Website maintenance in Canada is a monthly care list for a site a client already has: updates, a backup you can name, a check that the contact form still sends, and a short note of what you changed. It suits people who can follow a checklist and who will not keep the client’s domain in their own name. It is a poor fit if the offer is “I will stop all hackers,” or if you need a new site to build before you have maintained one.
The Canadian Centre for Cyber Security’s Top 10 IT security actions include patching operating systems and applications. That is the practical core of a care plan for a small site: updates, not a slogan. This guide does not publish a national retainer. A figure from an agency’s menu is not your invoice.
| Fact | Detail for website maintenance in Canada |
|---|---|
| Useful first offer | Updates, one backup method, a monthly note, a cap on hours |
| Who it suits | Careful editors who will write down access and then give it back |
| Patching | One of the Cyber Centre’s top actions. Top 10 |
| Remote work | Update devices, avoid public Wi-Fi for admin, use a strong login. ITSAP.10.116 |
| Domain | The client should be the registrant. .ca has presence rules. CIRA |
| Privacy | Customer data on the site is personal information in a commercial activity. PIPEDA brief |
| Ranking | Not yours to sell. Search Essentials |
| GST/HST | Small-supplier threshold of $30,000. When to register |
Building the first page is no-code web design. The map listing is local SEO. A repeated task between apps is Zapier automation.
Who does website maintenance in Canada suit?
Website maintenance in Canada suits people who already know how a small site is edited: a page builder, WordPress, or a shop admin they have used on their own project. Evenings are enough for one client. The work is a poor fit if you panic when an update fails and you have no backup, if you want the hosting account in your name so the client cannot leave, or if you will promise a search ranking.
Google’s Search Essentials say it does not cost money to be eligible to appear in Search, and that meeting the requirements does not mean a page will be shown. Maintenance keeps the site available and updated. It does not buy a position.
What does website maintenance cost to start in Canada?
Website maintenance in Canada can start with a computer you have and a checklist. The client should pay for their own hosting. Your tool prices, if any, belong on the vendor’s page. This guide does not state a live host price. The ranges below are typical Canadian retail prices to verify locally where they are gear.
| Item | Typical CAD range or rule | How to think about it |
|---|---|---|
| Computer you have | $0 | The checklist is the product. |
| Headset for the handoff call | $25–$80 | Screen share is easier with one. |
| Password manager | Confirm the live price, or use a careful written handoff | Do not store the client’s password in a chat thread. |
| Backup location the client owns | Their host’s backup, or an export they keep | A backup only you can open is a trap. |
| Your own site, optional | Confirm hosting | So they can read the offer. Not a new theme shop. |
| Insurance | A quote, if you want one | Ask whether a home policy covers client work. This is not insurance advice. |
Write the checklist before you subscribe to anything. Hostinger TODO-AFFILIATE is one host a Canadian client might already use, or might move to if they ask you to compare. The account should be in the client’s name. Read the current price on that page. Do not mark up a plan you have not shown them.
A walkthrough is easier with a headset TODO-AFFILIATE. It is not required to update a plugin on a site you can click through yourself.
Invoice the month, not a vague “care.” FreshBooks TODO-AFFILIATE fits once a second client would otherwise live in a text message. The first client can be a written note and an e-transfer if the scope is one page long.
| Monthly care list | “I will rebuild it” | |
|---|---|---|
| First job | Updates, backup check, a note | A new site. That is the web-design guide |
| Access | Client owns the domain and the host | Same rule |
| Promise | What you checked | Not a rank, and not zero risk |
How much can website maintenance earn in Canada?
Website maintenance earnings in Canada cannot be promised as a monthly rate. What you keep depends on the list below. This guide does not publish a national retainer.
- How many hours the note includes, and what happens after the cap
- Whether you also change copy, which is extra
- Hosting you pay and bill back, shown as a separate line
- A broken update you have to roll back
- Months the client pauses
- Other side-hustle revenue in the same GST/HST pot
A care plan that includes unlimited edits will be used that way. Cap the hours. A new page is a separate price.
