What you getYou get absolutely everything included.
There is no setup fee, no build cost, no separate hosting bill, no charge for changes, and nothing that turns up later as an extra line on an invoice. One monthly fee covers designing your website, building it, hosting it, keeping it fast, keeping it secure, keeping it findable, and changing it whenever you need.
The website itself
A design made for your business. Not a template with your logo dropped in. We look at what you've got, what you do, and who you're trying to reach, and we design something that fits. If you already have a website, we keep what works: your colours, your logo, your photographs, your words. Then we make all of it better.
Built on our own platform, not a page builder. Your site is written as real code. Clean HTML, a little CSS, barely any JavaScript. No plugin stack, no theme with a thousand features you'll never use. Most platforms are somewhere your website lives inside, and it carries their weight forever. Ours works the other way round: it produces your site as a finished, standalone thing, and then gets out of the way. That's why our sites are a fraction of the size of everyone else's, and why they stay fast forever instead of slowing down over time.
Five to ten pages. Home, about, services, contact, and whatever else your business actually needs. If you need more, we'll talk about it.
Version controlled, always recoverable. Every site lives in a proper repository. Every change is recorded. Nothing is ever lost, and we can roll back to any previous version at any time.
Hosting that doesn't fall over
Served from a global edge network. Your site is delivered from data centres around the world, so it loads quickly whether your customer is in Tauranga or Toronto.
No server to break. There's no database, no PHP, no WordPress, and no control panel. Nothing to hack, nothing to update, and nothing to go down at three in the morning because a plugin decided to update itself.
Monitored. If something goes wrong, we find out before you do.
Your domain stays yours. We'll manage it for you, or leave it registered in your name and just configure it. Either way it's your domain, in your name, and it always will be.
Found by people
Technical SEO, done to the standard. Page titles, meta descriptions, heading structure, clean URLs, canonical tags, an XML sitemap, a robots file, Open Graph tags so your links look right when shared. All of it correct, on every page, from day one.
Structured data. We describe your business to search engines in the format they actually read: who you are, where you are, what you do, your hours, your contact details. This is what puts your business in the box at the side of a Google result, and most small business websites don't have it at all.
Fast, because speed is a ranking factor. Images converted to modern formats, sized correctly, and loaded only when needed. Fonts served from your own domain. No render-blocking scripts. Nothing on the page that doesn't earn its place.
What we don't do is off-site SEO. No link buying, no directory spam, no guest post schemes, no tricks. Everything we do happens on your website, in the open, to the published standard. That's a deliberate choice and we'll explain it to you happily.
Found by AI
When someone asks ChatGPT or Claude or Google's AI for a recommendation, the answer comes from websites those systems can actually read. A lot of sites are now invisible to them: the content only appears after JavaScript runs, there's no structured data, and nothing tells the machine what the business does.
We build for that. Your content is in the HTML, readable without JavaScript. Your business is described in structured data. And every site gets an llms.txt file, a plain summary of who you are and what your pages contain, written specifically for AI systems.
We can't promise an AI will recommend you. Nobody can. What we can promise is that you'll be readable, which is more than most of your competitors can say.
Secure, properly
HTTPS everywhere, enforced. Not just available. Enforced, so a browser will refuse to connect any other way.
Full security headers. Content Security Policy, Strict Transport Security, X-Frame-Options, X-Content-Type-Options, Referrer Policy, Permissions Policy. In plain English: your site can't be loaded inside someone else's page to trick your customers, browsers won't run injected code, and nobody can quietly downgrade a visitor's connection.
Most small business websites have none of these. You can check yours in about ten seconds at securityheaders.com, and you should.
Nothing to attack. No login page, no database, no admin panel, no plugins. The most common way a WordPress site gets hacked is an out-of-date plugin. You won't have any.
Your email and your domain
It's some of the most valuable work we do.
- SPF
- Only servers you approve can send email as your business.
- DKIM
- Every email carries a signature proving it's really from you.
