Every clinician named on your website must have their GDC number, their professional qualification, and the country it was awarded in shown alongside them, typically on the team or about page.

The GDC specifically requires the date your website was last updated to be displayed. It is one of the most commonly missed requirements and one of the easiest to fix.

The GDC requires that its contact details, or a direct link to the GDC website, are displayed on your practice website.

Your complaints process must be easy to find and must state who patients can escalate to if unsatisfied: the relevant NHS body for NHS treatment, and the Dental Complaints Service for private treatment.

Patients must be able to access your CQC profile directly from your website. A visible link in the footer is the simplest way to meet this requirement.

A clear, GDPR-compliant privacy policy explaining what data you collect, why, and how it is stored or shared with any third parties.

A cookie banner must appear on first visit with a genuine choice to accept, reject or manage cookies. Pre-ticked boxes are not permitted under UK GDPR.

GDC standards require that patients can access your pricing before they book. A fees page is part of informed consent, not just a nice-to-have.

Whether you are fully private, mixed or NHS must be immediately clear. A patient who arrives expecting NHS treatment and finds otherwise is a complaint waiting to happen.

Every form must include a consent checkbox linking to your privacy policy and must not ask for more than the enquiry requires. GDPR requires proportionate data collection.

GDPR requires appropriate technical measures to protect patient data. Without HTTPS, anything a patient submits through your contact form is transmitted unencrypted. The ICO would treat that as a failure in the event of a complaint or breach.

Your full practice name, geographic address, email address and phone number must all appear on the website and match your GDC registration details exactly.