Website report
beautyessentials.co.nz · Christchurch
Assessed 15 October 2026. Part of our assessment of New Zealand websites.
Passes 19 of 22 checks
Checks we could not read are left out of the count.
The mirror
Beauty Essentials is a skin health clinic in Mt Pleasant, Christchurch, offering advanced treatments such as microneedling, LED therapy, and facials. The clinic, run by an Advanced Skin Therapist with 25 years of experience, also provides energy healing and sells medical-grade skincare products like Environ and Jane Iredale.
Most important first.
Your site sends 2 of the 5 security headers we look for; missing: csp, x_frame_options, referrer_policy.
Why it matters: These headers tell browsers how to protect visitors - for example, stopping your pages being framed inside someone else's site.
How to fix it: Ask your developer or host to add the missing headers in the server or hosting settings.
Your domain does not publish an SPF record, so mail servers cannot tell which senders are genuinely yours.
Why it matters: Without it, your own emails are more likely to land in spam, and others find it easier to send mail that claims to come from you.
How to fix it: Add an SPF record in your domain's DNS settings; your email provider publishes the exact line to use.
Your homepage has no main heading, or more than one.
Why it matters: One clear main heading tells readers and machines what the page is about at a glance.
How to fix it: Make sure exactly one heading on the page is marked as the main (H1) heading.
6 of 8 checks passed
Secure connection (HTTPS)
Your homepage loads over a secure connection (https://www.beautyessentials.co.nz/).
Valid security certificate
Your site presents a valid security certificate.
Certificate not about to expire
Your certificate runs until 2026-12-11, well past our check on 2026-10-17.
Always-secure instruction (HSTS)
Your site tells browsers to always use the secure connection.
Security headers
Your site sends 2 of the 5 security headers we look for; missing: csp, x_frame_options, referrer_policy.
Email sender record (SPF)
Your domain does not publish an SPF record, so mail servers cannot tell which senders are genuinely yours.
Email protection policy (DMARC)
Your domain publishes a DMARC policy.
Domain receives email
Your domain is set up to receive email.
13 of 14 checks passed
AI guide file (llms.txt)
Your site publishes an llms.txt file for AI assistants.
Search and AI crawlers allowed
Your site lets search engines and AI assistants read it.
Sitemap available
Your site declares a sitemap.
Structured data
Your homepage carries structured data (EntryPoint, LocalBusiness, PostalAddress, SearchAction, WebSite).
Business described as a business
Your structured data describes you as a business or organisation.
Homepage title
Your homepage has a title.
Homepage description
Your homepage has a meta description.
One main heading
Your homepage has no main heading, or more than one.
Language declared
Your homepage declares its language.
Link preview when shared
Your homepage has the tags for a full preview when it is shared.
Phone number findable
We found a phone number on your homepage.
Email address findable
We found an email address on your homepage.
Address findable
We found an address on your homepage.
Contact form findable
We found a contact form on your site.
See where your business stands against its competitors - free.
My branch isn't here - we'll scrape your market for $7.