Privacy and security
Healthcare practices hold some of the most sensitive information there is. We treat your website, and your patients’ privacy, with the same care. Here is exactly how, in plain English.
Not ready for a check? Ask us a question
Your website
Our forms never ask for symptoms, conditions or medical history, and we remind patients not to include them. Clinical conversations belong in your clinical systems, not in email.
We use cookieless analytics, so we can report on visits without tracking individual patients. There are no advertising pixels or third-party trackers unless you specifically ask for them, and if you do, we’ll explain the consent you’ll need first.
Your website’s files and database are stored on servers in the UK.
Every website sits behind Cloudflare, which filters malicious traffic, blocks known attacks and absorbs floods of requests before they reach your website. Cloudflare operates a global network, so visitor traffic may pass through its servers outside the UK; this is covered by appropriate data protection safeguards.
Two-factor sign-in for anyone with access, a minimal set of well-maintained plugins, security updates applied promptly, round-the-clock monitoring and off-site backups.
Built and tested to WCAG 2.2 AA, with an accessibility statement kept up to date.
Our commitments
As standard, before any work begins. It sets out what we do with any personal data on your website, and what we don’t, in line with UK GDPR.
Webicious Ltd is registered with the Information Commissioner’s Office.
We hold professional indemnity insurance.
Only the people who need access to your website have it, and every account uses two-factor sign-in.
We monitor every website around the clock, so we usually know about a problem before you do. If we ever find a security issue affecting your website, we’ll tell you promptly, explain what happened in plain English and help you meet any reporting duties.
We practise what we preach. This website uses no tracking cookies and no advertising trackers, which is why you didn’t see a cookie banner. Our forms ask only for what we need to reply to you. We never sell or share your details, and we won’t add you to a mailing list.
Send us your website address and we’ll email you a short, plain-English report: how it performs on a phone, how accessible and secure it is, and how easily patients and Google can find what matters. It’s free, there’s no obligation, and nobody will phone you.
We reply by email within two working days. Or ask us a question