To choose web hosting for a UK business, first match the hosting type to your site (shared, managed WordPress, VPS or cloud), then compare the things that affect customers: server speed and location, support quality, automatic backups, security features and upgrade paths. Check where personal data is stored for UK GDPR, and avoid deciding on introductory price alone. Outside the UK, the same checklist works: pick a server near your customers and check the data protection rules that apply where you trade.
The rest of this guide explains each hosting type, the questions to ask a provider, a scoring checklist, and the warning signs that a cheap plan will cost you later.
Key takeaways
- Match the hosting type to your site first, as managed WordPress or a website builder usually suits a business with no technical person.
- Ask how backups are handled, which PHP version is supported and what the plan costs after the first term, not just the introductory price.
- Under UK GDPR, check where your host stores personal data and ask for standard contractual clauses if it sits outside adequate countries.
- Google does not rank sites better simply for being hosted in the UK, although a nearby server can improve speed for UK visitors.
What type of hosting does my business need?
| Hosting type | What it is | Good for | Watch out for |
|---|---|---|---|
| Website builder (Wix, Squarespace, Shopify and similar) | Hosting, software and design in one subscription | Brochure sites and shops with no developer | Limited control; harder to move away |
| Shared hosting | Your site shares a server with many others | Small, low-traffic sites on a tight budget | "Unlimited" plans with hidden limits; noisy neighbours |
| Managed WordPress | Hosting tuned for WordPress, with updates, caching and backups handled | Most small business WordPress sites | Plugin restrictions; per-site pricing |
| VPS | A virtual server with dedicated resources | Growing sites, custom apps, developers | You or someone you pay must manage security and updates |
| Cloud platforms | Scalable infrastructure billed by usage | Apps with variable traffic and in-house technical skill | Complex billing; needs expertise |
If you have no technical person, a website builder or managed WordPress host usually beats a cheaper unmanaged plan, because the hosting company handles the work you would otherwise forget. If you have a developer or agency, a VPS gives more control for the money.
Does it matter where my web server is located?
It matters for speed and for data protection, but less than people think for SEO.
Speed. A server in or near the UK reduces the round-trip time for UK visitors, which helps time to first byte. A CDN can offset distance for static files, and many businesses do not need one at all. Our guide to whether you need a CDN covers that decision.
Data protection. Under UK GDPR, sending personal data outside the UK is a "restricted transfer" unless the destination is covered by UK adequacy regulations or appropriate safeguards are in place. The ICO lists the EEA countries and several others as fully adequate. The US has only partial adequacy, covering data sent to organisations certified under the UK Extension to the EU-US Data Privacy Framework. If your host, backups or support staff sit outside these places, the host should offer standard contractual clauses (the UK addendum or IDTA). Ask, and record the answer.
SEO. Google does not rank sites better simply for being hosted in the UK. A .uk domain, UK content and a fast site matter far more.
What questions should I ask a web host before buying?
- What resources do I actually get? CPU, memory, storage and any limits on processes or "fair use". Unlimited never really means unlimited.
- How are backups handled? Frequency, how long they are kept, whether they are stored off the server, and whether restores are free and self-service.
- What software versions are supported? For WordPress, the project currently recommends PHP 8.3 or newer and MySQL 8.0 or MariaDB 10.11 or newer. PHP 8.1 reached end of life at the end of 2025 and PHP 8.2 stops receiving security fixes at the end of 2026, so a host still defaulting to them is a warning sign.
- Is HTTPS free and automatic? Free Let's Encrypt certificates with automatic renewal should be standard. Certificate lifetimes are getting shorter, so manual renewals are a liability; see SSL certificate lifetime changes.
- What security is included? A web application firewall, malware scanning, account isolation on shared servers, and two-factor login for the control panel.
- What support do I get, and when? UK business hours or 24/7, phone or ticket only, and typical response times. Test it before you buy with a pre-sales question.
- What is the uptime commitment and what happens if it is missed? An SLA with service credits shows the host is willing to stand behind its claims.
- How easy is it to leave? Can you download full backups and databases? Do they lock your domain or DNS?
- What does it cost after the first term? Renewal prices are often two to three times the introductory offer.
How do I compare hosts fairly?
Score each shortlisted host from 1 to 5 against your priorities. A simple weighting for a typical small business:
| Factor | Weight |
|---|---|
| Performance (server response, PHP version, caching) | 25% |
| Support quality and hours | 20% |
| Backups and restore process | 15% |
| Security features | 15% |
| Price at renewal, not introductory | 15% |
| Data location and contract terms | 10% |
Then test. Many hosts offer a money-back period. Put a copy of your site on the new host, measure response times with the MakeItFlow website speed test, and compare against your current host. Our explainer on reducing TTFB explains what a good server response time looks like.
Should my domain and email be with the same company as my hosting?
Not necessarily. Many businesses keep the domain at a registrar, email on Microsoft 365 or Google Workspace, and the website with a host. The advantage is resilience: if the host has an outage or you fall out with them, your email keeps working and you can move the site by editing DNS. If you do bundle everything, keep a copy of your DNS records and make sure the domain is registered in your business's name, not the host's.
What are the warning signs of bad hosting?
- Slow server response even on a simple page, especially at busy times.
- Old PHP or database versions with no upgrade path.
- Backups that cost extra to restore or are only kept on the same server.
- Support that only responds by email after days.
- Frequent unexplained outages. A website monitoring tool will show you how often your site goes down.
- Pressure to buy add-ons such as SSL certificates that should be free.
Frequently asked questions
Is cheap shared hosting good enough for a small business?
For a simple brochure site with modest traffic, often yes, as long as the host is reputable, uses current PHP and includes off-server backups. Online shops, booking systems and busy sites usually outgrow it quickly.
Do I need managed hosting for WordPress?
Not strictly, but it helps if nobody on your team will handle updates, caching and backups. Managed hosts also tend to have better default security. Pair it with our WordPress security checklist either way.
How much should UK business hosting cost?
Prices vary widely. Basic shared plans can cost a few pounds a month, managed WordPress typically costs more, and VPS pricing depends on resources and management. Compare renewal prices and what is included, not the headline figure.
Is it difficult to switch hosts later?
It is manageable with planning: migrate the site, test it, then update DNS. Our guide on pointing your domain to a new host walks through it without downtime.
Does my host need to be ISO 27001 or Cyber Essentials certified?
It is not a legal requirement, but certifications show the host takes security seriously, and some customers or contracts will ask about your suppliers. Ask for certificates rather than relying on logos on a sales page.
What to do next
Before you sign up, measure your current site so you have a baseline to compare against. MakeItFlow checks server performance, Core Web Vitals, SSL, security headers and DNS in a single scan, so you can run a free website audit on your current host and again after the move. It does not do uptime monitoring or backups, so use your host's backup tools and a dedicated uptime service for those.
Sources
Written by the MakeItFlow team
We build the website audit these guides are based on. Every fact is checked against the primary sources listed above and this guide was last reviewed on 25 October 2026 . How we research and check
Check your own site in 30 seconds
Run a free audit covering speed, SEO, DNS, email authentication and security headers — and get a prioritised fix list.
