Privacy and security

Privacy comes first

Healthcare practices hold some of the most sensitive information there is. We treat your website, and your patients’ privacy, with the same care. Here is exactly how, in plain English.

Not ready for a check? Ask us a question

Step 1 of 2

Get your free website check

Next: your name and email, so we can send the report. Please don't include any patient or clinical information.

Step 2 of 2

Where should we send your report?

Please don't include any patient or clinical information. We'll use your details only to send your report. Privacy notice

Your website

On your practice's website

No clinical information through web forms

Our forms never ask for symptoms, conditions or medical history, and we remind patients not to include them. Clinical conversations belong in your clinical systems, not in email.

No tracking cookies

We use cookieless analytics, so we can report on visits without tracking individual patients. There are no advertising pixels or third-party trackers unless you specifically ask for them, and if you do, we’ll explain the consent you’ll need first.

Hosted in the UK

Your website’s files and database are stored on servers in the UK.

Protected by Cloudflare

Every website sits behind Cloudflare, which filters malicious traffic, blocks known attacks and absorbs floods of requests before they reach your website. Cloudflare operates a global network, so visitor traffic may pass through its servers outside the UK; this is covered by appropriate data protection safeguards.

Hardened and kept up to date

Two-factor sign-in for anyone with access, a minimal set of well-maintained plugins, security updates applied promptly, round-the-clock monitoring and off-site backups.

Accessible to everyone

Built and tested to WCAG 2.2 AA, with an accessibility statement kept up to date.

Our commitments

Between your practice and us

A signed data processing agreement

As standard, before any work begins. It sets out what we do with any personal data on your website, and what we don’t, in line with UK GDPR.

Registered with the ICO

Webicious Ltd is registered with the Information Commissioner’s Office.

Insured

We hold professional indemnity insurance.

Access kept to a minimum

Only the people who need access to your website have it, and every account uses two-factor sign-in.

If something goes wrong

We monitor every website around the clock, so we usually know about a problem before you do. If we ever find a security issue affecting your website, we’ll tell you promptly, explain what happened in plain English and help you meet any reporting duties.

On this website

We practise what we preach. This website uses no tracking cookies and no advertising trackers, which is why you didn’t see a cookie banner. Our forms ask only for what we need to reply to you. We never sell or share your details, and we won’t add you to a mailing list.

See how your website measures up

Send us your website address and we’ll email you a short, plain-English report: how it performs on a phone, how accessible and secure it is, and how easily patients and Google can find what matters. It’s free, there’s no obligation, and nobody will phone you.

We reply by email within two working days. Or ask us a question