Skip to content
Contact Us
AI · Accounting
Caelum AI — Document Processing

99% · Extraction accuracy

→
Flagship · GovTech
India Post — grievance system

Pan-India, awarded via GeM (Nov 2025).

Read →
Flagship · GovTech
India Post — grievance system

Pan-India, awarded via GeM (Nov 2025).

Read →
Global delivery
India · Belgium · UK

Three offices, three time zones.

→

Website Development for Doctors: Features, Rules and Cost Drivers

A doctor's website should help patients find you, check your services and timings, book an appointment and, if you offer it, consult remotely. In India the content is shaped by NMC advertising rules and the Telemedicine Practice Guidelines, which require your registration number on the site, while the patient data you collect falls under the DPDP Act.

A person holding a tablet that shows a clinic website with a doctor in a white coat and stethoscope at a laptop and two smaller staff photos

Key takeaways

  • Keep the site informational: the NMC's 2002 regulations bar boasting of cases or cures, and the 2023 replacement regulations are in abeyance, so the 2002 text is still the reference.
  • Build the Telemedicine Practice Guidelines into the booking flow: registration number on the site, an identity check, an adult for minors, a consent record and a receipt for each consultation.
  • Keep medical detail out of URLs, analytics events and reminder messages, and write a breach plan: the DPDP Rules expect a detailed report to the Data Protection Board within 72 hours.
On this page

A clinic's website is its online front door, but in India its content is also bound by professional rules that an ordinary business website does not face. This guide covers the features that matter, what NMC regulations and the Telemedicine Practice Guidelines mean for the content, how patient data is treated under the DPDP Act, and what drives cost.

It is written for solo doctors, clinics and small hospitals in India, and the rules are summarised as of October 2026. It is not legal or medical advice; confirm details with your State Medical Council or counsel. For mobile apps, HIPAA, GDPR and ABDM integration, see our healthcare app development guide.

Why Every Doctor Needs a Website

Many patients look up a doctor or clinic online before they call or visit. A site you control gives them accurate details in one place and gives you three practical benefits:

  • Information outside clinic hours. Timings, location, services and how to book are available at any hour, which cuts routine phone calls.
  • A page for search engines and maps to point to. Your Google Business Profile, directory listings and referrals all need somewhere to link.
  • Control of your own record. A listing on a third-party marketplace is shaped by that platform; your own site is where your details are complete and current.

Essential Features of a Doctor's Website

Feature What it does Build notes
Doctor and service pages Show qualifications, registration number, specialties, services, timings and fees One page per doctor and per service; content reviewed against the rules below
Appointment booking Lets patients pick a slot and cancel or reschedule Prevent double booking; reminders by SMS, WhatsApp or email with no diagnosis in the message
Contact, map and timings Gets patients to the right place and number Click-to-call, map link, and holiday timings staff can edit
Teleconsultation Video, audio or chat consultation Identity check, consent record, receipt and record keeping (see below)
Patient forms and uploads Pre-visit forms and report upload Consent notice, only the fields you need, encrypted storage, access logs
Payments Consultation fees or advance booking Payment gateway, receipts, refund policy
Health information pages Articles and FAQs on conditions and procedures Written or checked by the doctor, factual, dated
Speed, mobile and accessibility Works on a phone and for older patients Core Web Vitals targets and WCAG 2.2

What a Doctor's Website May Say

The Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002 are the reference text. Regulation 6.1.1 calls soliciting of patients, directly or indirectly, unethical. It bars a physician from advertising or publicity of a character that invites attention to their professional position, skill, qualifications, achievements, attainments, specialities, appointments, associations, affiliations or honours, or that would result in self-aggrandisement. It also bars boasting of cases, operations, cures or remedies and endorsing drugs or commercial products using the physician's name or photograph. Regulation 6.1.2 treats a self photograph or publicity material on a letterhead or consulting-room signboard as self-advertisement. The regulation does permit announcements in the press on starting practice, a change of type of practice, a change of address, temporary absence, resuming or succeeding to a practice, and a public declaration of charges.

