Service · Websites and web apps

WordPress websites

WordPress is known as both easy and insecure, and which one you get depends on who builds it. One install can be a lean site the receptionist updates in two minutes; another can be a tangle of plugins nobody has dared touch since 2021. The outcome is settled before anything is installed, by a few plain answers: what your team will publish each week, which languages you need, whether you will sell, and who will apply updates. Take a gestoría in Valencia wanting pages in Spanish and Valencian, a tax news blog and an appointment form. With those answers written down, the whole project fits into eight plugins and a theme of its own.

Up to 8 plugins
on a typical services site
Editing roles
writer, editor and administrator
Co-official languages
Catalan, Valencian, Galician or Basque
Licences
held in the company's name

What falls within the scope of this service

Here is what a WordPress site built by Apply contains, item by item. Anything missing from this list only goes in with a written reason.

Pin down the details with one of our engineers

A block theme of your own

Editor blocks coded in your brand style: headers, service cards, galleries, price tables. Your team builds new pages without a page builder and without breaking the mobile view.

Roles and approval flow

Separate accounts for writing, reviewing and administering. Drafts wait for approval, and nobody without rights can touch plugins or settings.

Spain's languages

Spanish plus Catalan, Valencian, Galician or Basque through WPML or Polylang, each with its own URLs and correct hreflang. English is added when you serve clients abroad.

WooCommerce when it is needed

A shop with Redsys, Bizum and Spanish carriers only if the site is going to sell. No planned sales, no shop module.

Forms and bookings

Forms with the GDPR notice, spam protection without irritating captchas and, where useful, appointment booking linked to Google Calendar or Microsoft 365.

Legal compliance

A legal notice under the LSSI-CE, a privacy policy and a cookie banner that holds analytics back until consent, in line with AEPD guidance.

Baseline speed and security

Caching, WebP images, two-factor sign-in for admins, login attempt limits and daily off-server backups from day one.

How the engagement unfolds, one stage at a time

Two things set the pace: how many distinct templates the site needs and when the copy is ready. Coding the block theme is rarely what holds things up.

01

Content inventory

Before any talk of design, we list what your team publishes now and what it wants to publish: news, product sheets, vacancies, events. That list tells us which blocks to build.

02

Blocks and templates

The editor pieces are designed and coded on staging. You try them out by assembling two or three real pages before approving them.

03

Content and connections

Migrated or fresh content, forms wired to your mailbox or CRM, languages paired up and, for shops, test payments through Redsys and Bizum.

04

Handing over the keys

Go-live with 301 redirects, accounts transferred to your company, a training session by video call and a document stating who updates what, and how often.

A premium plugin whose licence has lapsed stops getting security fixes, even though it keeps working. It is one of the most common situations on small-business WordPress sites: the form builder or SEO plugin was bought three years ago on the card of someone who has since left, the renewal failed and nobody noticed. So every licence is registered to the company under a shared mailbox, and its renewal date goes into the handover document.

Common questions

Yes, provided someone maintains it. Core gets patched regularly; the real risks are abandoned plugins, weak passwords and updates nobody installs. Keep the component list short, put two-factor sign-in on admin accounts and name a person responsible for updates, and WordPress is as safe as any comparable platform.

That depends on how it was built. A light theme with current plugins can be reworked section by section. If everything hangs off a heavy page builder or a discontinued theme, a new theme reusing your copy, images and URLs usually works out cheaper. We inspect the installation before quoting.

As many as you need. WordPress separates roles: writers, editors who review and publish, and administrators. A law firm might let every lawyer draft articles while only one person publishes them, so settings never get changed by accident.

Not necessarily. What matters is that the banner genuinely blocks non-essential cookies until the visitor agrees, and that saying no is as easy as saying yes, as the AEPD expects. Free tools can do that; paid ones add consent logging. We choose according to what the site actually loads.

Nothing changes. The code follows WordPress standards, the accounts belong to your company and the handover document explains how everything fits together, so another professional can carry on without asking anyone's permission. While we work together, technical time is billed at €75 per hour + VAT or covered by a Start, Business or Premium plan.

Tell us about your WordPress project

Explain what the site should deliver and which tools your business relies on already. Expect a realistic schedule in return, plus the plugins we would propose.

Hours
Monday to Friday, 9:00-18:00 Spanish time (CET), answers within a working day
Meetings
Video calls via Google Meet or Teams

This site only stores the cookies it needs to work and to remember your chosen city. No advertising or tracking cookies are set. See our privacy policy for the details.