Managed website infrastructure for UK businesses.
Hand-crafted, AI-assisted UK website systems. EU-sovereign by design.
| live UK sites | industries shipped | PageSpeed Β· desktop / mobile | +Β£295 launch Β· waived annually | engineer answers your email |
- What we run
- How it works
- UKWM vs the traditional agency
- Verifiable proof
- Engineering principles
- The stack
- Compliance + security
- Recent thinking
- Get in touch
- About this organisation
Not project work β infrastructure. Every site we ship is designed, built, hosted and continually upgraded by the same engineer, every month. Four verb-named tiers from Β£49/month, plus a Β£295 launch fee (waived on annual plans), cancel any time under UK Consumer Contracts Regulations.
| Tier | Price | What it does |
|---|---|---|
| π’ Get Online | Β£49/month | The credible foundation β fast, accessible site, EU-sovereign hosting |
| π Get Booked | Β£149/month | Bookings, ordering, lead capture wired into TWHQ β turn visitors into customers |
| π Get Growing | Β£395/month | Conversion, CRM (Capsule), monthly growth experiments, content velocity |
| π Local Domination | from Β£695/month | Multi-location SEO, paid acquisition oversight, dedicated growth engineer |
Plus Β£295 launch fee, waived on annual plans. Regulated-sector briefs require tailored compliance posture β email hello@ukwebmarketing.com to discuss.
| Vertical | What we ship |
|---|---|
| π§ Wellness + fitness | Non-clinical wellness, fitness, lifestyle brands β EU-sovereign hosting, GDPR-aware forms |
| π Trades + construction | Builder, electrician, gas, roofer, removals β tap-to-call, service-area focused |
| π½ Hospitality + retail | Restaurant, takeaway, cafΓ©, car dealer β menu-led, stock-led, conversion-first |
| π Service businesses | Booking and ordering modules via TWHQ β first-party, no third-party iframes |
| π Community + non-profit | Charity, faith, education-adjacent β accessible, low-overhead, content-first |
90+ live UK sites across 19 industries.
flowchart LR
A[Free audit] -->|20s Β· URL only| B[One-page PDF]
B -->|If you want to talk| C[15-min intro call]
C -->|If we both want to proceed| D[Pick a tier]
D -->|Β£49 Β· Β£149 Β· Β£395 Β· Β£695| E[Build + ship]
E -->|Same engineer, same hands| F[Continually maintained]
F -->|Cancel any month| G[You own the result]
style A fill:#fcd34d,stroke:#0b0620,color:#0b0620
style B fill:#fff,stroke:#5b4fe5,color:#0b0620
style C fill:#fff,stroke:#5b4fe5,color:#0b0620
style D fill:#5b4fe5,stroke:#5b4fe5,color:#fff
style E fill:#5b4fe5,stroke:#5b4fe5,color:#fff
style F fill:#5b4fe5,stroke:#5b4fe5,color:#fff
style G fill:#0cce6b,stroke:#0b0620,color:#fff
No sales pitch, no proposal deck, no agency-onboarding theatre. The audit is the pitch. If you want to keep going after reading it, we set up a tier and ship.
| UKWM | Typical UK web agency | |
|---|---|---|
| Pricing model | Subscription, Β£49 / Β£149 / Β£395 / from Β£695 | One-off Β£3kβΒ£15k project + maintenance retainer |
| Setup fee | Β£295 launch fee, waived on annual plans | Β£500βΒ£2,000 |
| Who builds it | One engineer, same one, every month | Junior team, account-manager handover, offshore implementer |
| Code | Hand-crafted Astro, no themes | WordPress + paid theme + 30 plugins |
| Hosting | EU-sovereign edge, included | Shared cPanel hosting at extra cost |
| Updates | Continuous; same engineer | Quarterly review meetings |
| Cancellation | Any month, no penalty | 12-month minimum contract |
| Page speed | 99 desktop Β· 91 mobile | Often 30β50 mobile |
| Accessibility | WCAG 2.2 AA built in | Overlay widget bolted on |
| Owner of the site | You, transferred on request after 12 paid months | "Yours" but locked to the agency's hosting and CMS |
| Pricing on the website | Public, visible, simple | "Get in touch for a quote" |
Our own site, captured today on Google PageSpeed Insights:
| Performance | Accessibility | Best Practices | SEO | |
|---|---|---|---|---|
| Desktop | ||||
| Mobile |
β Verify on Google PageSpeed Insights
What we believe about how a website should be built + run:
- A managed website is infrastructure, not pages. Treating it like project work creates the death spiral of stale, broken, abandoned UK small-business sites. We treat it like the production system it is β same engineer, same hands, every month.
- Speed is a feature. Every 100ms of delay costs you a booking. Core Web Vitals are designed into the first commit, not bolted on at the end.
- Hand-crafted code, AI-assisted velocity. AI writes the boilerplate. We write the parts that matter to your customers.
- EU-sovereign by design. Customer data lives in the EU; no transatlantic data transfers without an explicit business reason.
- Accessibility is built in, not bolted on. WCAG 2.2 AA from day one. If a site needs an accessibility overlay, it isn't accessible.
- One engineer answers your email. No account managers, no offshore handover, no escalation queue.
| Layer | What |
|---|---|
| Framework | Astro β static-first, hand-coded |
| Hosting | EU-sovereign edge, cached globally |
| Payments | Stripe Checkout (UK), live mode |
| Transactional email | Resend with verified custom domain DKIM |
| Booking + ordering | TWHQ β our first-party modules |
| Analytics | Plausible β privacy-friendly, no cookies |
| CRM (Get Growing tier and above) | Capsule CRM |
| Search | Pagefind β client-side, no third-party tracking |
| CI / Deploy | GitHub Actions β Vercel; preview deploy per PR |
Accessibility β WCAG 2.2 AA, built in
Every site we ship is built to WCAG 2.2 Level AA. Not via an overlay or accessibility-widget plugin (these reduce accessibility, they don't improve it). Automated checks run on every Vercel preview; manual checks before any prod release.