What would an assumed maintenance month look like in Canada?
An assumed month in Canada, in the sketch below, uses a made-up fee and the low end of the headset range, charged once. It assumes the client already pays for hosting, so hosting is not your cost. The sketch is not a quote, a forecast, or a typical agency rate.
Illustrative example. Suppose the note is $120 for up to 2 hours: updates, a backup check, and a short email of what changed. That fee is an assumption, not a market rate. Suppose a headset at $25 is bought for the first call and charged to this first month only. The sketch is $120 − $25 = $95 before your time and before any tax set-aside. If the work takes the full 2 hours, $95 ÷ 2 = $47.50 an hour before tax, inside these assumptions. A third hour is not included. If you spend it, the sketch no longer describes the job unless the note says how extra hours are billed. These totals are assumptions, not a quote, a forecast, or a typical result.
How do you start website maintenance in Canada?
Starting website maintenance in Canada means writing a care list, practising it on a site you control, and taking client access only in the client’s accounts. The steps below are that sequence.
Step 1: Write the care list
Updates for the software the site runs. A backup you can point to. A check that the home page loads and the contact path works. A note to the owner. A cap on hours. Anything else is a second line: new pages, new products, ads.
Step 2: Practise on a site you own
Update it. Take a backup or an export. Restore nothing unless you have to, but know where the file is. If you do not have a site, maintain a test install you created, not a stranger’s.
Step 3: Read the patching guidance
The Cyber Centre’s Top 10 puts patching operating systems and applications near the top of the list. Its remote-work tips say to run updates, use a firewall and anti-virus, and avoid sending sensitive information over public Wi-Fi. Do admin from a network you trust. You are not selling the Cyber Centre’s whole program to a cafe website. You are borrowing the patching habit.
Step 4: Put access in the client’s name
Domain, hosting, and the admin user. If the domain is .ca, CIRA’s presence requirements say who may register it. The client, if they qualify, should be the registrant. Your login can be a user they can delete. Do not register their name in your personal account.
Step 5: Limit what you look at
A contact form stores personal information. The OPC’s PIPEDA brief explains duties for personal information in commercial activity, and notes that Alberta, British Columbia, and Quebec have their own private-sector laws for activity inside those provinces. You do not need to read the inquiry mailbox to update a plugin. This is not legal advice. If a task needs customer records, say so and stop until the owner agrees in writing.
Step 6: Offer the list to five businesses that already have a site
A shop, a tutor, a trades page. Show the checklist. Name the hour cap and the fee. Do not offer a free month with unlimited edits.
Step 7: Do the first month as a drill
Update. Confirm the backup. Load the site on a phone. Email what you changed and what you did not touch. Stay inside the hours.
Step 8: Invoice the same day
Separate your fee from any hosting receipt you are passing through. If you are not registered for GST/HST, do not add a tax line.
Step 9: After two months, keep or rewrite the list
If every month ran over because of new copy, the next note prices copy separately. Honour the cap you already sold, or bill the extra only if the note allowed it.
What should the first week of website maintenance in Canada include?
The first week should produce a care list, one practice run, and five offers. A client is a bonus.
- Day 1: Write the list and the hour cap. Write what is not included.
- Day 2: Read the Cyber Centre patching note. Update your own computer.
- Day 3: Practise the list on a site you control. Save the backup location in the note.
- Day 4: Draft the access rules: client owns the domain, you get a removable user, you do not work from a cafe Wi-Fi.
- Day 5: Talk to five owners who already have a site.
- Day 6: If someone is interested, confirm the registrant name before you log in.
- Day 7: If nobody books, shorten the offer. Do not add “SEO guaranteed” to fill the silence.
What website maintenance mistakes are common in Canada?
Common mistakes in Canada are holding the domain hostage, working from a public network, and promising that updates make the site unhackable. The Cyber Centre’s remote-work note is plain about public Wi-Fi and updates. A care email that says “fully secure” is a claim you cannot keep. Say what you checked.
Another mistake is mixing a new build into a maintenance price. Building the first site is a different job. If the client has no site, use the no-code guide and hand off maintenance after the page exists.
