Healthcare Website Marketing in Australia: Getting Patient Bookings Within Ahpra's Advertising Rules

If you run a GP clinic, dental practice, physio or psychology practice in Australia, you have probably absorbed two pieces of advice that seem to cancel each other out. The first is that your website should be winning you patients. The second is that health advertising is regulated, so be careful. Both are true, and the space between them is bigger than most clinics think. Australia had 959,838 registered health practitioners at 30 June 2025, and the same advertising rules sit over nearly every one of their websites.

This guide covers what the law actually bans, the three kinds of patient reviews and which ones you can use, and how to build a website that fills the appointment book inside the rules. It is general information, not legal advice. For a specific advertisement, get independent advice. Ahpra itself cannot advise on or pre-approve your advertising and points advertisers to their professional association, an independent legal adviser or their indemnity insurer.

What Section 133 Actually Bans (and What It Does Not)

The rules are narrower than the fear around them. Under section 133(1) of the Health Practitioner Regulation National Law, a person must not advertise a regulated health service, or a business that provides one, in a way that:

• is false, misleading or deceptive, or is likely to be
• offers a gift, discount or other inducement without stating the terms and conditions of the offer
• uses testimonials or purported testimonials about the service or business
• creates an unreasonable expectation of beneficial treatment
• directly or indirectly encourages the indiscriminate or unnecessary use of regulated health services

The testimonial ban is limb (c), one item in a five-part list. Nothing in the section bans advertising itself, and Ahpra’s own statement of the law confirms the same five prohibitions. The detailed interpretation lives in the Guidelines for advertising a regulated health service, developed by the National Boards under section 39 of the National Law and in effect since 14 December 2020.

The penalties are real. The maximum per offence is $60,000 for an individual and $120,000 for a body corporate, figures set by a 2022 amendment to the National Law that, according to Ahpra, applied in all jurisdictions from July 2024. A related offence, unlawful use of a protected title, can also carry imprisonment for an individual.

Enforcement, though, is mostly correction-first. Ahpra states that lower and medium risk matters are generally handled administratively and closed once the advertising is corrected, while high-risk matters can be investigated, prosecuted or lead to conditions on a practitioner’s registration. The 2024/25 annual report records 474 criminal offence complaints received, with 107 new complaints about advertising considered, mostly involving corporate entities or unregistered persons. The regulator’s stated approach is educative where it can be and prosecutorial where it must be.

One more definition matters before the detail: the advertiser is whoever controls the advertising. That includes you when your staff or your marketing agency publishes on your behalf. If your agency posts it, it is your advertising.

The Three Kinds of Patient Reviews

Every patient review you will ever deal with sorts into one of three buckets, and each bucket has its own rule. The two sorting questions are: does the review mention a clinical aspect of your service, and does it appear in advertising you control?

Ahpra’s testimonial guidance defines a testimonial as a recommendation or positive statement about the clinical aspects of a regulated health service used in advertising. A clinical aspect exists when a comment expresses a symptom, a diagnosis or treatment, an outcome, or the skills and experience of the practitioner.

Bucket 1: Clinical testimonials in your advertising. Banned.

A patient quote about their recovery on your homepage, a video success story, a screenshot of a five-star Google review in your Instagram post, a widget pulling reviews onto your services page: all of these are testimonials used in advertising if they touch symptoms, treatment, outcomes or your skill. The ban attaches to the content, not the format, so “it’s just a screenshot” is not a defence.

Bucket 2: Non-clinical comments. Usable, with conditions.

Comments about customer service or communication style that contain no reference to clinical aspects are not testimonials under the National Law. “The receptionist was lovely and I got an appointment the same day” is a different species from “the physio fixed my back in two sessions.” You can use the first kind in your advertising, but only complete and unedited. Ahpra warns that selectively editing reviews, trimming a mixed review down to its positive sentence, for example, can itself be false, misleading or deceptive advertising.

Bucket 3: Reviews on third-party platforms. Leave them where they sit.

