Website Audit: Secure Storage Co

URL: https://securestorage.co.uk/ Audit Date: 2026-05-27 Prepared by: SignalRed Studio TL;DR: A solid family-run Essex self-storage business (since 2000) running a WordPress site built by an osteopath-niche marketing agency. The brand basics, reviews and pricing are good, but the site is technically tired (Oxygen Builder + jQuery + 4 font families), has osteopath-template strings leaking into the source (“What We Treat” / “How We Treat” in the menu HTML, treatment_modalities_container CSS class), an inconsistent address, weak hero CTA copy, and the booking flow shunts visitors off-brand to a Stora subdomain. A focused rebuild on Laravel + Inertia (or Astro + headless CMS) with native booking integration and a conversion-focused hero would meaningfully lift bookings and clean up the brand impression.

Who They Are

• Industry: Self-storage — mobile pods, drive-up units, removals, climate-controlled car storage
• Target customer: Essex / Herts / NE London households moving/decluttering, plus SME business storage (archive, stock) and student storage
• Business model: Family-run, founded 2000, owner-managed (mentions “Ollie” / Oliver in testimonials and email oliver@securestorageco.co.uk)
• Primary site: Wood Farm, Moreton Rd, Ongar CM5 0EY — but homepage Google-Maps embed inexplicably points to 59 Burnham Rd, Leigh-on-Sea (different town, ~50 min drive). One of these is wrong on the live site.
• Geography: Single physical depot in Ongar serving 12 “location pages” — Billericay, Brentwood, Chelmsford, Cheshunt, Chigwell, Epping, Harlow, Hertford, Islington, Ongar, Stratford, Woodford
• Companies House: Likely SECURE SELF STORAGE LIMITED (06518378) or SECURE SELF STORAGE (ESSEX) LIMITED (06336559), both registered at 92 Friern Gardens, Wickford SS12 0HD — worth confirming on a call.

Tech stack detected

Strengths

1. Family-run brand story is real and on-message — “founded 2000”, “Your family-run storage solution where your items are as safe as they are at home”. This is a genuine differentiator versus Big Yellow / Safestore.

2. Reviews are excellent and well-displayed — 4.8★ from 41 Google Reviews, with 13 detailed testimonials carouseled on the homepage. Real names (Madeleine James, Lauren Paton-Smith, Helen Diment, etc.), dated, and staff named in praise (“Ollie, Lauren and the rest of the team were 10/10”). This is a strong trust block.

3. Pricing is fully transparent on /pricing/ — clearly tabled mobile pod tiers from £14/wk intro → £21/wk standard up to 6-pod packages, plus £119/mo & £199/mo drive-up units inc. VAT. Many self-storage sites hide pricing behind quote forms; this site doesn’t, which is a competitive advantage.

4. Local SEO breadth — 12 dedicated location landing pages, each likely targeting “self storage ” queries. Long-tail SEO foundation is in place.

5. Cloudflare CDN + SiteGround caching — cf-cache-status: HIT on homepage; warm-cache TTFB ~1s. Not amazing, but not catastrophic.

6. Booking platform choice (Stora) is sensible — it’s the dominant SaaS for UK self-storage operators and handles payments/contracts properly. The integration concept is right; the execution (subdomain hand-off) is what’s weak.

7. Service breadth + niche pages — separate landing pages for Mobile Self Storage, Drive-up Units, Removals, Climate-controlled Car Storage, plus niches (Archive / Business / Household / Student). Good content surface area for SEO.

8. Phone number is freephone (0800 130 3546) and visible everywhere — strong friction-reduction signal for older / less-confident bookers.

Weaknesses

1. Osteopath-template strings leaking into the menu HTML

Issue: The mobile/hidden menu literally contains the labels “What We Treat” and “How We Treat” as <span class="menu_item_label">, with the entire menu structure wrapped in a CSS class called treatment_modalities_container. Insight Marketing’s day job is building websites for osteopaths, and they have visibly shoehorned that template into this self-storage site without fully sanitising the source. Verbatim from home.html:

<span class="menu_item_label">What We Treat</span>
<span class="menu_item_label">How We Treat</span>
…
<div class="ct-div-block treatment_modalities_container">

The footer also still credits “Websites & Marketing For Osteopaths By Insight” — an actual visible link on the site (footer credit row). Impact: Embarrassing if a competitor / prospective customer / Companies House search-engine cache surfaces this. Looks unprofessional and lazy. Search bots index these strings (treat, treatment) which muddies topical relevance for “self storage” queries. Also a screen-reader-on-mobile risk: if those menu nodes are exposed in any responsive breakpoint, a visually-impaired user gets jarring medical terminology mid-storage-shop. Severity: High — easy reputational damage, easy fix.

