Apply to Moonlabs
Clinic For UK private clinics · £999 + £99/mo

A website for private clinics.

For UK dental, GP, aesthetic, physio and fertility clinics that need real bookings, ASA-safe pricing and GDPR-aware forms — not a brochure built by an agency that’s never read CAP. £999 to build, £99 a month to look after.

Built by the operators behind
Build
£999

One-off, all-in. Brief, design, build, copy assist, deploy. No discovery fee, no design-phase upcharge, no surprise add-on.

Run
£99 / mo

Hosting, monitoring, security, backups and every small content / copy / image change. No hourly billing on changes.

Compliance, included
GDPR & ASA-aware

Cookie banner, GDPR-aware patient forms, ASA-safe pricing, regulator IDs rendered cleanly. Built in, not billed as a separate engagement.

Brief us
Why this shape

A clinic site is a regulated document with a booking widget on top.

Most clinic websites in the UK are built by agencies that have never opened the CAP code, never read the GDC’s ethical advertising guidance, and don’t know that an analytics pixel firing before consent is technically a data-protection breach. The output looks fine until a complaint lands, or until a patient enquiry sits in a shared inbox for three days, or until the booking form bounces back because nobody mapped it into the practice management system. The site is a brochure with a contact form — not a working part of the clinic.

We build clinic sites the other way round: the regulated parts (consent, intake, pricing, clinician credentials, data handling) are the load-bearing structure, and the marketing wraps around them. Same operator team that runs Homemove, home.co.uk and homedata.co.uk — we’ve dealt with regulated data, ad-standards review and integration plumbing on our own businesses since 2023. The £99 / month is what keeps a clinic site current as treatments, prices, clinicians and insurers change.

What a clinic site needs

Six things we build into every clinic site.

Bookings into the real diary

Patient picks a treatment, picks a slot, books. Behind the scenes the booking lands in Cliniko, Dentally, Pabau, Practice Plan or your PMS of choice — not a shared inbox. Reception sees it in the clinical calendar the moment it’s made.

Structured treatment menu

Each treatment gets its own page with a description in plain English, "what to expect" detail, a from-price (CAP-compliant), and a direct booking CTA. Marked up with MedicalProcedure schema so Google understands it.

Clinician profiles, properly

Photo, name, regulator (GDC / GMC / HCPC / NMC / GOC) and registration number, qualifications, special interests, languages spoken. Renderable, verifiable, schema’d. None of the "Dr Smith has been a dentist for 15 years" stock-photo nonsense.

GDPR-aware intake forms

Encrypted in transit and at rest, routed to a named recipient (not a shared inbox), retention windows configurable per form, lawful-basis statement at submission, no clinical detail to third-party trackers. Cookie banner that does what it says it does.

Practical patient logistics

Address, postcode, parking, nearest tube/station, step-free access, baby-changing, sign-language availability if you offer it. The boring information the patient actually needs the morning of their appointment.

Insurer + regulator trust band

Bupa, AXA PPP, Vitality, Aviva, WPA, Cigna — only the ones you actually hold provider agreements with, with the wording each insurer requires. CQC registration where applicable, professional indemnity copy where it matters.

The compliance the site has to pass

Eight UK clinic-marketing rules baked into the build.

The rules a UK clinic site has to follow. The constraint, what it means in practice, what we build in.

ASA / CAP code
Claims about results must be substantiated; before-and-after photos must be representative; "miracle" or "guaranteed" language is out; prescription-only medicines cannot be advertised to the public by name.
CAP-aware copy review, before/after gallery with consent and disclaimer scaffolding, no Botox/POM brand-name marketing on public pages.
GDC ethical advertising
Dental practices must show registered dentists with GDC numbers, no comparison with other practices that disparages, no testimonials that mislead.
GDC number on every clinician profile, structured "complaints procedure" page, testimonial guidance built into the £99 / mo edit flow.
GMC Good medical practice
Doctors’ pages must be factually accurate, qualifications verifiable, no impression of guaranteed outcomes.
GMC number, dual-qualification handling, plain-English specialty descriptions, no outcome-guaranteeing copy.
CQC registration (where applicable)
CQC-registered services must display the provider name and CQC ID on the website; certain pages link to the latest CQC report.
CQC ID and rating band in the footer credibility strip; a Care Quality page that links to the current CQC report.
UK GDPR + Data Protection Act
Patient data on intake forms is special-category data; needs lawful basis (usually explicit consent + healthcare task), encryption, retention policy, breach response.
Encrypted forms, named-recipient routing, per-form retention, no clinical data leaving the EU/UK without an adequacy decision.
PECR + cookie consent
Non-essential cookies (analytics, marketing pixels, embedded YouTube) require opt-in consent before they fire.
A consent banner that genuinely gates analytics and pixels — defaults to off, choice persisted, no "implied consent" anti-patterns.
MHRA on Botox / POM advertising
Prescription-only medicines (incl. botulinum toxin) cannot be promoted to the public by trade name. You can talk about treatments, not name-drop POMs.
Treatment pages framed by clinical outcome ("muscle-relaxing treatments") not POM brand; legal-team-friendly default copy.
Insurer logo terms
Bupa, AXA PPP, Vitality, Aviva and others all have specific guidance on logo usage, wording ("recognised", "approved", "work with") and which agreements they back.
We use the exact wording each insurer’s contract permits, never invent recognition, drop the logo if the agreement isn’t held.