The NMC notified new professional conduct regulations on 2 August 2023 and, by an amendment of 23 August 2023, kept them in abeyance, and its regulations page lists no later replacement. The 2002 text is therefore still the reference as of October 2026, but check for newer NMC notifications before you publish.

Our reading of what this means for a website, which you should confirm with your State Medical Council:

  • Safe to publish: your name, registered qualifications, registration number and council, specialties, services, address, timings, contact details and fees, in plain language.
  • Risky: superlatives, success rates, case results, before-and-after images, endorsements, awards presented as promotion, and review widgets that put praise on your pages.
  • Process matters: whoever edits the CMS can add promotional copy by accident, so give the doctor a review step before pages go live.

The doctor, not the developer, carries the professional responsibility for content. A good build makes review easy rather than claiming to guarantee compliance.

Teleconsultation on Your Website

The Telemedicine Practice Guidelines of 25 March 2020 (Appendix 5 to the 2002 regulations) set out several points that a website or booking flow has to support:

  • Registration number. Section 3.2.5 says every registered medical practitioner shall display their State Medical Council or MCI registration number on prescriptions, the website, electronic communication such as WhatsApp or email, and receipts.
  • Identity. A consultation should not be anonymous. The doctor should confirm the patient's identity and there should be a way for the patient to verify the doctor's credentials and contact details.
  • Minors. To issue a prescription, the doctor must ask the patient's age, and a minor may consult by teleconsultation only together with an adult whose identity is established.
  • Consent. Consent is implied when the patient initiates the consultation and must be explicit when the doctor, a health worker or a caregiver initiates it. The doctor must record explicit consent in the patient's records.
  • Records and receipts. The doctor keeps logs of the interaction and the patient records, and gives a receipt or invoice for the fee.
  • No solicitation. Section 3.7.1.4 lists soliciting patients for telemedicine through advertisements or inducements as not permitted.

If your site lists several doctors, section 5 adds duties for platforms that work across a network of practitioners: verify each doctor's registration and show their name, qualification, registration number and contact details.

Patient Data and the DPDP Act

Patient details are personal data under the Digital Personal Data Protection Act, 2023. The Act has no separate "sensitive" category, so health details get the same legal duties as any other personal data, and they deserve more care than that. The 2025 Rules require:

  • A clear notice with an itemised description of the data and the purpose, and how to withdraw consent and complain (Rule 3).
  • Reasonable security safeguards, including encryption, obfuscation, masking or tokens, access control, logs and monitoring, backups, and keeping logs for one year (Rule 6).
  • Breach notice to each affected person and to the Data Protection Board, with a detailed report within 72 hours (Rule 7).

As notified, these rules apply 18 months after the 13 November 2025 publication date, which is May 2027; confirm the dates in force when you plan. Clinical establishments, mental health establishments and healthcare professionals are exempt from the parental-consent and tracking restrictions for children's data only to the extent necessary to provide health services to the child.

In the build, that means a consent notice beside every form, collecting only needed fields, keeping medical detail out of URLs, analytics events and reminder messages, and a written breach plan.

Local Search for a Clinic

  • Google Business Profile. Google says an individual practitioner should have their own profile if they work in a public-facing role and can be contacted directly at the verified location during stated hours. Where several practitioners work at one location, the organisation has a separate profile. A practitioner's profile title should include only their name; credentials such as Dr. or MD are allowed and extra keywords are not.
  • Structured data. Google asks for the most specific LocalBusiness subtype, with name and address required. Schema.org's Physician type sits under LocalBusiness and carries properties such as medical specialty and hospital affiliation. Google does not guarantee that markup produces any search feature.
  • Speed. Google's Core Web Vitals targets, measured at the 75th percentile of page loads, are Largest Contentful Paint within 2.5 seconds, Interaction to Next Paint of 200 milliseconds or less, and Cumulative Layout Shift of 0.1 or less. Test on a mid-range phone.

Our SEO service covers the technical side; the content still has to respect the NMC rules above.

