A hosting plan can look like a bargain until a policy issue puts your cannabis business site at risk. A low introductory price means very little if the provider can suspend your account over product language, if backups are limited, or if support disappears when your store needs help. Knowing how to evaluate hosting policies lets you choose a provider based on the rules that affect your operation, not just a sales page headline.
For cannabis, CBD, seed, medical marijuana, and mushroom businesses, policy review is more than fine print. Your website may carry regulated product information, age-gating tools, ecommerce functions, customer inquiries, and a content library you cannot afford to lose. Start with the policies below before you migrate a site, register a domain, or pay for a long-term hosting term.
Start With the Acceptable-Use Policy
The acceptable-use policy, often called an AUP, tells you what a hosting company will and will not permit on its servers. It is the first document cannabis-related businesses should read. Many general web hosts use broad wording about controlled substances, illegal activity, pharmaceuticals, or high-risk commerce. Those terms can leave too much room for interpretation.
Do not assume a provider that hosts a cannabis blog will also allow a cannabis ecommerce store, seed catalog, CBD brand, or medical marijuana education site. Ask direct questions about your specific business model. Explain whether you sell products online, collect leads, publish product information, use a payment processor, or operate only as an informational site.
You are looking for a clear answer, preferably in writing, that the host accepts your legal business category. A provider with cannabis-industry experience is less likely to be surprised by your product pages or to treat ordinary cannabis terminology as a policy violation. That clarity can prevent a damaging suspension when your traffic and sales are growing.
Check How Suspensions and Enforcement Work
Every host needs rules against spam, malware, phishing, copyright abuse, and server misuse. That is reasonable. The question is how the company enforces those rules when an issue appears.
Read the suspension policy and look for the process behind it. Will the host notify you before disabling a site when possible? Does it explain what evidence it uses? Can you correct a problem and restore service quickly? Is there a real escalation path if you believe the account was flagged incorrectly?
A credible policy separates urgent security threats from routine disputes. Malware or an active phishing attack may require immediate action. A questionable product description, an outdated plugin, or an accidental resource spike should usually come with a chance to respond. Small businesses need a host that treats account reviews seriously without leaving owners in the dark.
It also helps to understand your responsibilities. Hosts may require you to keep WordPress, themes, plugins, and scripts updated. They may prohibit bulk email campaigns, unauthorized file sharing, crypto mining, or excessive automated processes. Those limits protect shared-server customers, but they should be stated clearly enough that you can operate within them.
Review Uptime Language, Not Just the Percentage
A 99.9% uptime claim sounds strong, but the policy behind it matters. Over a full year, 99.9% availability can still allow roughly nine hours of downtime. For a brochure site, that may be manageable. For a dispensary-adjacent service, a busy CBD store, or a product launch, it may not be.
Look for how the provider defines downtime. Scheduled maintenance, network problems outside its control, customer configuration errors, and denial-of-service attacks may be excluded from an uptime guarantee. Those exclusions are not automatically a red flag, but they show what the guarantee actually covers.
Also ask what happens if the host misses its target. Some companies offer a service credit. A credit will not recover missed orders, but it does show the provider is willing to put terms behind its promise. More useful than a flashy percentage is a track record of stable infrastructure, server monitoring, and support that responds when something goes wrong.
For a US-focused business, server location can affect performance and support expectations. A host with US-based infrastructure may be a practical fit when most of your visitors, staff, and customers are in the United States. Still, location is only one factor. Caching, server resources, WordPress configuration, image optimization, and ecommerce plugins all affect real-world speed.
Read the Backup and Restoration Policy Carefully
Backups are often advertised as a feature, while the policy reveals the limits. Find out how often backups run, how long copies are retained, and whether restoration is included. Daily backups retained for several weeks offer a very different safety net than occasional copies with a short retention period.
Ask whether backups cover files, databases, email, and account settings. For WordPress and WooCommerce sites, the database is especially critical because it contains pages, orders, customer details, form submissions, and store configuration. A backup that excludes a key component may not be enough to restore the site you actually run.
You should also know who can initiate a restoration and how long it normally takes. Can you restore an individual file through cPanel? Can support restore the full account? Is there a fee? A good host makes recovery understandable rather than turning a stressful outage into a support mystery.
Even when hosting backups are included, maintain an independent copy of your site. This is not a vote of no confidence. It is standard business protection. Download periodic backups, keep a current record of your plugins and licenses, and make sure you can access your domain account separately from your web-hosting account.
Compare Security Responsibilities
Security policies should tell you what the provider protects and what remains your responsibility. The host may secure the server environment with firewalls, malware scanning, account isolation, SSL options, and system updates. You may still be responsible for secure passwords, WordPress updates, trusted plugins, staff access, and safe handling of customer data.
Pay attention to account isolation on shared hosting. If another customer on the same server has a compromised site, isolation technology helps limit the chance of that problem affecting your account. Tools such as CloudLinux and CageFS can be meaningful here, but the operational benefit is simple: your site should not be unnecessarily exposed to another account’s trouble.
For ecommerce, confirm how SSL certificates are handled and whether HTTPS is easy to enable and renew. SSL does not make a store fully secure by itself, but it is a basic requirement for protecting visitor connections and building buyer confidence. If you process payments, use a reputable payment provider and understand its cannabis or CBD rules separately. Your web host and your payment processor have different policies.
Examine Support Terms Before You Need Support
“24/7 support” can mean very different things. One provider may offer around-the-clock technical staff who can investigate a server problem. Another may offer a chatbot or ticket intake form outside business hours. Review the support policy for response expectations, channels, and scope.
Phone access matters to many small-business owners, especially during a store outage or migration. So does the ability to speak with someone who understands WordPress, cPanel, DNS, email, and common WooCommerce issues. Ask whether support helps with migrations, restores, malware concerns, and basic configuration, or whether those requests are billable services.
This is where a specialist can save time. Weed Hosts, for example, is built for cannabis-related businesses and combines technical hosting tools with direct support for owners who do not want to solve every issue alone. The right level of help depends on your confidence and your site complexity, but policy language should never make you guess what support includes.
Calculate the Real Cost at Renewal
Hosting policies often contain the numbers that matter most after checkout. Confirm the introductory price, renewal price, billing term, refund window, renewal timing, and any fees for add-ons such as domains, SSL, backups, or migrations.
Longer terms can lower the monthly price, which can be smart for an established business. The trade-off is commitment. If you are launching a new brand, testing an online store, or moving from an unreliable host, a shorter initial term may give you more flexibility. A 30-day money-back guarantee reduces some risk, but read what is refundable and whether domain registration or setup charges are excluded.
Set a calendar reminder well before renewal. Domain expiration, failed payment notices, and automatic renewals can create avoidable downtime. Keep the account contact email current, especially if it is tied to a former employee or old agency.
A Better Way to Make the Final Choice
When you evaluate hosting policies, do not look for a provider with zero restrictions. That provider probably has not thought through its responsibilities. Look for policies that are specific, fair, and compatible with your business.
Before buying, get answers to your biggest operational questions: Is my cannabis-related business explicitly accepted? What happens if an account is flagged? How are backups handled? What support can I reach after hours? What will this cost when the introductory term ends? Save the answers with your account records.
Your hosting provider should make it easier to build trust with customers, publish confidently, and recover quickly when problems happen. A clear policy is not paperwork to skim. It is part of the foundation your business stands on.