As soon as a form collects names, emails or phone numbers, Quebec's Act respecting the protection of personal information in the private sector applies. Its section 8.2 requires any person who collects personal information through technological means to publish on the enterprise's website a confidentiality policy "drafted in clear and simple language." Even a simple business website must therefore plan for this policy from the design stage.
Short answer
You describe your company, your services and what the site must achieve: your request is reviewed by the Courtier TI team, then entrusted to the IT services company that will prepare your quote. The pages, content, technology and hosting are set with you.
What the quote should cover
- The list of pages included and their content
- Who writes, translates and provides photos
- The contact form, its protection and where messages go
- The confidentiality policy and information about the person in charge of personal information
- Basic SEO: titles, descriptions, readable addresses
- French and English versions, if applicable
- Domain name, hosting, updates and training to edit content
The steps of a business website
- Definition of goals and key pages
- Content preparation: text, photos, logo
- Mockup and design suited to phones and computers
- Development, integration of content and the form
- Checks: links, form, language versions, display
- Launch, training and update plan
Key pages and content
Most business websites include a home page, one or more service pages, an about page, a contact page and the confidentiality policy. Add what helps your clients decide: past work, service area, frequently asked questions. One page per service also helps with search.
Content is your responsibility, even if someone else writes it: you are the one who knows your services. Have the quote specify who writes, how many pages are included, who translates, who provides photos and who approves. For French-language obligations and sites that sell online, see E-commerce website.
Contact form and personal information
Ask only for what you need to respond: the Act states that a person collecting personal information may collect only the information necessary for the purposes determined before collecting it (s. 5). At the time of collection, the person must be informed, among other things, of the purposes, the means used and their rights of access and rectification (s. 8). The title and contact information of the person in charge of the protection of personal information must be published on the enterprise's website (s. 3.1).
If the site uses analytics or advertising tools that allow a visitor to be identified, located or profiled, section 8.1 requires informing the person beforehand and of the means available to activate those functions. Have the quote specify where form messages go, who can access them and how long they are kept.
Basic SEO
Google's SEO starter guide says it itself: "There are no secrets here that'll automatically rank your site first in Google." Basic SEO means making your pages easier to crawl and understand: a title specific to each page, since Google uses the words inside the title element among other sources to generate the title link, a short description unique to each page, readable addresses and useful content.
A serious quote describes this basic work. Be wary of an offer that promises a position or a volume of visits: rankings are determined by search engines, not by the provider.
Domain, hosting and security
The domain name should be registered in your company's name, and you should hold the access to hosting and site administration. The content management system, such as WordPress, Wix or Squarespace, is only an example here: the choice depends on who will edit the site and the features wanted.
In ITSAP.60.005, the Canadian Centre for Cyber Security recommends requiring HTTPS by default, considering all inputs on your website untrusted and validating them, and implementing a patch management process that covers content management systems and plug-ins. A contact form is an input: have the quote specify its protection against automated submissions and who applies updates.
Questions to ask yourself before requesting a quote
- What should a visitor do after viewing the site: call, write, visit you?
- Which pages are essential for your clients?
- Who will provide the text and photos?
- Should the site be French only or bilingual?
- Who will edit the site after launch?
- Do you already own a domain name, in your name?
Pitfalls to avoid
- A form that asks for more information than necessary
- No confidentiality policy on the site
- A quote that promises a position in Google
- A domain name registered in the provider's name
- Content nobody has planned for
- Nobody responsible for system and plug-in updates
What to specify in your request
- Your industry, services and service area
- The approximate number of pages and languages
- Who provides the content
- Features wanted: form, map, appointment booking
- Your current domain name, if any
- Examples of sites you like, and why
You can then describe your project: the team will contact you to clarify your needs and provide a quote.
Frequently asked questions
What is the difference between a business website and an e-commerce website?
A business website presents your company and generates requests. An e-commerce website also lets people buy and pay online, which adds obligations and payment-specific security requirements.
Does a business website need a confidentiality policy?
If the site collects personal information through technological means, such as a form, yes: section 8.2 of Quebec's Act respecting the protection of personal information in the private sector requires publishing a confidentiality policy drafted in clear and simple language.
Is SEO included?
Basic SEO should be: titles and descriptions specific to each page, readable addresses, useful content. According to Google, there are no secrets that will automatically rank a site first. Be wary of promised positions.
Will we be able to edit the site ourselves?
Yes, if the content management system allows it and training is planned. Have the quote specify what you can change on your own and what will require the company's help.
Who should own the domain name?
Your company. Check whose name it is registered in and require that you hold the access to hosting and site administration.