Skip to content →

Inclusive website design

This is how your website really should be developed

What do you want your website to do?

This is the question that your developer should ask you upfront. If they do know what your objectives are, how can they develop to meet your needs?

Three things that your website should do, that it probably does not do well

It should be fast to load

Pages on mobile devices should load within 3 seconds

It should be secure and encrypted

Pages on mobile devices should load within 3 seconds

It should be accessible to all

Meeting website accessibility standards in web design is so often overlooked.

It should conform to GDPR

Many websites say they do, but a look under the bonnet quite often reveal that they do not.

Did you know?

WordPress powers a third of all websites around the globe. It;s a brilliant CMS, but it is also a victim of it’s popularity. Automated hacks on WordPress websites are extremely common.

Website integrity checklist

Besides the marketing objectives, there are clear development objectives.

Every good website should be follow these guidelines and standards:

  • Be clear and concise, easy to percieve with clear navigation
  • Be optimised to display coherently on all devices
  • Be hosted with a reputable Internet service Provider (ISP) with fast servers
  • Secured to measurable A security grade standards
  • Conform to the General Data Protection Regulations (GDPR)
  • Conform to PCI/DSS standards; a legal requirement if processing financial transactions
  • Optimised for page load performance measurable to A grade standards
  • Meet with measurable accessibility standards which us a legal requirement for central and local government websites
  • Search Engine Optimsed (SEO), where applicable, and measured for issues
  • Be connected to a Content Delivery System (CDN)
  • Deploy a Web Application Firewall (WAF)
  • Minimise the use of Cookies and understand exactly what cookies are be deployed and for what purpose
  • Run malware detection
  • Employ an early warning/alert system in the event of malicous attack
  • Take regular automated back-ups of all files, content and database and store remotely
  • Have a disaster recovery plan