managed WordPress hosting and shared hosting?
Shared hosting gives you space on a general-purpose server. Managed WordPress hosting is tuned for WordPress, with caching, automatic backups, staging sites and WordPress-specific support. It costs more but suits most business sites better.
Can you move my website to better hosting?
Yes. We set up and migrate hosting for businesses across the UK, from single WordPress sites to cloud infrastructure for custom software. You can book hours online, and our hours never expire.
Photo: Kirill Sh via Unsplash