Reviews that patients post independently on Google, review platforms or forums are not your advertising. The prohibition does not stop patients sharing their views, and Ahpra does not hold you responsible for removing reviews on platforms you do not control. The exposure appears when you pick the review up: republishing it makes it your advertising, and even engaging with it, such as replying in a way that endorses the clinical claim, can be treated as using a testimonial.

This table is a compressed version of the worked examples in Ahpra’s testimonial guidance. When a real case does not fit neatly, that guidance, and independent advice, is where to go next.

What You Can Say: The Compliant Marketing Toolkit

The positive test comes from Ahpra’s own FAQ: sell your professional services on their merits, and be honest about what you do and say. In practice that allows a website far more persuasive than most clinics realise.

• Services and conditions. Factual descriptions of what you treat and how are fine. If you list conditions, make clear how the treatment helps and keep claims supportable by acceptable evidence. Ahpra’s requirements summary treats unsupported treatment claims as potentially misleading.
• Fees. Pricing is allowed and encouraged to be clear: accurate, honest and showing the total price, not just the initial consultation. Discounts and other inducements are permitted only if the terms and conditions are stated, clear and easy to find.
• Practitioner bios. Accurate, factual details about qualifications and experience are expressly acceptable. Ahpra’s own examples of acceptable content include “Master of Public Health” and “10 years’ experience working at clinic XY.”
• Titles. Use only protected titles you hold. “Dr” is not a protected title, but a non-medical practitioner using it should state their profession, as in “Dr Lee (osteopath).” Do not write “specialises in” without specialist registration, and note that “surgeon” is now restricted in most states to medical practitioners holding specialist registration in surgery, obstetrics and gynaecology, or ophthalmology, with the change still pending state legislation in NSW, SA and WA.

The traps on the other side are mostly about pressure and implication: superlatives you cannot evidence, urgency phrases like “don’t delay” tied to health fears, encouraging treatment with no clinical need, and before-and-after imagery that implies a typical outcome. None of these is necessary to fill a book.

A Clinic Website That Converts Inside the Rules

Here is the useful reframe: nothing section 133 bans was ever load-bearing for conversion. A clinic website wins bookings through trust and friction removal, not through patient stories. Before changing anything, work out which problem you have. If patients cannot find you, that is a visibility problem. If they find you and do not book, that is a conversion problem. The fixes are different, and compliance work alone solves neither.

The pages that do the converting, all fully compliant:

• Service and condition pages that answer the question the patient actually typed, written to the evidence standard above. “Physiotherapy for shoulder pain in Norwood: what a first appointment involves” converts better than any testimonial and breaches nothing.
• A fees page with total prices. The compliance requirement doubles as conversion: fee transparency removes the phone-call barrier that stops after-hours researchers.
• Practitioner bios with real qualifications. Registration details, qualifications and experience are exactly what cautious patients check, and Ahpra expressly allows them.
• Online booking that works on a phone. ACMA research published in February 2026 found 97% of Australian adults accessed the internet via mobile phone during 2025. If booking requires a phone call during office hours, you are invisible to the person researching at 9pm.
• Location, parking, accessibility, languages spoken. These are the non-clinical details patients genuinely filter on, and they sit squarely in bucket two territory.

For visibility, the Google Business Profile does most of the local work: accurate categories, hours and services, with reviews accumulating on the profile where they belong. Our guide to local SEO in Adelaide covers the suburb-level detail. If the site itself needs rebuilding, the features that actually affect conversion are set out in our small business web design guide, and affordable web design pricing for Adelaide gives realistic budget ranges. Once the site converts, the question of where to put the next dollar, SEO, Google Ads or AI search, is covered in our channel strategy guide.

Handling Patient Reviews Without Breaching

Reviews still matter; patients read them on Google before they ever reach your site. The compliant approach is to let them happen and manage your own behaviour around them.