None of this is a separate engagement. It’s the default shape of a UK clinic site. If your current agency bills compliance as a phase, that is the bill we are removing.

How it works

Brief on Monday. Live by the end of the week.

01

Brief

Half-hour call with the practice owner / principal. Treatments, clinicians, insurers, current PMS, any open CQC or ASA issues. One-page spec back the same day for the practice manager to sense-check.

02

Build

Design, copy, build, integration with your PMS, GDPR-aware forms, compliance review — across one working week. Staging URL by mid-week for a 15-minute clinical sign-off.

03

Run

£99 / month from launch. New treatment, new clinician, new insurer, fee uplift, CQC report refresh — email or WhatsApp it, we ship it. No hourly billing on edits.

Hundreds of unique website designs floating against a moonlit night sky — every one designed to its own brand, none templated.
Designed to spec

A million ways this could look. None of them templates.

Every site we build is designed to spec, branded for one client. No shared theme between brands. No component kit we recycle. Your site won’t look like anyone else’s because nobody else got your brief.

  • Designed to spec. Every page laid out fresh against your brief — not a pre-made template with your logo dropped in.
  • Branded to you. Typography, palette, motion language and component shape all chosen for this brand, not a previous client’s.
  • Yours forever. Code lives in a git repo that is yours from day one. No platform lock-in, no proprietary CMS, no exit fee.
FAQ

The practice manager’s questions.

Will the booking form plug into our actual practice-management system?

Yes. We integrate the site form with Cliniko, Dentally, Pabau, SystmOne, Practice Plan, Calendly Health, or whatever PMS / EHR you already run — via the vendor’s API where one exists, or via a webhook-to-staff queue where it doesn’t. The patient never sees a third party; the booking lands in your clinical diary the same way it would if reception had typed it. No double-keying, no shared inbox, no PDF forms emailed around.

What about GDPR and patient data on the intake form?

Forms with any clinical detail are designed for GDPR by default: encrypted in transit and at rest, routed to a named recipient inside your practice rather than a shared inbox, retention windows configurable per form, and a clear lawful-basis statement at the point of submission. We do not send any clinical detail through third-party analytics or marketing pixels. The cookie banner makes the patient’s real choice (analytics on/off) actually do something.

Can we list treatment prices on the page?

Yes, and on UK private practice pages we’d encourage it — "from £X" prices outperform "POA" by a wide margin and they’re what patients actually search for. The constraint is the ASA CAP code on misleading prices: published prices must be the real prices, all material conditions disclosed, no "treatments from £1" if a course is the only available option. We design the pricing table to be CAP-safe by default.

How are clinicians’ GDC / GMC / HCPC numbers handled?

Every clinician’s public profile carries their regulator (GDC for dentists, GMC for doctors, HCPC for allied health, NMC for nurses, GOC for opticians) and registration number, alongside qualifications, special interests, and a clean photograph. We render the number as plain text so it can be verified, and mark up the page with Person + MedicalSpecialty structured data so Google understands the profile is a regulated professional.

Can we display Bupa / AXA PPP / Vitality / Aviva logos?

Only if you actually hold a recognised-provider agreement with that insurer, and only in the wording each insurer allows. We use the phrasing "We work with" rather than "approved by" unless your agreement specifically uses the latter. Some insurers require their guidelines on logo size and placement; we follow them. If you don’t hold a provider agreement we drop the logo rather than fudge the wording.

What if I want to take the site somewhere else later?

You can, any time. The code lives in a git repository that is yours from day one. Cancel the £99 / month with one month’s notice and we hand over the codebase, any custom PMS integration credentials and deployment instructions; another developer can take over from there. No exit fee, no stranded patient data, no platform you cannot leave.

A clinic site that books patients and passes compliance.

Tell us about the practice, the treatments and the PMS you run on. If we’re a fit, we’ll come back inside 24 hours with a one-page spec.