How a Doctor's Website Build Runs

  1. Define the practice: doctors, locations, services, languages and whether you offer teleconsultation.
  2. Plan content and approvals: what goes on each page and who signs it off.
  3. Design: UI/UX design for phone-first use, large tap targets and readable text.
  4. Build and integrate: booking, forms, payments, reminders and any clinic software connection.
  5. Test: devices, keyboard and screen-reader access, speed and the booking flow end to end.
  6. Launch and maintain: Business Profile, analytics without health data, backups, monitoring and regular content reviews.

Cost of Website Development for Doctors

A basic information site costs less than one with booking, payments and video, and no honest price can be given without scope. The main drivers:

  • Number of doctors, locations and languages
  • Built-in booking versus connecting to existing clinic software
  • Teleconsultation: embedding an existing tool versus building one
  • Payments and receipts
  • Content volume, photography and editing
  • Integrations with a hospital or clinic system, labs or messaging
  • Hosting, security testing, logging and backups
  • Ongoing updates and support

Risks and Trade-offs

  • Third-party widgets. A hosted booking tool launches quickly, but patient data then sits with that vendor. Read its terms and ask where data is stored.
  • Chat and analytics scripts can send health details to outside services. Review each one before it reaches a booking or form page.
  • Over-building. A small clinic may not need its own video system if an existing tool meets the guidelines.
  • Content drift. Promotional copy creeps in over time; schedule reviews.

Choosing a Developer

  • Can they show booking, forms and logged-in areas they have built, not only brochure pages?
  • Will they explain where patient data is stored, who can access it and how long logs are kept?
  • Will the contract include security terms as a data processor?
  • Do they build a content review step into the CMS?
  • Will you receive source code, documentation and hosting accounts?

How Mindrops Works on Doctors' Websites

Mindrops builds clinic and doctor websites through its website development service, with UI/UX design and SEO. Where a practice needs patient portals or telehealth web apps, we build them as custom web applications and can test security with VAPT. The healthcare industry page has more. The client owns the source code and accounts, with documentation and knowledge transfer included. We do not certify medical-advertising compliance; that remains the doctor's responsibility, and we build the review step to support it.

Conclusion

A doctor's website works when it is accurate, easy to use on a phone, careful with patient data and restrained in what it says about the practitioner. To discuss a clinic or practice website, get a quote and we will respond as quickly as possible.

Frequently asked questions

Can I put patient testimonials or before-and-after photos on my clinic website?
Treat them as high risk. Regulation 6.1.1 says a physician shall not boast of cases, operations, cures or remedies or permit their publication through any mode, and shall not use publicity that draws attention to skill or achievements. Before-and-after images and case results fall within that wording. Ask your State Medical Council before publishing anything of this kind.
Can a chatbot on my website answer patients' symptom questions?
The Telemedicine Practice Guidelines say technology platforms based on artificial intelligence or machine learning are not allowed to counsel patients or prescribe medicines; only a registered medical practitioner may. A chatbot can share timings, fees and how to book, and should direct anyone with symptoms to book a consultation or seek emergency care.
Who owns the patient data collected on the website, the clinic or the developer?
Under the DPDP Act, the party that decides why and how personal data is processed is the Data Fiduciary, which in this case is the clinic. A developer or host that handles the data on the clinic's behalf is a Data Processor. Rule 6 expects the contract between them to include reasonable security safeguards, so agree storage, access, logging and deletion terms in writing.
Can the website connect to the software our clinic already uses?
Sometimes. It depends on whether the clinic or hospital software offers an API and on that vendor's terms for third-party access. Ask the vendor before scoping; if there is no API, the website can still take bookings and forms and pass them on by email or a shared dashboard, with staff entering them into the main system.

Talk to our team

Get a quick view of the approach, timeline and cost for your idea.

We'll get back to you as quickly as possible.

About the author

Gitika SethiHead of Delivery at Mindrops

Gitika leads delivery at Mindrops, steering projects from concept to completion and leading multidisciplinary teams with a focus on quality, timelines and budget.

Talk to Mindrops

Planning a new website or a rebuild?

Tell us what the site has to do and who it is for. We reply as quickly as possible.

Prefer to talk? Call +91 95555 75231 or see all contact options.

Captcha image

We use these details only to reply to you. See our privacy policy.

We use essential cookies to run this site. Analytics and marketing cookies are optional.