Website hosting for small businesses: what you actually need
Dimitri · 9 min read
Hosting is the least exciting part of a website and one of the most important. Here is how to choose the right type, read the uptime fine print, and avoid the traps.
Hosting is the part of a website nobody wants to think about, right up until the site goes down on a Monday morning or takes four seconds to show anything. Choosing small business website hosting is not about finding the biggest feature list or the lowest monthly price. It is about matching the hosting type to the site you have, the traffic you get and how much time you want to spend managing it.
This guide compares the main hosting types in plain language, explains how server speed affects your site, does the uptime math that sales pages skip, covers what Canadian privacy rules actually say about where your data lives, and ends with a checklist of what any decent host should include.
What small business website hosting actually does
Your website is a set of files and a database sitting on a computer somewhere. Hosting is the rent you pay for that computer, its internet connection, and (depending on the plan) the people who look after it. When someone in Airdrie taps your link, their phone asks that computer for your page, and how quickly and reliably it answers is down to your host.
Two things decide whether a host is good for you: performance (how fast it responds, even when busy) and care (security, backups, updates, support). Cheap plans skimp on both. Expensive plans are not always better. The trick is paying for what your site actually uses.
Shared hosting vs managed and the other options
There are four main types of hosting you will run into. Here is how they compare for a typical small business site.
Type
How it works
Speed
Who manages it
Good for
Watch out for
Shared hosting
Hundreds of sites share one server
Variable, often slow under load
Mostly you
Hobby sites, very low-traffic pages
Noisy neighbours, slow TTFB, upsells
Managed WordPress
Hosting tuned for WordPress, with caching, backups and updates
Fast to very fast
The host (and often your developer)
Most small business WordPress sites
Plugin restrictions, visit caps
VPS (virtual private server)
Your own slice of a server with set resources
Fast if configured well
You or your developer, fully
Custom apps, technical teams
Security and updates are entirely your job
Cloud and edge platforms
Files served from many locations worldwide, often via a CDN
Very fast for static and custom-coded sites
Developer
Custom-coded sites, sites with traffic spikes
Needs a developer to set up and maintain
Our take on each
Shared hosting is where most small business sites start, usually because it came bundled with the domain. It works until it does not. When another site on the same server gets busy or gets hacked, yours slows down too.
Managed WordPress hosting is the default we recommend for most WordPress sites. You pay more, but you get server-level caching, automatic backups, staging sites and support that understands WordPress.
VPS hosting gives you power and control, and with it, every responsibility. If nobody on your team will patch the server, skip it.
Cloud and edge platforms are what we use for many custom-coded builds. Pages are served from data centres close to the visitor, which makes them very fast. They need a developer to run them.
Why server speed shows up in your results
Every page view starts with a wait: the time between the visitor's phone asking for your page and the first byte of the answer arriving. That wait is called Time to First Byte, or TTFB. Nothing else on the page can start loading until it is over.
According to web.dev's TTFB guide, most sites should strive for a TTFB of 0.8 seconds or less, and anything above 1.8 seconds is poor. TTFB includes redirects, the DNS lookup, connection and security setup, and the time your server spends building the page. Hosting affects nearly all of it.
Figure 1: What happens before the first byte arrives. Source: web.dev (Google); HTTP Archive (2025).
How most sites measure up
The HTTP Archive's 2025 Web Almanac found that only 44% of mobile websites and 55% of desktop websites had a good TTFB. A slow TTFB eats into your Largest Contentful Paint budget before a single image starts downloading, which is why hosting shows up in Core Web Vitals results.
A content delivery network (CDN) helps by serving files from a location near the visitor. The 2024 Web Almanac CDN chapter measured median desktop TLS negotiation at 70 milliseconds through a CDN versus 183 milliseconds from an origin server. Yet only 33% of mobile HTML requests were served through a CDN. For a Calgary business whose customers are mostly in Alberta, a CDN still helps, both with speed and with absorbing traffic spikes.
Uptime math: 99.9% vs 99.99%
Every host promises uptime somewhere between 99% and 99.99%. Those numbers look almost identical. They are not. Here is what each level allows in downtime, using a 365-day year and a 30-day month.
Uptime guarantee
Downtime per year
Downtime per month
99%
87.6 hours (about 3.7 days)
7.2 hours
99.5%
43.8 hours
3.6 hours
99.9%
8.76 hours
43.2 minutes
99.95%
4.38 hours
21.6 minutes
99.99%
52.6 minutes
4.3 minutes
Figure 2: Allowed downtime per year at each uptime level. Calculated from a 365-day year.