- DMARC
- Anyone forging your name gets stopped.
- CAA
- Only a short list of named authorities can issue certificates for your domain.
Why this matters: if someone can send email that looks like it came from your business, they can invoice your customers. It happens to New Zealand small businesses constantly, and the first anyone knows about it is when a client phones to ask why they paid the wrong bank account.
Most websites we look at have no SPF, no DKIM, and no DMARC at all.
And one that's barely out of draft. APRF is a brand new standard that lets mailbox providers tell you what actually happened to your email: whether it reached the inbox or the spam folder, and what people did with it. Almost nobody supports it yet. We've set your domain up for it anyway, so the day it switches on, you're already collecting.
Two things we deliberately don't do. There are two further standards, DNSSEC and MTA-STS, that we run on our own domain and don't roll out to clients as standard. Both are genuinely good. Both share a property the four above don't: when they go wrong, they stay wrong. A bad MTA-STS policy can stop mail reaching you for up to a week and cannot be recalled once it's cached. DNSSEC needs access to your domain registrar that we don't hold and shouldn't want, and when it breaks, your website and your email go dark together.
Everything above can be fixed in minutes by changing one record. Those two can't. If you want them, ask, and we'll have a proper conversation about it.
Usable by everyone
Built to WCAG 2.2, with Level AA as the floor. Real heading structure, proper contrast, alt text on images, keyboard navigation, correct labelling. Your site works for people using screen readers, people with low vision, and people who can't use a mouse.
Around a quarter of New Zealanders are disabled, it's increasingly a legal expectation, and Google and AI assistants read a page the same way a screen reader does. That's universal design, and it's just the right way to build.
Every page is checked before it goes live and re-checked every time it changes. Contrast is measured on the pixels a visitor actually sees, not the colours in the code. That difference hides real faults from most testing. Where a page can clear the stricter AAA standard, we take it there.
The legal bits, sorted
A privacy policy written for your business, covering what your website collects and what happens to it.
Terms of use for your site.
Cookie consent where it's needed, and not where it isn't.
You don't have to find a template, guess, or pay a lawyer to review a generator's output. It's done, it's consistent, and we keep it current.
Knowing what's actually happening
Google Analytics, set up properly. Not just the tracking code pasted in and forgotten. We configure the custom definitions your reports actually need, and implement it with a data layer and Google tags rather than Tag Manager, which is a lot of weight most small sites don't need.
Plain-English reports. How many people came, where they came from, what they looked at, whether it's going up. No jargon, no dashboard you have to learn, and no forty-page PDF nobody reads.
If you want to log into Analytics and dig around, you can. Most people don't, and that's fine. That's what the report is for.
Changes, whenever you need
Email us. That's the whole process.
New staff member. Changed your hours. New service. Better photos. Price update. Something you noticed at eleven at night and want fixed. Tell us and we'll do it.
There is no extra charge, no ticket system, and no hourly rate. There's no portal to log into and no software to learn. You talk to a person.
Every couple of years, we'll redesign it. Not a refresh, a proper redesign, so your website doesn't quietly become the dated one. That's included too.
What you don't have to deal with
There is a platform behind your website, and you never touch it. No dashboard, no login, no password to remember, no separate subscription, no updates to install, no plugin warnings. It's ours, we run it, and the only thing you ever see is the website it makes.
That's the actual product. Everything above is how we do it. This is what it feels like.
12 · WE ONLY BUILD ONE THING
We build brochure websites. Five to ten pages, done extremely well.
We don't do online shops, blogs, booking systems, member logins, or web forms. If you need those, we're not the right people.
Here's the full list of what we don't do, and why →What it costs
$50/$100/$200+GST /mo
Depending on the size and demands of your site. Most businesses are on the $100 plan.
No setup fee. No build cost. No hidden extras.
See the plans →Say chur.
Email us at kiaora@chur.co.nz. Tell us your website address. We'll take a look, and tell you if we can help.
No form to fill in. Just people.