2. Hero proposition + CTA copy is generic and weak

Issue: The H1 says “Self Storage in Essex” with subhead “Storage Units, Mobile Storage & Removals Across Essex, Herts & North East London”. The only above-the-fold CTAs are “Get Started Secure Online Booking” and the phone number. There is no benefit-led promise, no price anchor, no scarcity, no proof element above the fold. Impact: The 3-second test is failing on “why you over Big Yellow?”. Competitors in the same SERP lead with prices (“from £14/wk”), service points (“Free collection”), or trust signals (“Family-run since 2000”). Generic headlines convert at meaningfully lower rates — even a 10–15% lift on first-step CTA click would be material. Severity: High

3. Address inconsistency between homepage and contact page

Issue: Contact page lists the depot as “Wood Farm, Moreton Rd, Ongar CM5 0EY”. The homepage Google-Maps “Navigate” button (in the header) links to “59 Burnham Rd, Leigh-on-Sea, Southend-on-Sea” — a completely different location ~50 minutes away. One of these is wrong on the live site. Impact: Customers may drive to the wrong site. Damages local-SEO consistency for Google Business Profile (NAP must match across web/citations). Also a trust-erosion signal if eagle-eyed prospects spot the mismatch. Severity: High — must be fixed regardless of any rebuild.

4. Font loading is bloated and duplicated

Issue: Single <link rel="stylesheet"> to Google Fonts requests four families × full weight ranges: Poppins:100-900 AND Poppins:500,600,700,800 (loaded twice with different selections), plus Yellowtail:100-900 (Yellowtail is a script font — only ever needs weight 400), plus Ubuntu:100-900. That’s an excessive number of font files for a page that visually uses one or two weights. Impact: Several hundred KB of unnecessary font CSS + downloads, render-blocking, hurts LCP and FCP. Typical Google-Fonts-CSS savings here ~150-300KB and 200-400ms LCP reduction. Severity: Medium

5. Booking flow leaves the brand (Stora subdomain)

Issue: Every “Get Started” CTA on the site sends users to thesecurestorageco.stora.co/ — a different subdomain, with Stora’s branding chrome around it. Impact: Conversion drop-off at the brand-handoff point (users second-guess whether they’re still on the right site). Analytics attribution is split between two domains unless cross-domain tracking is configured in GTM (likely it isn’t — no evidence of it in source). Branded trust signals (testimonials, family story) don’t follow the user into the booking flow. Severity: Medium

6. Alt-text quality is poor

Issue: The Open Graph image alt text is literally the filename: “Secure Storage Home Page Team Image 1 Scaled E1740062846679”. Multiple images on the homepage have alt="" (verified: at least 3 empty alts). Hero image alt text adds no SEO value and is inaccessible to screen readers. Impact: Missed image-search SEO (Google Images), WCAG 2.1 Section 1.1.1 failure for non-decorative images, weaker link-preview cards on social/Slack/WhatsApp. Severity: Medium

7. Two Slick carousel versions loaded simultaneously

Issue: Source contains slick.min.js?ver=1.8.1 AND slick.js?ver=1.9.0 (the unminified 1.9.0 build). Classic plugin-conflict signature. Impact: ~80KB of duplicate JS execution, potential race conditions, console warnings. Smells like a half-finished plugin update by the previous developer. Severity: Medium

8. Homepage HTML contains blog pagination links bleeding through

Issue: The homepage HTML contains anchors to /page/2/, /page/3/, /page/10/ and “Next »” — these are blog-archive pagination controls, not homepage navigation. Likely an Oxygen Builder template misconfiguration where a blog loop’s pagination is being rendered on the homepage even when only a small “Latest News” preview block is visually present. Impact: Confuses Google’s link graph (homepage appears to be paginated content). Could dilute homepage equity. Visually probably hidden but bad signal architecturally. Severity: Medium

9. Footer credit is a backlink advert for a competing niche

Issue: Footer reads “Websites & Marketing For Osteopaths By Insight” — a clickable backlink to their agency’s osteopath landing page. Every visitor sees the storage company’s web partner specialises in something completely unrelated. Impact: Brand-credibility erosion (“our website was built by an osteopath agency?”), and they’re giving away PageRank on every page to a competitor’s niche page. Also signals the relationship may be a template-resale arrangement rather than a bespoke build. Severity: Medium — easy talking point in a pitch.

