A client books an initial session on a Tuesday evening. The confirmation lands in an inbox their partner also reads. The calendar invitation appears on a phone that syncs to a shared family account. The payment shows on a joint statement with the practice name on it.
None of that is a data breach. All of it can end the booking.
Discretion in a counselling practice is usually thought of as something that happens in the room. A good deal of it is decided by a website, weeks earlier, by somebody choosing default settings.
What should a booking form actually ask for?
The instinct when building a booking form is to collect everything you will eventually need. Resist it. The form is not the intake, it is the doorway.
What you need to offer an appointment is a name, a way to reach them, and which session they want. Date of birth, address, GP details and presenting problem are intake questions. They belong in the first session or in a form sent afterwards, not in front of somebody who has not decided yet.
Every extra field is a reason to stop, and in this field the reasons are heavier than usual. Somebody who is not ready to type what is wrong with them into a web form is not necessarily unready for therapy.
- A first name is enough to hold an appointment. Full names can be taken later.
- Offer a phone number as optional, not required. Some clients will not give one, and making it mandatory loses them rather than getting it.
- Do not ask what they want to talk about. It is not needed to reserve an hour, and it is the single most common reason a counselling booking form is abandoned.
Who else sees your confirmation emails?
This is the part most practices never think about, and it is the one clients notice.
Your confirmation email has a subject line, a sender name and a body. By default, all three will say what you are. "Appointment confirmed with Oakwood Counselling, Thursday 6pm" is a sentence that will be read by whoever else opens that inbox.
Decide deliberately what those say. Many practices use the practitioner's own name rather than the practice name, and keep the word counselling out of the subject line. The client knows what they booked. The email does not need to announce it.
The same applies to anything you send afterwards: reminders, rescheduling links, payment receipts. If one of them is discreet and the other is not, the discreet one does no work.
Say what happens to an enquiry
Somebody about to type into your contact form is wondering who reads it. Most clinic websites leave them guessing.
A short line under the form does more for conversion than anything else on the page: who sees the message, how quickly they reply, and that it is not stored anywhere beyond what is needed to reply. Two sentences. Plainly written, not a link to a privacy policy nobody opens.
This is one of the few places where saying the quiet part out loud is also the commercially better choice. People who are weighing up whether to make contact need a reason to believe the contact is safe.
Should a booking diary hold clinical notes?
Worth stating plainly, because the line gets blurred when a booking system starts to feel like a practice management system.
A website with an appointment diary holds appointments. It should not hold case notes, assessments, risk information or anything a clinician would record. Those belong in whatever system you use for records, with the access controls and retention rules that come with it.
The temptation is usually small and practical: a notes field on the booking, used to remember something about the client. It is the wrong place, it will not be covered by your records policy, and it tends to be visible to anyone with access to the diary. Keep the diary to times and names.
What a clinic website must never publish about patients goes further into where this line sits.
Can a counselling practice use testimonials?
Every website template has a testimonials section and every marketing guide recommends filling it. In counselling, a testimonial is a client identifying themselves as a client.
Most professional bodies take a dim view of soliciting them, and with good reason. Even an anonymised quote carries risk when the practice is small and the town is smaller.
Build the trust differently. Your training, your accreditations, how long you have practised, what a first session is like, what you charge, and what happens if someone decides you are not the right fit. That is what a prospective client is actually weighing, and none of it requires anybody else to go on record.
The practical shape
A counselling practice website that respects privacy is not a locked-down one. It is usually simpler than average: clear about who you are and what a session costs, quiet about everything else, and asking for the minimum it needs to put an hour in the diary.
If you are setting one up, the clinic and practice templates start from this shape rather than from a marketing site with a booking button bolted on.
FAQ
Should the practice name appear on a bank statement?
It will unless you have arranged otherwise with your payment provider, and for some clients that matters a great deal. Many practitioners trade under a name that does not describe the service. It is worth knowing what yours shows before a client discovers it for you.
Can somebody book without creating an account?
They should be able to. An account is a barrier at the exact moment somebody is deciding whether to begin, and it gives you a password to look after for no benefit. A name, a contact detail and a time is enough to hold an hour.
What happens when a client asks for their enquiry to be deleted?
You delete it, and you should be able to do that without help. Before you publish a form, find out where its messages land and how you would remove one, because the request will arrive eventually and the answer cannot be that it is complicated.
Is a contact form safer than publishing an email address?
For the client, slightly: a form does not reveal who they wrote from until they send it. For you, the difference is mostly about spam. Neither is private enough to be the place somebody describes their situation in detail, which is why the form should not invite that.