Six steps, no surprises:

1. Free consultation to understand your business and goals.
2. We send a written proposal and a fixed quotation.
3. Once approved, we design — you see a direction before any code exists.
4. You review and request changes.
5. We build, test, and run a security pass before anything goes live.
6. We launch, hand over the keys, and support it afterwards if you want that.

Most sites land in two to six weeks, depending on size, features, and how quickly content and feedback come back from your side. A single landing page is about a week. Adding chat to an existing site is one to two weeks. A security audit takes about a week — and if you're actively compromised, we start the same day.

Every business needs something different, so we quote per project — free and personalised. You get a fixed number in writing before any work starts: no hourly billing, no scope surprises, no invoice that grew while you weren't looking.

Yes — and usually we rebuild rather than patch. We keep whatever's already working for you, your copy angle and your best photos, then rebuild the structure so it loads fast, reads clearly on a phone, and stands a chance in search. You'll see a design direction before any code is written.

It helps, but no. Most clients hand us rough notes or nothing at all, and we write the site from a 30-minute conversation about the business. Copywriting, images and content creation are all available. If you already have copy you like, we'll edit and structure it rather than replace it.

Real code — SvelteKit and WebSockets, deployed on infrastructure we harden ourselves. No monthly platform fee stacked on your site, no template ceiling, and no chat vendor holding your conversation history. If you'd rather keep Shopify or Squarespace for the shop side, we'll work with it.

Yes. Every site we build is fully responsive and tested on real phones and tablets, not just a resized browser window. Most of your visitors arrive on a phone, so that's the screen we design first and the desktop layout follows.

Yes. We register your domain, set up reliable hosting, configure SSL and business email, and manage the whole stack so you never think about it. The domain goes in your name from day one — we administer it, you own it.

Basic on-page SEO is standard: proper page structure, meta tags and schema markup, fast loading speeds, mobile optimisation, plus sitemap and Google Search Console setup. Advanced packages — content strategy, local SEO, ongoing rank tracking — are available when you're ready to compete for harder keywords.

Absolutely. The pages you'll actually change — menu, prices, gallery, hours, staff — get wired to a simple editor. No code, no calling us about a typo. We walk you through it at handover and leave written guidance you can pass to whoever takes over.

Every build ships with HTTPS, hardened security headers, firewall rules, rate-limited forms, bot and spam protection, and automated backups we actually test by restoring them. Admin access never sits on a default URL. You shouldn't have to pay extra to not get hacked.

The things that actually get small sites taken over: outdated plugins with public exploits, admin panels on default URLs, reused passwords, missing security headers, sloppy TLS, open ports, and server config that's been quietly edited. You get a plain-English report — what's broken, how bad it is, what to fix first — not a forty-page scanner dump.

Yes — and that's a break-in, not an SEO problem. We trace how they got in, strip the injected config and any backdoors, rotate every credential and key, then rebuild the search side: sitemap, re-indexing, cleanup requests, so you stop ranking for someone else's keywords. You get told what was exposed, not just that it's handled.

Yes. Audits, cleanups and hardening are available on any site, whoever built it and whatever it runs on — WordPress, Wix, Shopify or custom. You don't have to rebuild with us first, and we'll tell you honestly when a fix costs less than a rebuild.

Both. A support bubble in the corner of the page, or a full multi-room chat with accounts, roles and history — same underlying build, different surface. It runs on real-time WebSockets on infrastructure we control, not a third-party widget that also tracks everyone who visits your site.

Your call — usually both. The AI handles the questions you answer fifty times a week (hours, pricing, booking, order status) using only content you've approved, and hands off to a human the moment it's out of its depth or someone asks for one. You see every conversation and can improve its answers straight from the transcripts.

On infrastructure we control — encrypted in transit, encrypted at rest, never sold on. Access is role-based and logged, so you can see who opened what. Retention is your policy, not ours: pick a window and messages age out on schedule. If conversations must never touch an outside AI model, we can run it that way from day one.

That's a lot of what we build. Rooms and channels, invite-only or paid access, moderator tools, bans and mutes, rate limits, file sharing that gets scanned before download, and a full audit trail. Community platforms fall over on spam and moderation long before they fall over on features, so that's where we start.

Chat is the visible part. Behind it we wire up bookings and reminders, quote requests that reach your phone in seconds, order status lookups, review requests after a job, and lead routing so enquiries stop dying in an inbox. If your team does something fifty times a week by hand, it's worth a look.

Yes, on a monthly retainer. We patch dependencies before exploits go public, monitor uptime and errors, keep backups tested rather than merely running, review access logs, and keep spam and abuse out of your forms and rooms. Technical support is included. Prefer to self-host? We hand everything over with setup docs and an incident checklist.

We're here to help. Small updates are usually handled within the same week. Larger enhancements get scoped whenever the business grows — and because you own the code outright, there's no platform ceiling on what's possible later.

You do — domain, code, content, and every chat message in the database. Exports on request, no lock-in, nothing held hostage. If you move to another developer, everything transfers, keys and runbooks included.

We build modern, fast websites that are secure by default and easy to run — then keep them that way. Clear communication, transparent fixed pricing, no lock-in on your domain, code or data. Most agencies treat security and support as an afterthought; for us they're half the job.

Yes — most of our clients are. Work runs over email, a shared project board and scheduled calls, with a fixed weekly update so you're never wondering where things stand. Overlapping hours get agreed at kickoff, and urgent security issues are covered outside them.