What the number does not tell you
For a dental clinic or law firm, 99.9% is usually fine if outages are short and happen overnight. For an emergency plumber whose busiest calls come at 2 a.m. during a January cold snap, even short outages hurt. Before you pay more for an extra nine, ask:
Is it monitored? Someone should know within minutes, not when a customer tells you.
Who responds? A ticket queue that answers in 24 hours is not a response plan.
What does the guarantee pay? Most uptime guarantees refund a slice of the monthly fee. That is a few dollars, not the jobs you lost.
Is planned maintenance excluded? Many hosts do not count scheduled downtime.
Web hosting in Canada: where your data lives
Owners often ask whether their site must be hosted in Canada. The short answer is no, but there are rules.
Under federal law, the Office of the Privacy Commissioner's guidelines for processing personal data across borders state that PIPEDA does not prohibit organizations from transferring personal information to another jurisdiction for processing. You remain responsible for that information, you need contracts that give it comparable protection, and you should tell people in clear language that it may be processed outside Canada and could be accessed by authorities there.
Alberta adds its own layer. Under the provincial Personal Information Protection Act, the Government of Alberta explains that organizations using a service provider outside Canada must tell individuals how to access the relevant policies and who can answer their questions. Your policies must also record the country where this happens and the purposes involved.
What this means in practice
For a typical contractor site with a contact form, the practical steps are simple: know where your host and form provider store data, mention it in your privacy policy, and name a contact person. If you collect more sensitive information, such as intake forms for a clinic or a law firm, Canadian hosting is often the simpler choice, and some clients will ask for it. This is general information, not legal advice; talk to a privacy lawyer if your situation is complex.
What your hosting should include
Hosting is not security on its own
Many hosts advertise firewalls and malware scanning, and those help. But they are not a substitute for keeping your site updated. In its State of WordPress Security in 2026 report, Patchstack found that combined hosting defences blocked only 26% of attacks in its tests, and just 12% of attacks targeting WordPress-specific vulnerabilities.
Whatever type you choose, insist on these before you sign up or renew.
Free SSL certificate with automatic renewal.
Daily backups kept for at least 14 to 30 days, plus a way to store a copy off site.
One-click restore you can actually use, or a host that will do it for you.
Staging site for testing updates before they hit your live site.
Server-level caching and an easy CDN option.
A current PHP version (for WordPress sites) and a clear upgrade path.
Uptime monitoring with alerts that go to someone who will act.
Malware scanning and a firewall as a layer, not the whole plan.
Real support from people who understand your platform.
Clear data location you can name in your privacy policy.
Account ownership in your name, so you are never locked out of your own site.
Transparent renewal pricing, since intro rates often jump at renewal.
Item 11 is the one that bites. We regularly meet owners whose previous web person registered the hosting in their own name, then disappeared. Make sure you own the account, or at minimum have documented admin access.
How we handle hosting
When we build a site, we pick hosting to match it: fast managed hosting for WordPress builds, and modern cloud and edge platforms for custom-coded sites. Our hosting service pairs that with care: updates, daily off-site backups, uptime monitoring and small fixes, as part of our $80 CAD per month maintenance package. If something larger breaks, troubleshooting is billed at $135 CAD per hour, with no surprises.
Frequently asked questions
01What type of hosting does a small business website need?
For most local service businesses, managed WordPress hosting or a well-run cloud host is the sweet spot. Cheap shared hosting is fine for a hobby site, but it often has slow server response and limited support. A VPS only makes sense if someone technical will manage it.
02How much should small business website hosting cost in Canada?
Shared plans are usually the cheapest, managed WordPress plans cost more, and managed hosting bundled with maintenance costs more again. Our maintenance package, which includes hosting care, updates, backups and monitoring, is $80 CAD per month.
03Does my website have to be hosted in Canada?
Not under PIPEDA, which does not prohibit transferring personal information outside Canada for processing. You do remain accountable for it, and in Alberta, PIPA requires you to tell people when a service provider outside Canada handles their information. Some sectors and clients prefer Canadian hosting anyway.
04What is a good server response time?
Google's web.dev guidance says most sites should aim for a Time to First Byte of 0.8 seconds or less. Above 1.8 seconds is considered poor. Hosting quality, caching and a CDN all affect it.
05Is 99.9% uptime good enough?
99.9% allows about 8.8 hours of downtime a year, or roughly 43 minutes a month. For most local businesses that is acceptable if outages are short and off-peak. What matters more is monitoring, fast response and what the guarantee actually pays out.
Find out if your hosting is holding you back
Not sure whether your host is the reason your site feels slow? Book a free 15-minute call and we will look at your current setup together: server response time, uptime, backups and SSL. Then we will tell you plainly whether to stay, upgrade or move.