Where a brief touches a named framework (NHS Service Manual + DAC, SRA, ICAEW, KCSIE), we scope the engagement against it explicitly before quoting.
Data protection β GDPR + UK GDPR posture
- Data residency: EU-sovereign hosting, no transatlantic transfers without an explicit business reason
- Cookies: Plausible analytics is cookieless. Marketing cookies only where the customer explicitly opts in
- Subject-access requests: handled directly by the data controller (each tenant of TWHQ services owns their data)
- Sub-processors: declared per service; standard contractual clauses where applicable
Each client site ships with a DPA template + privacy policy template that we maintain.
Sector-specific compliance β SRA Β· ICAEW Β· KCSIE Β· NHS
- SRA (solicitors) β confidentiality posture documented per matter; no third-party JS that exfiltrates form data
- ICAEW (accountants) β same confidentiality posture; sub-processor list reviewed per engagement
- KCSIE (schools) β safeguarding compliance, age-appropriate design, no third-party tracking
- NHS Service Manual (clinics) β design system + content standards aligned; EU data residency
Security β responsible disclosure + supply chain
- Responsible disclosure: email security@ukwebmarketing.com β we acknowledge within 24h, fix or document within 7d
- CSP: tight content-security-policy on every site;
script-src 'self' 'unsafe-inline'only where the platform requires it - Dependencies: Dependabot enabled on every client repo (
dependabot.ymlchecked in; security updates on at the org level); weekly advisories triaged - Secrets:
gitleaksruns on every PR; no secrets in commits - CodeQL: SAST on every PR
- HTTPS: HSTS preloaded on all production domains
- Backups: per-service, declared in the tier docs
SOC 2 / ISO 27001 β readiness, not yet attested
We maintain SOC 2 readiness documentation aligned to Common Criteria + the four elective Trust Service Criteria (Availability, Processing Integrity, Confidentiality, Privacy). 17 of 20 Common Criteria are operational; remediation queue is mapped for a future Type I attestation if a client engagement requires it.
We are not currently SOC 2 or ISO 27001 attested. We don't claim either.
A selection from the UKWM blog β sector-specific deep dives on why UK SMB sites fail, and what to do about it:
The regulated-sector deep-dives below are now on the sibling brand:
- π Why your UK clinic website probably breaks GDPR β now on sibling brand
- βοΈ Why your UK law firm website probably fails SRA confidentiality β now on sibling brand
- π Why your UK school website probably fails KCSIE β now on sibling brand
- π Why your UK accountancy website probably fails ICAEW confidentiality β now on sibling brand
| Channel | Where |
|---|---|
| Website | ukwebmarketing.com |
| Free audit | ukwebmarketing.com/audit |
| Direct links | ukwebmarketing.com/links |
| /company/ukwebmarketing | |
| @ukwebmarketing | |
| Profile | |
| Security | security@ukwebmarketing.com |
| General | hello@ukwebmarketing.com |
| +44 7553 070841 |
This GitHub organisation is operated by TicketWave HQ Ltd β Companies House no. 17143167:
- Founder + technical lead: Jordan Gilbert β ukwebmarketing.com/jordan Β· linkedin.com/in/eu-jordangilbert
- Company no.: 17143167 (Companies House, England & Wales β TicketWave HQ Ltd)
- Registered office: Radley House, Richardshaw Road, Pudsey, Leeds, LS28 6LE, United Kingdom
- VAT: registration pending; quoted prices exclude VAT until registered
Repositories under this organisation are private by default. This .github repo is the only public surface. If you're here to verify a claim on ukwebmarketing.com, or to file a security disclosure, every channel you need is above.
Last updated: 2026-06-28 Β· This page is maintained at ukwebmarketing/.github
Organization schema (JSON-LD)
{
"@context": "https://schema.org",
"@type": "Organization",
"name": "UK Web Marketing",
"alternateName": "UKWM",
"url": "https://ukwebmarketing.com",
"logo": "https://ukwebmarketing.com/social/linkedin/banner-1584x396.png",
"description": "Managed website infrastructure for UK businesses. Hand-crafted, AI-assisted UK website systems. EU-sovereign by design.",
"parentOrganization": {
"@type": "Organization",
"name": "TicketWave HQ Ltd",
"identifier": "17143167",
"url": "https://find-and-update.company-information.service.gov.uk/company/17143167",
"address": {
"@type": "PostalAddress",
"streetAddress": "Radley House, Richardshaw Road",
"addressLocality": "Pudsey",
"addressRegion": "Leeds",
"postalCode": "LS28 6LE",
"addressCountry": "GB"
}
},
"founder": {
"@type": "Person",
"name": "Jordan Gilbert",
"jobTitle": "Founder and technical lead",
"url": "https://ukwebmarketing.com/jordan",
"sameAs": [
"https://www.linkedin.com/in/eu-jordangilbert"
]
},
"contactPoint": [
{
"@type": "ContactPoint",
"contactType": "customer service",
"email": "hello@ukwebmarketing.com",
"url": "https://ukwebmarketing.com/audit",
"areaServed": "GB",
"availableLanguage": ["English"]
},
{
"@type": "ContactPoint",
"contactType": "security",
"email": "security@ukwebmarketing.com"
}
],
"sameAs": [
"https://github.com/ukwebmarketing",
"https://www.linkedin.com/company/ukwebmarketing",
"https://www.instagram.com/ukwebmarketing/",
"https://www.facebook.com/profile.php?id=61590844910998"
]
}