Accessibility, privacy and consumer law are not extras I sell you later. They are part of how the site gets built, because a website that quietly breaks the rules is a liability dressed up as a brochure.
Every site I build targets WCAG 2.2 AA as a baseline, not as an afterthought bolted on with an overlay widget. Overlays get businesses sued; real markup does not.
That means proper heading order, real buttons and links instead of clickable divs, visible keyboard focus, labelled form fields, alt text on every meaningful image, and colour contrast checked against the actual palette rather than guessed.
I test with a keyboard, a screen reader pass, and an automated audit before launch, and I hand you the report so you have a record of the effort.
Your site gets a privacy policy that describes what you actually collect, why you collect it, how long you keep it, and who else can see it. Generic copied policies are worse than none, because they describe processing you never do.
I map the data flows first (forms, analytics, chat, booking, payments), then write the policy against that map. If your business needs a lawyer's review, I will say so plainly rather than pretend a template is legal advice.
I collect the minimum a form needs to do its job. No hidden fields, no silent profiling, no third party pixels you did not ask for.
Form submissions travel over HTTPS, land somewhere you own and control, and can be deleted on request. If you need retention limits or export on demand, I build that into the workflow.
Signup forms use real opt-in, not a pre-ticked box hidden under a submit button. Every marketing email carries a working unsubscribe link, an accurate sender name, and a postal address where the law requires one.
This covers CAN-SPAM in the US, CASL in Canada, PECR and UK GDPR in Britain, and the Spam Act in Australia. Unsubscribes are honoured immediately, not in ten business days.
Claims on your site should be things you can back up. I will not write a fake countdown timer, a fabricated review, or a statistic nobody can source.
Pricing, delivery timelines, guarantees and cancellation terms get stated clearly and placed where a customer sees them before they commit, not buried in a footer link.
Stores need more than a checkout button. Total price including tax and shipping shown before payment, a clear order confirmation, refund and returns terms a customer can find in two clicks, and secure payment handled by a processor like Stripe or PayPal rather than anything homegrown.
Card details never touch your server. Order data stays inside the platform you already control.
ADA Title III accessibility expectations, state privacy laws such as CCPA and CPRA in California, and CAN-SPAM for email. State laws keep expanding, so policies are written to be updated, not frozen.
PIPEDA for personal information, CASL for email and electronic messages, and AODA accessibility rules for organisations operating in Ontario.
UK GDPR and the Data Protection Act for personal data, PECR for cookies and marketing, and the Equality Act, which is the practical driver behind accessible websites.
The Privacy Act and Australian Privacy Principles, the Spam Act for email and SMS, and Australian Consumer Law for claims, pricing and guarantees.
Send me the URL and I will send back a plain-English list of what is broken and what it would take to fix. No charge for the audit.
Email me the URL