# Launch Checklist — must be confirmed by the business before go-live

## Brand & identity
- [ ] Confirm real company name (currently placeholder "Northhaven Care") and replace the text logo with the approved logo
- [ ] Confirm tagline, brand colours, and favicon
- [ ] Replace the 4 placeholder photos with licensed brand photography (note source/licence for each)

## Contact & service facts (nothing below is currently claimed on the site)
- [ ] Real phone number and email — enter in Admin → Site Settings (they stay hidden until then)
- [ ] Real office address / confirmed service areas only
- [ ] Review **every** seeded service (31 items across 5 categories): deactivate, rename, or rewrite anything the company does not actually offer. Seeded copy is generic starter content inspired by sector-standard service menus — **not** a verified offering list
- [ ] Remove/replace any service implying infusion, pharmacy, clinical-trial, insurer, or government-program capability unless contracted/confirmed
- [ ] Confirm eligibility, referral, and availability wording with clinical/operations leads

## Legal & compliance
- [ ] Replace placeholder Privacy Policy and Terms of Use with lawyer-approved text
- [ ] Confirm consent wording on the enquiry form; confirm data-retention period and set an enquiry deletion routine
- [ ] Confirm no content implies diagnosis, treatment, cure, government endorsement, accreditation, or guaranteed outcomes
- [ ] Accessibility pass (WCAG 2.2 AA): keyboard test mega-menu/modals/accordion, contrast check, screen-reader pass

## Testimonials & claims
- [ ] Only publish testimonials with written authorization on file; never add ratings, statistics, awards, years-in-business, or client counts that cannot be evidenced

## Technical go-live
- [ ] PHP 8.1+ with pdo_sqlite + mbstring; docroot = `public/`; `storage/` writable but not web-accessible
- [ ] Create the real admin account via `/setup.php`, then delete `public/setup.php` (optional defence-in-depth — it self-closes, but removal is cleaner)
- [ ] Force HTTPS; verify Secure session cookie + CSP headers in production
- [ ] Set MAIL_FROM / MAIL_NOTIFY if email notifications are wanted; send a test enquiry and confirm it lands in Admin → Enquiries
- [ ] Submit a test enquiry, change a service title, and reorder a category — confirm the homepage, mega-menu, and form dropdown update
- [ ] Set up scheduled backup of `storage/northhaven.sqlite`; test a restore
- [ ] Add the production domain to `robots.txt` sitemap line and `sitemap.xml`; submit to Search Console
- [ ] Test at 360 / 390 / 430 / 768 / 1024 / 1280 / 1440 / 1920 px and with `prefers-reduced-motion` on