What Is a Website Care Plan, and What's In It?

These three get sold in the same sentence and sometimes on the same invoice line. They are layers, and each one includes the one below it.

Table · scrolls sideways

The practical test: ask whoever looks after your site who is notified if it goes down, when a backup was last restored, and who checks that the contact form still reaches an inbox. If the answers are vague, you most likely have hosting described as maintenance.

Why hosting alone is the risky option. A site can be perfectly hosted, loading and looking fine, while its form has stopped sending email after a routine change at the mail provider. Hosting does not check for that. Only a person, on a schedule, does.

Why maintenance is necessary but not sufficient. Maintenance keeps the site working the way it did last month. It does not ask whether last month's version was working for the business: whether the hours, prices and staff are current, or whether a new service needs a page.

Table · scrolls sideways

On updates, WordPress's own updating guide says most sites apply minor and security core updates automatically, but major releases need someone to run them, with a backup taken first. Plugins, themes and the dependencies of a custom-built site need the same attention.

As a concrete example, here is what our three tiers include as of 15 October 2026. All are month-to-month, and you can cancel any time.

Table · scrolls sideways

Essentials and Growth come with email support, and Growth is answered ahead of Essentials. Authority is answered first, ahead of every other plan. Work outside a plan is quoted before we start it. HST applies at the rate for your province; the Canada Revenue Agency's rate page lists 13% for Ontario. None of the plans promises rankings, traffic or AI citations: the content tiers do the work and report on it, and the results are not ours to promise.

Whoever you choose, the question is whether their tiers map onto the coverage table above, not whether the number sounds fair.

Read the fine print, because this is where surprises happen. Most plans exclude:

• A redesign, or new pages beyond the stated allowance.
• Large catalogue or e-commerce data entry.
• Third-party subscriptions such as booking systems, email and paid plugins.
• Ad spend and ad management.
• Recovery from a change made outside the plan, such as an unreviewed plugin.

Ask how a provider treats requests on the boundary. Swapping a hero photo is an edit; redesigning the hero section is a project. A provider who writes that line down in the plan is easier to work with than one who decides case by case.

Under the marketing language, a care plan is a promise about who answers when the site is down or the form stops sending. "We'll get to it" is not a support arrangement. Ask each provider what the arrangement is on each tier, what happens outside business hours for something genuinely urgent, and get the answer in writing before you need it.

How much this matters depends on the business. A law firm whose consultation bookings all run through the website loses more for every hour the form is broken than a daycare with a prominent phone number and a full waitlist.

A backup is a copy of your site from a point in time. Disaster recovery is the tested process of getting that copy back into production after a hack, a bad update or an accidental deletion. The Canadian Centre for Cyber Security's backup guidance recommends testing recovery from backups on a routine basis, keeping an offline copy, and storing a copy off-site.

So ask three questions: where are the backups stored, how many weeks of history are kept, and when was one last restored? A backup on the same server as the live site protects against very little, and a history of only one night will not help when a bad change goes unnoticed for a week.