• Asking. Nothing in the National Law stops patients reviewing you. If you invite reviews, invite all patients equally and frame the ask around the service experience, such as the front desk, booking and communication. That balanced approach matches how the Australian Consumer Law treats solicited testimonials. Never ask patients to share treatment stories.
• Responding. You can respond. Keep it to acknowledgment and thanks, and never endorse or discuss their treatment in a way that adopts the clinical claim, which can be treated as using a testimonial. Privacy and confidentiality obligations are a separate reason to avoid confirming that a particular person is your patient; take any real conversation offline.
• Your own pages. Reviews on your clinic’s Facebook page are advertising you control. Moderate them, or disable the reviews function where the platform allows it.
• Widgets. A reviews widget that pulls Google reviews onto your homepage republishes them into your advertising. That includes the ones about clinical outcomes. The safest option is to remove the widget entirely.

The Traps That Catch Real Clinic Websites

Most breaches are not deliberate. They are defaults. The patterns that recur:

• The theme’s testimonial carousel, installed with the website template and populated years ago, still on the homepage.
• ”Patient stories” blog posts, which are advertising when they promote your service.
• Screenshots of five-star Google reviews posted to the clinic’s social accounts by a well-meaning staff member.
• An agency that “handles reviews” by republishing them. The control test makes that your advertising.
• Cosmetic-adjacent services. If you advertise cosmetic injectables or similar services, separate and stricter rules apply: new guidelines for advertising higher-risk non-surgical cosmetic procedures took effect on 2 September 2025, alongside the Medical Board’s cosmetic surgery advertising guidelines. See Ahpra’s cosmetic procedure advertising guidelines before marketing those services.
• Legacy content. A 2019 blog post containing a testimonial is advertising today. Compliance has no grandfather clause.

Frequently Asked Questions

Can I put Google reviews on my clinic website?

Not if they mention clinical aspects of your service. A review sitting on Google is the patient’s own speech on a platform you do not control. The moment you copy, embed, screenshot or widget it onto your website it becomes your advertising, and the section 133(1)(c) ban applies to it. Reviews with no clinical content, about service or communication only, may be used, but only complete and unedited.

Do I have to remove reviews patients leave on Google or Facebook?

Two different cases. On Google and other platforms you do not control, no: Ahpra does not hold advertisers responsible for removing reviews there. On your clinic’s own Facebook page, yes: that page is advertising you control, so clinical testimonials on it are your responsibility. Moderate them off, or disable the page’s reviews function.

Can I respond to patient reviews?

Yes, with care. Thank the reviewer and keep the reply general, and do not endorse any clinical claim in the review, because adopting the claim can be treated as using a testimonial in advertising. Ahpra warns that engaging with reviews on third-party sites can amount to using a testimonial. Privacy and confidentiality obligations are a separate reason not to confirm that a particular person is your patient. When a review needs a real conversation, take it offline.

Are before-and-after photos allowed?

They sit in the highest-risk zone of the rules. Images can breach the National Law if they create an unreasonable expectation of beneficial treatment, if it is not clear the advertised treatment caused the benefit shown, or if the images are edited. For cosmetic services, separate stricter advertising guidelines apply, with the newest set for higher-risk non-surgical cosmetic procedures taking effect on 2 September 2025. Get specific advice before publishing this kind of imagery.

What happens if my current advertising already breaches the rules?

Correct it promptly. Ahpra says lower and medium risk matters are generally handled administratively and closed once the advertising is fixed, while high-risk matters can be investigated, prosecuted or lead to conditions on registration. For anything beyond an obvious cleanup, get advice from your professional association, an independent legal adviser or your indemnity insurer, which is the same route Ahpra itself recommends.

Where To Start This Week

Start with an inventory, not a rebuild. List every surface you control: website pages, the clinic Facebook page, Instagram, Google Ads, printed material, email newsletters. Remove or disable clinical testimonials on all of them, and drop any reviews widget. Then bring the factual pages up to standard: fees with total prices, bios with real qualifications, condition pages written to the evidence rule.

Only after that does marketing spend make sense: mobile booking, local search visibility, and the channels that fit your budget. The compliant version of clinic marketing is not a weakened version. It is the version built on what patients actually choose with.

Need a secure, patient-focused digital presence? Learn more about our custom website development services designed for healthcare practices.