10. Contact form is too thin for B2B leads

Issue: Form fields: First Name , Email , Phone , Message (180-char limit), T&Cs check. No company name field, no enquiry-type dropdown, no preferred-callback time, no size-of-storage-needed selector. Impact: Business / archive storage leads (higher LTV than household) aren’t being qualified — the team has to triage by hand. 180-char message limit is also surprisingly low and may truncate a business enquiry. Severity: Medium*

11. No structured data for Product / Service pricing

Issue: Pricing page lists numeric prices in HTML but doesn’t appear to emit Product / Offer / Service JSON-LD schema. Only Organization/LocalBusiness is implied (1 JSON-LD block on homepage from Rank Math). Impact: Misses rich-result eligibility (price displayed in Google SERP), which competitors using Shopify / properly-marked-up WordPress can claim. Severity: Low–Medium

12. Cookie consent / privacy stack not visible

Issue: GTM is firing but no CookieYes / Cookiebot / Complianz banner detected in the source. Either consent is being skipped (UK GDPR issue) or it’s lazy-injected by GTM in a way I can’t fingerprint statically. Impact: Potential ICO compliance gap — UK businesses using GA / Meta Pixel need a valid consent banner. Severity: Medium (needs verification with browser DevTools — could be a non-issue if loaded async).

13. No accreditation signals (SSA UK, Trusted Traders, etc.)

Issue: Site doesn’t mention Self Storage Association UK membership, BAR (removals), Which? Trusted Trader, or insurance details. These matter to commercial / archive storage buyers who need due-diligence proof. Impact: Loses high-margin B2B leads (archive storage, business overflow) to competitors who lead with accreditations. Severity: Low–Medium (only if they’re not actually members; if they are members the fix is “add the logo”).

Quick Metrics

Caveat: Without running a live Lighthouse / PSI test (Playwright not currently available to me) these are inferred from static signals. Recommend a real PSI run as part of phase 1.

What SignalRed Would Do

Phase 1 — Quick Wins (1–2 weeks, can be done on existing WordPress)

1. Sanitise the osteopath template strings. Replace What We Treat / How We Treat labels and treatment_modalities_container class names with self-storage-appropriate copy. Confirms the brand is taken seriously.
2. Fix the address mismatch. Reconcile Wood Farm Ongar vs. 59 Burnham Rd Leigh-on-Sea in the header Maps link, in the footer, and in Google Business Profile — same NAP everywhere.
3. Hero rewrite + CTA test. Replace “Self Storage in Essex” with a benefit + price-anchored headline (e.g. “Family-run Essex storage from £14/week — we collect, you don’t lift a finger”) and a stronger primary CTA (“Check My Pod Price” or “See Today’s Availability”). A/B test against current.
4. Remove duplicate Slick + Poppins loads. Pure cleanup, ~80–150 KB saved.
5. Trim Google Fonts request. Drop weights nobody uses (Yellowtail should be weight 400 only; Poppins probably 400/600/700; drop Ubuntu entirely if not used). Self-host via font-display: swap.
6. Add Product/Service + Offer JSON-LD on /pricing/ and on each location/service page. Rich results in SERP.
7. Add real image alts + an OG hero rename (“Secure Storage Co team at Wood Farm depot, Ongar Essex”).
8. Remove the osteopath backlink in the footer. Replace with a neutral “Site by [SignalRed Studio]” once you’ve taken over — or remove entirely if Insight resists.
9. Audit cookie consent in DevTools and add CookieYes / Cookiebot if missing.

Phase 2 — Foundation Rebuild (6–8 weeks)

1. New site on a modern stack — recommend Astro + headless CMS (Payload or Sanity) for marketing pages (perfect for content-heavy site with 12 location pages + blog), with a Laravel/Inertia booking-app facade that talks to Stora’s API (or replaces Stora outright if commercials work). Marketing-page LCP target: <1.5s.
2. Branded booking experience — keep Stora as the backend system of record, but wrap the booking funnel in securestorage.co.uk/book/ with consistent branding, family-run testimonials inline, and cross-domain GTM done right.
3. Conversion-engineered location pages — each of the 12 town pages gets unique localised content (drive time, postcode reach, local-business case studies), a town-specific phone-tracking number (CallRail), and structured LocalBusiness schema.
4. Pricing page → interactive calculator — instead of a static table, ask “how many bedrooms / what are you storing?” → recommend pod count → show price → “Book this →”. Standard conversion-lift play.
5. B2B sub-funnel — proper /business-storage/ landing pages for archive / overflow / records with longer-form leads form (size, cycle, compliance needs), insurance / accreditation badges (SSA UK, ISO, Cyber Essentials if applicable).
6. Performance budget — sub-200 KB JS, sub-100 KB CSS, sub-150 KB hero image (WebP/AVIF), LCP <1.5s, Core Web Vitals all green on mobile.
7. WCAG 2.2 AA baked in — keyboard nav, contrast checked, real alt text, ARIA on the carousel.
8. Plausible analytics in addition to GA4/GTM (cookieless = fewer consent headaches), with goal tracking on Get-Started clicks and form submissions.

