Corexy
← All cases
Windows and glazing · corporate website

A window company's website with a panel and a regular legal compliance audit

Since 2003 StroyTransService has made and installed PVC windows, balconies, sliding systems and winter gardens in Vladimir. Its old site ran on a closed CMS with no updates and contradicted itself. We audited it, moved the company to a new site with its own panel in eight days, and turned the legal and marketing compliance check into a regular one. The site is live at spk-balstroy.ru.

Cost
50 000 ₽

What was needed

  • The old site ran on a closed 2016 CMS: no updates, every edit through a developer, security holes in the admin area.
  • The copy contradicted itself: two different warranties, different prices for the same windows, advertising promises with nothing behind them.
  • The company collects leads with personal data: that needs the real data operator named in the consent, proof of consent and storage inside Russia.
  • The company had to run the site itself — services, prices, projects, promotions and articles — without calling a developer.
  • A move without losses: old addresses from search results and bookmarks had to lead to the new pages.

What we built

  • Audited the old site — with the client's permission and read-only: engine, security, forms, SEO, domains. The verdict: move, don't patch.
  • Moved all 46 pages word for word and turned every contradiction into a question for the client — which warranty is right is the company's call, not ours.
  • Built a new site: sixteen homepage blocks, pages for services, projects, prices, promotions and articles — each with its own address and SEO fields.
  • Built a panel on its own subdomain: services, projects with categories, prices, promotions, reviews, FAQ, articles, a media library and users.
  • Built the audit in: a run checks the site against data protection law, the Advertising Law and consumer rights, and every finding lands in the panel's Findings with a button to the place to fix it.
  • The client switches indexing on once the blockers are closed. Switching it on earlier is possible, but the panel raises a blocker of its own at once — copy the company would have to answer for does not reach search.
  • A lead is written to the database first and only then emailed; its consent, policy version, IP and time are stored with it.
  • Data is stored in Russia. The retention period is one number in the panel: once it passes, leads are anonymised automatically.
  • Set up 37 redirects from the old addresses and redrew the logo from a raster into a vector kit.
—

What it looks like

The site first — on desktop and on a phone — then the panel the company runs it from.

01screenshot
First screen: the offer, two calls to action and a photo of a finished job. Headline, subline and background are edited in the panel — the layout stays.
First screen: the offer, two calls to action and a photo of a finished job. Headline, subline and background are edited in the panel — the layout stays.
02screenshot
Five services as cards with a starting price. Each has its own page: its own address, title and search description.
Five services as cards with a starting price. Each has its own page: its own address, title and search description.
03screenshot
Finished projects with a category filter and counts. The job, its category and its position are ordinary records in the panel.
Finished projects with a category filter and counts. The job, its category and its position are ordinary records in the panel.
04screenshot
A service page: breadcrumbs, a starting price and the clause that keeps a price list from becoming a binding public offer.
A service page: breadcrumbs, a starting price and the clause that keeps a price list from becoming a binding public offer.
05screenshot
How we work: six steps from the first call to cleaning up after installation. Text and order are edited in the panel.
How we work: six steps from the first call to cleaning up after installation. Text and order are edited in the panel.
06screenshot
FAQ as a two-column accordion, with FAQPage markup that search engines read.
FAQ as a two-column accordion, with FAQPage markup that search engines read.
07screenshot
The measurement request: without consent to data processing the button stays disabled, with the privacy policy one click away.
The measurement request: without consent to data processing the button stays disabled, with the privacy policy one click away.
08screenshot
On a phone: the same layout and a pinned bottom bar — call, or book a measurement.
On a phone: the same layout and a pinned bottom bar — call, or book a measurement.
09screenshot
Landing blocks: sixteen of them, reordered by drag and hidden with a toggle. The set is closed — the panel cannot produce a broken page.
Landing blocks: sixteen of them, reordered by drag and hidden with a toggle. The set is closed — the panel cannot produce a broken page.
10screenshot
Appearance: colours, fonts and radii with a live preview. The panel computes WCAG contrast and warns the moment text would become unreadable.
Appearance: colours, fonts and radii with a live preview. The panel computes WCAG contrast and warns the moment text would become unreadable.
11screenshot
Findings — the register of the legal and marketing compliance audit: blockers, warnings and a button straight to the place to fix it. The client's wording is blurred here.
Findings — the register of the legal and marketing compliance audit: blockers, warnings and a button straight to the place to fix it. The client's wording is blurred here.
12screenshot
A lead: source, consent, the consent and policy versions, IP and browser. Evidence under Russia's data protection law, not just a contact.
A lead: source, consent, the consent and policy versions, IP and browser. Evidence under Russia's data protection law, not just a contact.
13screenshot
Media library: alt text is required, SVG is refused, and before deleting an image the panel shows where it is used.
Media library: alt text is required, SVG is refused, and before deleting an image the panel shows where it is used.
14screenshot
Settings: brand, appearance, header and footer, contacts, SEO, analytics, legal details — all without rebuilding the site.
Settings: brand, appearance, header and footer, contacts, SEO, analytics, legal details — all without rebuilding the site.
—

What came out of it

8 days

from first commit to launch

September 19 to 27: the site, the panel, the content move, the legal groundwork and a production server with certificates and backups.

35

findings in the first audit run

18 of them blockers. Each explains which rule the wording touches and links to the place where it is fixed.

100

Lighthouse accessibility score

Measured on the live site — together with 100 for best practices and zero layout shift.

37

old addresses kept working

Every address of the old site leads to its new page — links from search and bookmarks do not break.

—

What the panel does

  1. 01

    Homepage blocks

    Sixteen blocks: reorder by drag, show or hide with a toggle, each with its own heading and background.

  2. 02

    Services and prices

    Cards, a page per service and a price table marked as not being a public offer.

  3. 03

    Projects

    Jobs with categories and photos, a filter on the site, order set by drag.

  4. 04

    Findings

    The audit register: blockers, warnings, statuses and a link to the fix. A closed finding that is found again reopens by itself.

  5. 05

    Self-checks

    Seven rules the panel checks on its own: an expired promotion still on show, lead emails going nowhere, a page with no search title.

  6. 06

    Appearance

    Colours, eight fonts, radii, a live preview and a WCAG contrast check.

  7. 07

    Leads

    Statuses, recorded consents, search and CSV export — for the owner only.

  8. 08

    Media and SEO

    Required alt text, no SVG, titles and descriptions of pages for search.

  9. 09

    Users and security

    Owner and editor roles, a second factor at sign-in and a log of who changed what on the site.

— the same for your company

Want a site that will not get you in legal trouble?

Tell us about the company and the task. We will come back with a structure, an estimate and a timeline in a couple of days — and if you already have a site, we start with an audit of what holds up and what has to go.

Discuss the projectSee all cases
A CMS-driven site that checks itself for legal compliance — Corexy