Websites for clinics and hospitals: pages, privacy and cost
What a clinic or hospital website needs: doctor profiles, appointment booking, health-data privacy under India's DPDP Act and HIPAA, and 2026 costs.
By Sohail Hussain13 November 20266 min read
A clinic or hospital website must let a patient find the right doctor, check timings, book or call, and get directions, quickly and on a phone. It must also handle health data carefully, because appointment forms and report downloads carry some of the most sensitive personal information there is. A single clinic needs 5 to 10 pages; a multi-specialty hospital needs department pages, a doctor directory and an appointment flow. As of October 2026, a small clinic site costs ₹60,000 to ₹2,50,000 from a small Indian studio or US$3,000 to US$10,000 elsewhere, and a hospital site with a doctor directory and booking integration is usually ₹3 lakh to ₹8 lakh or US$10,000 to US$30,000.
What are patients trying to do on a hospital website?
Most visits are short and practical. Patients, and the relatives booking for them, come to do one of these:
- Find a doctor for a specialty, and check their qualifications and OPD days.
- Book, reschedule or confirm an appointment.
- Call the hospital, and in an emergency, call the emergency line.
- Get directions, parking information and visiting hours.
- Check whether their insurer or TPA is accepted.
- Look up the price of a health check package.
- Download a lab report.
Put the emergency number and a click-to-call button at the top of every page on mobile. Put "Find a doctor" and "Book an appointment" in the first screen of the homepage. Everything else is secondary. The method for working out these top tasks before design is in our guide on how to plan a website.
Which pages does a clinic or hospital website need?
| Page | Clinic | Hospital | Notes |
|---|---|---|---|
| Home | Yes | Yes | Emergency number, find a doctor, book, location |
| Specialties or departments | One page | One page each | Conditions treated, procedures, doctors in the department |
| Doctor profiles | Yes | Yes, with filters | Qualifications, registration number, specialties, languages, OPD schedule |
| Book an appointment | Form or widget | Integrated with scheduling | See the features section below |
| Health check packages | If offered | Yes | Prices and what each package includes |
| Insurance and TPA | Optional | Yes | Accepted insurers, cashless process |
| Patient information | Short | Yes | Visiting hours, admission, billing, what to bring |
| International patients | No | If relevant | Visa letters, interpreters, estimates |
| Locations | One | One page per branch | Address, map, timings, phone |
| Careers | Optional | Yes | Nurses and technicians search for this |
| Privacy, terms, refund policy | Yes | Yes | Refund policy is needed for online payments |
Doctor profiles are the most-visited pages on most hospital sites. Show the doctor's qualifications and medical council registration number, as you would in the clinic, along with the days they see patients. A profile with a photo, real qualifications and a schedule does more for trust than any homepage banner.
On a hospital or clinic website, drive the doctor directory and the department pages from the same content model: add a doctor once, assign them to departments and locations, and every page that should list them updates itself. Without that, the site drifts out of date within months.
What can you claim, and what should stay off the site?
Healthcare advertising is regulated more tightly than most sectors. In India, three sets of rules are relevant.
Professional conduct for doctors. The National Medical Commission notified new professional conduct regulations in August 2023 and put them in abeyance the same month, falling back on the Indian Medical Council's 2002 regulations as an interim measure. The 2002 regulations treat soliciting patients, directly or indirectly, as unethical. Check the current position on the National Medical Commission's website with your legal team, because it decides how doctor profiles can be written.
Misleading advertising. The Consumer Protection Act, 2019 and the Central Consumer Protection Authority's 2022 guidelines on misleading advertisements apply to hospitals as businesses. Separately, the Drugs and Magic Remedies (Objectionable Advertisements) Act, 1954 bars advertisements claiming that a drug or remedy treats the diseases it lists.
In practice, leave these off: guaranteed outcomes, success rates you cannot substantiate, "best" or "number one" claims, before-and-after photos without written consent, and patient stories that imply a cure. Keep patient stories about the experience of care, with consent on file.
This is general guidance, not legal advice. Have a lawyer who works with healthcare providers review the claims on your site before launch.
How should a healthcare website handle patient data?
The safest data is data you never collect. Most problems come from forms that ask for too much and from tracking scripts that send what patients do to third parties.
Keep forms short. An appointment request needs a name, a phone number, the doctor or department and a preferred date. It does not need symptoms, medical history or an ID number. If clinical details are needed, collect them at the hospital.
Do not email reports. Link to the lab or hospital information system's own patient portal, behind a login, rather than attaching reports to emails or hosting them as public files.
Keep advertising and analytics tags off sensitive pages. Do not load marketing pixels on booking pages, patient portals or pages that capture health details. Use a cookie consent banner that blocks analytics until the visitor agrees.
The law depends on where your patients are:
| Where | Law | What it means for the site |
|---|---|---|
| India | Digital Personal Data Protection Act, 2023 | Health data is personal data. The DPDP Rules were notified in November 2025, with most obligations (notice, consent, security, breach reporting) phased in over 18 months. See MeitY's data protection page. |
| United States | HIPAA | Tracking technologies on authenticated pages, such as patient portals, can disclose protected health information. A 2024 court ruling vacated part of the HHS guidance on online tracking, but the rest stands. |
| UAE | Federal Law No. 2 of 2019 on ICT in health fields | Restricts storing and processing health data outside the UAE, with limited exceptions. Check where your form tool and CRM store submissions. |
Each of these needs a lawyer's reading for your specific setup, particularly if you serve patients from more than one country.
Which features are worth building, and which are not?
| Feature | Worth it when | Skip it when |
|---|---|---|
| Online booking integrated with your scheduling system | Your HIS or scheduling tool has an API or widget | It would mean a second calendar kept in sync by hand |
| Appointment request form with callback | Small clinics, or no integration available | Never; every site needs a fallback |
| Doctor directory with filters | More than about 15 doctors | A clinic with three doctors |
| Online payment for packages or teleconsultations | You sell fixed-price services | Everything is billed at the hospital |
| Report download | Linking to your lab system's patient portal | Building your own report storage |
| Regional language or Arabic version | Many patients prefer it, or you serve medical travellers from the Gulf | Nobody on staff can answer in that language |
| AI chatbot | Answering timings and directions, with a hard rule against medical advice | Triage or symptom checking |
Local search matters more than almost any feature. Each branch should have its own page with address, timings and phone number, a matching Google Business Profile, and structured data. Our local business schema generator produces the markup for each location.
What does a clinic or hospital website cost?
Small-studio ranges as of October 2026, excluding GST. They follow our website cost guide and the India price guide.
| Site | India | Elsewhere |
|---|---|---|
| Single clinic, 5 to 10 pages, request form, map, schema | ₹60,000 to ₹2,50,000 | US$3,000 to US$10,000 |
| Multi-specialty hospital, 20 to 60 pages, doctor directory, CMS | ₹3,00,000 to ₹8,00,000 | US$10,000 to US$30,000 |
| Hospital group, several branches, booking integration, two languages | ₹8,00,000 and up | US$30,000 and up |
Integration with a hospital information system is the item most likely to move the price, and it cannot be quoted until the developer has seen the system's API documentation. Ask for it to be quoted separately from the website.
Before you brief anyone, list your departments, doctors and branches in a spreadsheet with the fields above. That list is the content model, and it is the first thing a developer will ask for.
Was this guide useful?