BBB Florist

Your site does not tell browsers to always use the secure connection.

Why it matters: Without this instruction, a browser may still try the insecure address first, which leaves room for the connection to be tampered with.

How to fix it: Ask your developer or host to add the Strict-Transport-Security header once HTTPS works on every page.

Your domain does not publish an SPF record, so mail servers cannot tell which senders are genuinely yours.

Why it matters: Without it, your own emails are more likely to land in spam, and others find it easier to send mail that claims to come from you.

How to fix it: Add an SPF record in your domain's DNS settings; your email provider publishes the exact line to use.

Your domain does not publish a DMARC record, which lets anyone send email that claims to come from your domain.

Why it matters: A DMARC policy tells receiving mail servers what to do with mail that fails your checks, which protects your customers and your inbox placement.

How to fix it: Add a DMARC record in your DNS, starting with a monitoring policy, then tighten it once your legitimate mail passes.

Your homepage has no main heading, or more than one.

Why it matters: One clear main heading tells readers and machines what the page is about at a glance.

How to fix it: Make sure exactly one heading on the page is marked as the main (H1) heading.

We found no contact form on your homepage.

Why it matters: A form lets a customer reach you at any hour without picking up the phone.

How to fix it: Add a simple contact form, or a clear link to one, on your homepage.

Your homepage does not declare its language.

Why it matters: Declaring the language helps screen readers pronounce your content and helps search engines show it to the right people.

How to fix it: Add a lang attribute to the page's html tag, for example en-NZ.