Do not sell ranking. Search Essentials say eligibility is not a guarantee of being shown. A broken contact form is a maintenance bug. A desire to be first in the city is not.
Another quiet mistake is updating a live shop during the hour the owner takes orders. Ask when the site can be touched. If an update fails, the backup you named in the care list is the way back, which is why the first month includes finding that backup before you change anything. A note that says “updated some plugins” without naming them is not a record the owner can use next year.
Which tax rules apply to website maintenance in Canada?
Website maintenance income in Canada is self-employment income, reported on Form T2125, Statement of Business or Professional Activities, and self-employed people pay the whole Canada Pension Plan contribution on the net. GST/HST on your taxable supplies follows the $30,000 small-supplier test, not the taxi and ride-sharing rule. Nova Scotia’s HST is 14% as of 1 April 2025 on the CRA charge and collect the GST/HST table, and Quebec charges GST and QST.
This is not tax, legal, or insurance advice. Recheck the small-supplier threshold on the CRA page when you revisit prices.
Keep the monthly notes and the e-transfers. If you pay hosting and bill it back, keep that receipt separate so the markup is visible. Report the work on Form T2125 with the T1. The small-supplier test is worldwide taxable supplies, yours and your associates’, of $30,000 or less in a single calendar quarter and over the last four consecutive calendar quarters. Add design, writing, and other side-hustle revenue to the same pot. Under that test, registration is usually optional. Over it, you register on the timetable on the CRA’s when-to-register page. Maintenance is not ride-sharing, so the first-dollar rule does not apply unless you also carry passengers for a platform.
Once registered, charge the rate for the province where the supply is made. Confirm the rate on the charge-and-collect table and with the GST/HST calculator (and rates), and set the tax aside.
Search your city for a business licence and use that city’s fee if there is one. This guide does not state a licence fee from another city.
Which side hustles sit near website maintenance in Canada?
Website maintenance in Canada sits next to the work that creates the site. No-code web design is the first build. Local SEO is the map listing, which maintenance does not replace. Zapier automation is a repeated click between tools, not a plugin update. A one-task tool setup is AI consulting. A shop with a cart is a Shopify store, and its care list is a different admin screen from a brochure site.
What are the common questions?
What is included in a first maintenance offer?
Updates, a backup you can point to, a check that the site and the contact path load, a short note, and an hour cap. New pages and ranking promises are separate, and the ranking is not something you can sell.
Should the domain be in my name?
No. The client should be the registrant. CIRA's presence rules apply if the name is .ca. Your access should be a user they can remove.
Can I promise the site will not be hacked?
No. The Cyber Centre's guidance is to patch and to be careful with remote access. A care plan can say what you updated. It cannot promise zero incidents.
Do I need the customer's messages to update the site?
Usually no. PIPEDA applies to personal information in commercial activity. Update the software without reading the inquiry mailbox unless the owner has asked for that specific task in writing.
When do maintenance fees in Canada trigger GST/HST?
They follow the CRA small-supplier test of $30,000 in worldwide taxable supplies, including other side hustles. This is not tax advice.
Which sources support this guide?
The rules, rates, and platform requirements in this guide are checked against these primary sources. Retail price ranges are labelled as ranges to verify locally, and they are not quotes.
- When to register for and start charging the GST/HST — Canada Revenue Agency
- Charge and collect the GST/HST — Canada Revenue Agency
- GST/HST calculator (and rates) — Canada Revenue Agency
- Form T2125, Statement of Business or Professional Activities — Canada Revenue Agency
- Contributions to the Canada Pension Plan — Government of Canada
- GST/HST for taxi and ride-sharing drivers — Canada Revenue Agency
- Top 10 IT security actions — Canadian Centre for Cyber Security
- Cyber security tips for remote work (ITSAP.10.116) — Canadian Centre for Cyber Security
- PIPEDA requirements in brief — Office of the Privacy Commissioner of Canada
- Canadian Presence Requirements for .ca — Canadian Internet Registration Authority
- Google Search Essentials — Google Search Central