Website operations for online stores
Product pages, checkout, tracking and payment integrations all need ongoing attention. We plan the website work around the commerce platform and the parts of the purchase journey covered by the service.
When teams ask for help
Teams may need to review a checkout barrier, document payment handling, change a subscription flow or test tracking behavior. The review needs to follow the actual customer journey, including connected services.
Relevant website requirements
These topics may be relevant to your website. Applicability depends on your organization, the services it offers and the information it handles.
ADA web accessibility
How ADA accessibility requirements relate to websites and the tasks people need to complete.
European Accessibility Act
Accessibility requirements for covered products and services offered in the EU.
CCPA and CPRA
California privacy-law coverage, consumer rights and website-related responsibilities.
Cookie consent
How storage, tracking, consent and opt-out rules vary by region and purpose.
Session replay and wiretapping
Questions to review before adding recording tools, chat widgets and similar tracking.
Sector-specific considerations
These areas also need to be considered when planning the website and its forms.
- PCI DSS
Payment-security obligations depend on the checkout integration and the merchant's responsibilities. Review the processor's requirements and the applicable PCI scope for the implementation.
PCI Data Security Standard (opens in a new tab)PCI Security Standards Council
- Automatic renewal and cancellation rules
California's automatic renewal law requires clear disclosure of renewal terms and a straightforward way to cancel, and several other states have similar statutes. Check the current state and federal requirements before setting subscription terms.
California Business and Professions Code sections 17600 to 17606 (opens in a new tab)California Legislative Information
Steadwatch's role
- We review the storefront and checkout interfaces within the agreed scope, including relevant third-party boundaries.
- Payment integrations and consent controls are documented and tested for the journeys the platform manages.
The managed platform also includes accessibility checks, consent controls, data-request tracking and monthly reporting.
Your responsibilities
- Your payment processor relationship, your card handling scope, and any self-assessment questionnaire that comes with it.
- The commercial terms of a subscription, including what you disclose at the point of sale.
- Product data and fulfillment, which live in your commerce platform.
This page provides general information. Your obligations depend on your business and jurisdiction. Consult a qualified adviser about your circumstances.