Choose a web-hosting and email service with data centres in the European Economic Area (EEA); otherwise, you might be transferring data outside the EEA without knowing it, resulting in a breach of the GDPR.
Your website should be accessible through HTTPS
rather than HTTP. The lack of an SSL certificate may impact your search engine
rankings.
You
must inform visitors about any information your website collects through
cookies and allow them to accept or decline specific types of cookies.