Your website should be on obs, not left on the ward.
ClinicPress looks after the website and the email for private clinics, consultants and allied health practices across the UK. Updates applied, backups taken, attacks blocked — and a written report each month so you can see it happening.
What gets checked, and how often
Most practice websites are only looked at when something has already gone wrong. This is the list of things we do instead, on a schedule, whether or not anything is happening.
Traffic filtering
Every site sits behind Cloudflare, so bad traffic is turned away before it reaches the server. It also puts your pages on a global network, which is most of the speed difference on its own.
Server-side scanning
Imunify runs on the server and scans for malware and known attack patterns. If something is found, we deal with it and tell you what happened.
Backups
Files and database, taken daily and stored away from the server. Restores are part of your plan — we don’t charge you to put your own site back.
Managed updates
WordPress core, plugins and themes, applied by us rather than left to auto-update and break your booking form. We check the site afterwards and roll back if an update misbehaves.
Broken link checking
Dead links to referral forms, insurer pages and old consultant profiles get flagged so they can be fixed before a patient hits one.
A report you can actually read
What was updated, what was backed up, what was blocked. Plain English, one page. Optional search performance section if you connect your Google account.
Mailboxes, if you want them
Microsoft 365 Business Premium with backup, filtering and managed signatures, at £320 per mailbox a year. Your mailbox holds more patient data than your website does, and it usually gets far less attention. More on that here.
Vulnerability patching
Patchstack can be added to your site to shield known plugin vulnerabilities in the window between disclosure and the developer shipping a fix. Sensible for sites running booking or form plugins.
One plan. No tiers to decode.
Everything above is included at either price. The only difference is how you’d rather pay.
Set-up included free
- Managed WordPress hosting on UK servers
- Cloudflare on every site
- Daily off-server backups, free restores
- Managed core, plugin and theme updates
- Weekly broken link checking
- Monthly written report
- Free migration from your current host
- Support 9:00–17:30, Monday to Friday
Discounts available on two, three and five-year terms. Ask when you book the call.
Plus £75 one-off set-up
- Identical to the annual plan
- Rolling — no minimum term
- Paid by direct debit or card
Out-of-hours and weekend cover is available as a paid add-on if your site takes bookings around the clock.
The bits that aren’t really about hosting
Hosting doesn’t make you compliant. But a practice website has some specific exposures that a general web host has never had to think about, and we’d rather raise them than leave you to find out later.
Enquiry forms hold health data
The moment someone types a symptom into your contact form, you’re handling special category data under UK GDPR. Where those submissions are stored, how long they sit in the WordPress database, and who can see them all matter. We’ll show you what your site is currently keeping.
Cookie banners that don’t work
Under PECR, analytics and marketing tags need consent before they fire — not after. A lot of practice sites have a banner that looks right but loads the tags anyway. It’s a common finding and a straightforward fix.
Accessibility
Private practices aren’t caught by the public sector accessibility regulations, but the Equality Act duty to make reasonable adjustments still applies, and WCAG 2.2 AA is the standard everyone measures against. If you take NHS-funded work, expect it to be asked about.
A processor agreement, in writing
We’re a data processor for anything your site holds, so you get a written agreement setting out what we do with it. If your practice is completing a DSPT return, that’s one of the questions answered.
Moving over takes about a week
We do the work. You don’t need to speak to your current host, and the site doesn’t go offline while it happens.
We copy the site
A full copy goes onto our server and runs on a private address. Your live site keeps serving patients the whole time.
You check it over
You look at the copy, click through the booking form and the pages that matter, and tell us if anything’s off. We fix it before anything changes.
We switch the DNS
Done outside clinic hours. Visitors move across gradually and don’t notice. We watch it for the next 48 hours.
Straight answers
Do you do email as well?
Yes — but not on the web server. Practice email belongs in Microsoft 365, where it can be properly backed up, protected against phishing and administered when someone leaves. We set it up, migrate your existing mail across and look after it, at £320 per mailbox a year with backup, filtering and managed signatures included. Email on a shared web server is a decade out of date and it’s the first thing we ask incoming practices to move. More on the email side.
Do you build websites?
We host and maintain them. Most of our sites were built by web designers who don’t want to be woken up about a server, and we work alongside them happily. If you don’t have a designer, we can introduce you to one.
What happens if the site goes down at 8pm?
On the standard plan, we pick it up the next working morning. If your site takes bookings overnight or you’d simply rather not risk it, out-of-hours cover is a paid add-on — tell us and we’ll price it.
Can I still edit my own site?
Yes. It’s your WordPress and your login. We manage the platform underneath it, not your content.
What if we want to leave?
You get a full export of your site and database, and we’ll talk to your new host. No exit fee, no hostage-taking. It’s your site.
Is £400 per site or per practice?
Per site. If you run several — a main practice site plus separate consultant or clinic sites — say so on the call and we’ll do a proper number for the group.
Twenty minutes, no pitch
Tell us the domain. We’ll look at what’s running on it, what’s out of date, and where the data goes — then tell you whether moving is worth your while. If it isn’t, we’ll say so.