Phase 3 — Growth & Ongoing

1. Monthly content publishing — long-form “Moving to Brentwood?”, “Storing classic car for winter”, “Archive storage GDPR” — owns long-tail SEO.
2. AI-assisted local-page expansion — extend from 12 towns to 30+ with curated, non-duplicate content using SignalRed’s content pipeline (trained on the family-run voice).
3. Maintenance retainer — security patches, plugin/CMS updates, monthly performance & SEO report, content updates, monitoring.
4. A/B testing cadence — quarterly hero + pricing-page experiments via Plausible / GA experiments.

Indicative Investment

All figures for discussion only, subject to a 30-min scoping call.

Honest framing for the pitch: Phase 1 alone is high-ROI even if they don’t commit to a rebuild — it makes the existing site stop looking like an osteopath template, and Fergus can use it as a paid trial to demonstrate the working relationship before the bigger spend.

Outreach Angle (sales hook)

Most painful single finding to lead with: the osteopath-template leakage (“What We Treat” / “How We Treat” in your menu HTML, and the footer that literally says your website was built “for osteopaths”). It’s specific, easily verified, faintly embarrassing, and cheap to fix — perfect first-contact hook.

Suggested opening message (email or LinkedIn):

Hi Ollie,

Big fan of what Secure Storage Co has built — 41 five-star reviews and family-run since 2000 is a great story for the Essex market.

I had a look at the site this morning because I’m working on a few self-storage rebuilds at the moment, and I spotted something you’ll probably want to fix quickly: your mobile menu still contains the labels “What We Treat” and “How We Treat”, and your footer literally says “Websites & Marketing For Osteopaths By Insight” — looks like a leftover from the agency’s medical template. A handful of other small things too: the header’s Google Maps link goes to a Leigh-on-Sea address rather than Wood Farm in Ongar, and the booking flow drops users onto a Stora subdomain that breaks the brand mid-funnel.

Happy to put a free 20-minute audit call in the diary and walk you through what we’d tidy up (and what a more permanent fix would look like). No commitment — even if you don’t want to switch providers, you’ll leave with a concrete list of things to ask Insight to change.

Fergus / SignalRed Studio [signalredstudio.com]

Proof-of-research nugget to drop in the first reply: mention the duplicate Slick carousel loads (1.8.1 + 1.9.0), or the Poppins font loaded twice with different weight selections. Niche enough to prove you’ve actually looked at the HTML.

Evidence Pack

• Live homepage HTML: ~/website-leads/reports/securestorage-2026-05-27/home.html (saved 2026-05-27, 191 KB)
• Response headers: ~/website-leads/reports/securestorage-2026-05-27/home.headers.txt
• Pages fetched & summarised: /, /pricing/, /contact-us/, /about/
• Smoking-gun grep:
• What We Treat / How We Treat → in <span class="menu_item_label"> in the mobile menu
• treatment_modalities_container → CSS class on the main service grid
• “Websites & Marketing For Osteopaths By Insight” → footer credit (visible link)
• Tech fingerprints:
• GTM-WLRM4BW (Google Tag Manager container ID)
• siteground-optimizer-combined-css (SiteGround hosting)
• wp-content/plugins/insight-core + wp-content/plugins/secure-storage-2024 (Insight Marketing’s custom plugin set)
• cf-ray: a023d94a6eb2cd8d-LHR (Cloudflare LHR PoP)
• Companies House candidates:
• SECURE SELF STORAGE LIMITED (06518378)
• SECURE SELF STORAGE (ESSEX) LIMITED (06336559)
• External references:
• Storage.co.uk listing
• comparethestorage.com listing
• Insight Marketing’s osteopath landing page — the agency that built the current site
• Tools used: curl (HTML + headers + timing), WebFetch (page summarisation), WebSearch (Companies House lookup), Python regex (DOM extraction). No live Lighthouse run (Playwright headed/headless tools not currently available in this environment); recommend running PSI/Lighthouse as a first deliverable.