Pick by the kind of site you need. OWDT is the choice for a flagship site where design awards matter; Design At Work suits companies that want user-experience work and ongoing management; CKO Digital is strongest for Shopify stores and campaign-driven sites; Vertical Web fits businesses that want one vendor for design, hosting and support; and ITVibes is the one to call when the website has to talk to an ERP, a listings feed or custom software. Settle three technical points in the proposal, covered below: payment-page security, domain transfers and tracking.
What do card-security rules require of an online store’s payment pages?
Since March 31, 2025, version 4.0.1 of the PCI Data Security Standard has required merchants to manage every script that loads and runs on a payment page in the shopper’s browser (requirement 6.4.3) and to deploy a change- and tamper-detection mechanism that alerts on unauthorized changes to those pages (requirement 11.6.1). The PCI Security Standards Council removed both requirements from SAQ A, the short questionnaire for merchants that fully outsource their payment pages, but added an eligibility condition that such merchants confirm their site is not susceptible to attacks from scripts that could affect their e-commerce systems, so any store build should include a plan for checkout scripts.
Can you move your domain away from a web designer at any time?
Usually, but plan around ICANN’s transfer rules. Under the current Transfer Policy, a registrar must impose a 60-day lock on transfers to another registrar after a change of registrant, although it may let the domain holder opt out. ICANN’s board adopted a package of transfer-policy changes on June 7, 2026 that would remove that lock and block transfers for 30 days after a domain is first registered, but no effective date has been set, so register the domain in your company’s name from the start rather than the designer’s.
Are third-party cookies going away in Chrome?
Not anymore. In an October 17, 2025 update, Google’s Privacy Sandbox team confirmed that Chrome will keep its current approach of offering users a choice about third-party cookies and said it is retiring most of the replacement technologies it had built, including Topics, Protected Audience and the Attribution Reporting API, because of low adoption, while keeping CHIPS and FedCM. Analytics and ad tags on a new site will keep working in Chrome much as they do today, but consent rules in privacy laws still apply wherever they cover your visitors, so ask your designer how the site handles consent before tags fire.
