For a small business, your website is often the first thing a customer meets — and the host behind it quietly shapes how fast it loads, how secure it is, and whether it stays online when you need it. Yet hosting is usually chosen on price alone and never thought about again.
This guide looks at WordPress hosting from a small business owner’s point of view: what your site actually needs, what it costs in New Zealand in 2026, and what privacy law does and does not require of you. No scare tactics, no invented statistics.
Hosting is a business decision, not just a technical one
It is easy to treat hosting as plumbing — dull, invisible, buy the cheapest and move on. But the host affects things you care about directly. A slow site loses visitors before they convert. A site that goes down during a busy period loses sales. A site that gets hacked costs you time, money, and customer trust.
None of that means you need the most expensive plan. It means the decision is worth a few minutes’ thought, weighed against what your business actually needs.
What a small business site needs from its host
The priorities are fewer than the marketing suggests. These are the ones that matter.
What a small business site needs most
Speed
Fast pages keep visitors and help your Google ranking.
Security
Current software, backups, firewall — protects trust and uptime.
Reliability
A real 99.9% uptime commitment so you don’t lose sales.
Local support
Help in NZ business hours when something breaks.
You don’t need the priciest plan — you need one that covers these four well.
Here is why each earns its place.
A faster site keeps more visitors and converts more of them, and speed is a genuine Google ranking factor through Core Web Vitals — aim for under 2.5 seconds for Largest Contentful Paint, under 200 milliseconds for Interaction to Next Paint, and under 0.1 for layout shift. A host with modern storage, caching, and a server near your audience makes those targets easier to reach.
Small business sites are common targets for automated attacks, and the fallout — downtime, data loss, a “not secure” warning in the browser — erodes trust fast. Look for a host that keeps software current (WordPress 7.0, from May 2026, expects PHP 8.3+, MySQL 8.0+ or MariaDB 10.6+, and HTTPS), runs backups, and includes a firewall and malware scanning. Our security best practices guide covers the essentials.
When something breaks at 9am on a Monday, you want help now, not in twelve hours. A host with support during New Zealand business hours — ideally people who know WordPress — is worth weighting if your site matters to your income.
Selling online: WooCommerce considerations
If you sell through WooCommerce, your site works harder than a simple brochure site. Checkout and product databases are resource-hungry, and a plan that runs a blog comfortably can struggle with a busy store.
For an online store, lean towards managed WordPress hosting sized for your traffic, with enough processor and memory to keep checkout responsive during busy periods. Our managed WordPress hosting guide explains what that involves.
What it costs — and how to budget
Prices vary and change, so treat these as rough 2026 guide bands.
Rough 2026 budget snapshot (NZD)
| Shared hosting | ~NZ$5–$35 / month |
| Managed WordPress hosting | ~NZ$35–$105 / month |
| .nz / .co.nz domain | ~NZ$20–$40 / year |
| SSL certificate | Free (Let’s Encrypt) — never pay extra |
Guide bands only; they vary by provider. Always check the renewal price, not just the sign-up rate.
The main thing to watch is renewal pricing — a low sign-up rate that jumps at renewal is the most common budgeting surprise. Factor the ongoing cost in from the start. If budget is tight, our cheap WordPress hosting guide covers keeping costs down without cutting the essentials.
Privacy and customer data: what you actually need to know
If your site collects customer information — names, emails, orders — the Privacy Act 2020 applies to you, as it does to almost every New Zealand business. This is where a lot of misinformation circulates, so here is the accurate version.
Your core duties are straightforward: collect only the personal information you need, keep it secure, let people access and correct their own details, and notify both the Privacy Commissioner and the people affected if a breach occurs that could cause serious harm.
On penalties, be wary of the common claim that a breach means “a $10,000 fine”. That figure is the maximum for specific criminal offences under the Act — such as failing to notify the Commissioner of a notifiable breach, or misleading someone to obtain their information. It is not a blanket fine for any breach. Separately, the Human Rights Review Tribunal can award compensation to people harmed by a privacy breach, and that is not capped at $10,000. So the real exposure is more nuanced than a single number — and the practical takeaway is simply to handle customer data carefully and have a plan for breaches.
One more myth worth retiring: no New Zealand law requires you to host customer data on local servers. Hosting in NZ can simplify compliance and reassure customers, but it is a practical choice, not a legal obligation.
Shared, managed, or something bigger?
For most small businesses, the choice is between shared hosting and managed WordPress hosting. A simple brochure site can start on shared hosting; a store or a site central to your income usually justifies managed. Our guide to WordPress hosting plans walks through the options, and the main WordPress hosting NZ hub links to everything else.
This article is general information, not legal, financial, or purchasing advice. Privacy obligations depend on your specific circumstances, and prices, plans, and requirements change often — confirm current details with providers, and seek professional advice on compliance where it matters to your business.
Reference sources
Frequently asked questions
What kind of hosting does a small business website need?
For a simple brochure site, shared hosting is often enough. For a store or a site central to your income, managed WordPress hosting is usually worth it, because it handles updates, backups, and security while keeping your site fast. Match the plan to how much the site matters to your business.
How much should a small business budget for WordPress hosting in NZ?
As a rough 2026 guide, expect around NZ$5 to NZ$35 a month for shared hosting or NZ$35 to NZ$105 for managed WordPress hosting, plus roughly NZ$20 to NZ$40 a year for a .nz domain. SSL should be free. Always check the renewal price, not just the intro rate.
Will a slow website really hurt my business?
Yes. Slower sites lose visitors and convert fewer of those who stay, and speed affects your Google ranking through Core Web Vitals. You do not need the fastest plan available, but a host with modern hardware and a server near your audience genuinely helps.
Does the Privacy Act mean I’ll be fined $10,000 if there’s a breach?
Not as a blanket rule. The $10,000 maximum applies to specific criminal offences, such as failing to notify the Privacy Commissioner of a notifiable breach. Separately, the Human Rights Review Tribunal can award compensation to people harmed, which is not capped at that figure. The practical step is to handle data carefully and have a breach plan.
Do I have to host my customer data in New Zealand?
No. The Privacy Act 2020 sets rules for how you handle personal information, including sending it overseas with comparable safeguards, but it does not require local hosting. Hosting in NZ can simplify compliance and build customer trust, but it is a practical choice, not a legal requirement.
Is managed hosting worth it for a small online store?
Usually, yes. WooCommerce is resource-heavy, and managed hosting keeps checkout fast and the site secure and updated — which matters when downtime means lost sales. For a store that generates real revenue, the extra cost is generally money well spent.
What should I prioritise if I’m on a tight budget?
Never economise on SSL (which should be free), backups, or current software — those prevent expensive problems. Save instead by paying for a longer term to lock in a lower rate and skipping add-ons you do not need. A cheap plan that keeps the essentials is fine; one that drops them is not.