WordPress audit - data protection, performance, SEO & accessibility
Do you want your website to be legally compliant, fast, visible and usable for everyone? My WordPress audit checks data protection (GDPR/Consent), performance & core web vitals, SEO basics, accessibility (WCAG) and hosting/theme/plugins. You will receive a clearly prioritised action plan with effort, quick wins and realistic cost ranges - so that you can decide immediately what is really worthwhile.
- View all details -
900,00 €
WordPress audit - data protection, performance, SEO & accessibility
Scope of delivery
What is included in the audit
Creation of a correct privacy policy in accordance with the GDPR
Consent flow & script control, local fonts, contact forms (TLS), newsletter double opt-in, integration of external services, logging/deactivation before consent, cookies/storage.
Note: No legal advice. Technical check + implementation recommendations. As an eRecht24 agency partner, I support my clients in the technical implementation of data protection requirements.
INP/LCP/CLS, caching/headers, image pipeline (formats/sizes), critical CSS, font loading, script orchestration, DB/server response times.
Indexing (sitemap/robots), title/description, heading structure, internal linking, canonicals, structured data approaches.
WCAG Quick Audit (A/AA-relevant points): Contrast, focus order, keyboard operation, alternative texts, landmarks/ARIA, comprehensible links & forms.
PHP / HTTP / OPcache, backups, plugin bloat / conflicts, update path, security situation, future viability.
Prioritised action plan (incl. roadmap)
Procedure
This is how it works
- Preliminary talk (30 min) - Goals, special features (shop, multilingualism, tracking).
- Technical scan & review - Metrics, source code samples, accessibility checks, consent tests.
- Report & action plan - clear, prioritised, implementable.
- Review call (45-60 min) - Decisions, alternatives, quick wins vs. refactoring.
Data protection - specifically tested & supported
- Privacy policy (with eRecht24 generator) - Content filling based on the actual techniques of your website.
- Local fonts - No external call-offs.
- Encrypted forms - TLS, secure form workflows.
- Consent tool - Legally clean consent before setting/loading, secure states & revocation.
- Newsletter Double-Opt-In - correctly implemented and documented.
- Attribution - clean labelling where necessary.
Note: My performance is No legal advice. I identify technical data protection aspects, recommend measures and can take over their technical implementation. For individual legal issues, I also recommend a legal review.
Strategy: quick wins vs. future-proofing
Option A - Keep costs lean
Targeted optimisation of existing content: remove unnecessary plugins, reduce loading times, clean consent, fix SEO basics, WCAG quick wins.
Option B - Building solidly for the future
Technical refactoring/modernisation (for heavy bloat/legacy loads): lean theme, modular features (shop, booking, i18n), scalable performance setup.
Result & added value
- Transparency instead of generalised statements
- Prioritisation according to effect and effort
- Budget security through cost margins
- Sovereigntyinternal, external or realisable with me
Prerequisites
- technical
- WordPress administration access
- (S)FTP/Hosting access
- Data protection law
- AVV (order processing contract)
- Company details for privacy policy (if commissioned)
- List of services/tools used
Liability & changes
Services provided to the best of our knowledge. No liability for consequential damages due to legal/technical changes or subsequent interventions by third parties. For relevant legal questions: supplementary Legal advice recommended.
FAQs
Do I need a new theme?
Only if optimisation is more expensive than a clean rebuild, e.g. with an outdated page builder theme. Decision based on facts from the audit.
Is a one-off check enough?
For a clear start: yes. With active content/shop Regular mini-audits meaningful.
Are you also implementing the measures?
Yes - possibly by you, us in the team or completely by me.
Is that legal advice?
No. I check and optimise the Technical data protection implementation. For legal questions, I recommend consulting a lawyer.