Healthcare · Clinics · WordPress

Clinic websites patients trust and actually book.

Private clinics lose patients in the gap between finding you and booking with you. I build WordPress sites for healthcare practices with real online scheduling, accessibility built to WCAG 2.2 AA, patient data handled to GDPR standards, and the local SEO that puts you in the map pack.

Get a free clinic audit Compliance first
WCAG 2.2 AAAccessibility target
GDPRArt. 9 health data
24/7Online booking
Waiting area of a modern private clinic Consultation room of a modern private clinic Treatment room of a modern private clinic Corridor of a modern private clinic Your clinic Waiting area

Book an appointment

Choose a practitioner, pick a slot, done — no phone call.

Dr. AlonsoDr. FerrerAny available
Mon 14Tue 15Wed 16Thu 17
09:00 10:30 11:15 12:45
Confirm Tue 15 · 11:15
Consent-first analytics · EU hosting LCP 1.8s
Where clinic websites leak

Every sector loses a patient differently. Yours loses them before the first visit.

A brochure site tells people you exist. It rarely gets them onto the schedule. These are the three failures I find in almost every clinic audit.

01

Booking that ends in a phone call

A contact form and a phone number are not a booking system. Patients search out of hours, on a phone, and want a confirmed slot in under a minute. Anything slower sends them to whoever answers first.

02

Invisible where it counts

Most patients arrive through a local search on a map. Without structured data, consistent practice details and a maintained Google Business Profile, you sit below directories that then charge you for your own patients.

03

Quiet compliance debt

Analytics firing before consent, forms mailing unencrypted patient details, contrast and keyboard traps that lock out the people most likely to need care. Invisible until an inspection, a complaint, or a breach.

What I build

Healthcare engineering, on WordPress.

Everything a private practice needs to be found, trusted and booked — built to the standards your sector is actually held to.

01

Online booking & scheduling

Real availability, confirmed instantly, synced to how your front desk already works.

  • Practitioner & room-level calendars
  • Reminders by email and SMS to cut no-shows
  • Doctoralia, Doctolib, Calendly or custom
02

Local SEO & the map pack

So the patient searching “dentist near me” at 22:00 finds you, not a directory.

  • MedicalClinic & Physician structured data
  • Google Business Profile & NAP consistency
  • Location and treatment landing pages
03

Accessibility, done properly

Built to WCAG 2.2 AA and EN 301 549 — tested with a keyboard and a screen reader, not just a plugin.

  • Contrast, focus order, target sizes
  • Accessible forms and error messaging
  • Audit report you can hand to a regulator
04

Patient data & GDPR

Health data is a special category under Article 9. It gets treated that way from day one.

  • Encrypted submissions, no plaintext email
  • Consent-first analytics and cookie control
  • EU hosting, DPAs, retention policy
05

Multi-site & multi-practitioner

Several locations or a growing team, without three disconnected websites.

  • WordPress multisite or shared templates
  • Per-location hours, staff and services
  • Multilingual (ES / CA / EN) done right
06

Performance & security

Fast on a phone in a waiting room, hardened against the attacks clinics actually face.

  • Core Web Vitals optimisation
  • Hardening, WAF, monitored uptime
  • Backups and a tested restore path
The part most agencies skip

Compliance is a build decision, not a plugin you add later.

Healthcare sites carry obligations a restaurant site never will. Retrofitting them is expensive; building for them costs nothing extra.

Health data as a special category

Under GDPR Article 9, data concerning health sits in a protected class. Booking forms, symptom fields and uploaded reports are encrypted in transit and at rest, never emailed in plaintext, and retained only as long as you have a lawful basis to keep them.

GDPR Art. 9 · LOPDGDD

Consent before anything fires

No analytics, pixel or embedded map loads until the patient has agreed to it. Consent is logged, revocable, and the site works fully if they decline — which is the part most cookie banners quietly get wrong.

ePrivacy · AEPD guidance

Accessibility to WCAG 2.2 AA

Tested with keyboard navigation and a screen reader against EN 301 549, the European reference standard. Your patients skew older and more likely to have a visual, motor or cognitive impairment — accessibility here is core function, not decoration.

WCAG 2.2 AA · EN 301 549

Infrastructure that stays in the EU

Hosting, backups and mail routed through EU providers with signed data processing agreements. Access is logged, credentials are least-privilege, and you get a written record of who processes what — the document you need when a patient asks.

EU hosting · DPA · audit log

I build to these standards and document what was done — I'm an engineer, not your lawyer. For a formal assessment of your obligations, your DPO or legal counsel should have the final word.

What that adds up to

Numbers a practice manager feels.

/01
0

More appointments booked online after replacing a contact form with real scheduling.

/02
0

Typical mobile LCP — the phone in the waiting room is the real test.

/03
AA

WCAG 2.2 conformance target on every build, verified by manual testing.

/04
0

Third-party trackers firing before the patient has given consent.

/05
0

Median PageSpeed score across delivered sites — measured on live URLs, verifiable on request.

/ A directory listing, or your own practice

Renting patients from a directory,
or owning the relationship?

Doctoralia, Doctolib and Top Doctors bring real volume, and for a new practice that is worth paying for. The problem starts when they become the only channel: you pay per patient, forever, for people who were searching for you.

Your own site, built properly

Patients book with you, and the relationship stays yours.

  • 01A booking made on your domain costs you nothing per patient — the economics improve every year instead of scaling with your success.
  • 02You own the patient list, the reviews and the search visibility. Nothing is switched off if you stop paying a subscription.
  • 03Structured data and location pages rank your practice for treatment and neighbourhood searches, in your own name.
  • 04Accessibility and consent built to your obligations, evidenced in an audit you can actually hand over.
  • 05The engineer who built it answers within one business day, and the code is yours on delivery.

A directory profile alone

Fast to start, rented forever, and never quite yours.

  • 01A recurring fee or a cut per booking, on patients who often searched for your practice by name.
  • 02The profile, the reviews and the ranking belong to the platform. Leaving means starting again.
  • 03Your listing sits beside every competitor in your city, sorted by criteria you don't control.
  • 04A template shared with thousands of practices — little room to explain what makes yours different.
  • 05Support is a ticket queue, and the roadmap serves the platform's priorities, not your clinic's.

Platform names are referenced for comparison only and belong to their respective owners. Directories are a legitimate acquisition channel, and the strongest practices usually run both — the point is that the channel you own should carry the majority, not the minority, of your bookings.

How it goes

From audit to launch, transparent throughout.

STEP 01

Clinic audit

I review your booking flow, local visibility, accessibility and consent setup, then hand you a prioritised report — free, no pitch.

STEP 02

Flows & data map

We map every patient journey and every field you collect, so scheduling fits your front desk and the data handling is defensible.

STEP 03

Build & test

Built on staging with weekly demos, performance budgets from day one, and accessibility tested by keyboard and screen reader.

STEP 04

Launch & care

Migration, monitoring, an accessibility and data-handling report for your records, a 30-day warranty and an optional care plan.

FAQ

Healthcare, answered.

Yes — that's the whole point. Availability is defined by you, per practitioner and per treatment type, with buffers, blackout periods and approval rules if you want them. Bookings land in the calendar your team already uses, so nobody is checking a second system.

Data concerning health is a special category under Article 9, so it's treated as such from the first line of code: encrypted in transit and at rest, never sent by plaintext email, stored on EU infrastructure under a signed data processing agreement, with least-privilege access and a documented retention period. You get that documentation in writing at handover.

Obligations depend on your country, your legal form and whether you provide services electronically, and the direction across the EU has been steadily toward wider coverage. Rather than argue the edge cases, I build every healthcare site to WCAG 2.2 AA against EN 301 549 and document the testing — so you're covered either way. For a formal determination, ask your legal counsel.

Alongside, usually. Directories are a real acquisition channel and switching them off on day one is bad advice. The goal is to shift the balance: patients who already know your name should book on your domain at no cost per booking, while the platform keeps bringing genuinely new discovery.

No, but it should be designed rather than improvised. Each location gets its own page, hours, team and structured data so it can rank locally, while sharing one design system and one place to update content. Multisite or a shared template depends on how independently your locations operate.

Often, yes. Booking, consent, accessibility and speed can usually be fixed in place if the foundation is sound. If a theme or plugin is the actual bottleneck I'll say so plainly, with the trade-offs and the cost of each path, before anyone commits to a rebuild.

Start here

Get a free clinic audit.

Send me your URL. I'll review your booking flow, local visibility, accessibility and consent setup, then show you exactly where patients are dropping off and what it takes to fix it.

Most clinic audits come back within two business days.

Schedule discovery call