Online appointment system for GP practices and clinics
Author:
Paweł Matusiak
·
Phone booking bursts in the morning and goes quiet in the afternoon. Online registration takes appointments 24/7, cuts no-shows and leaves reception time for patients who really need to call. Health data — privacy by design, not a GDPR sticker.
Patients are not looking for a “medical system”. They want a free slot without twenty minutes on hold. The practice wants a quieter reception and fewer empty slots. An online appointment system for a clinic does both: booking on the site, doctor calendars, SMS and a card that does not live in a notebook. It does not promise a diagnosis, replace a hospital HIS or pretend to be a medical device. It guards the doctor’s time, consents, and the fact that someone who could not get through at 8:15 can click a slot at 21:40.
What hurts a practice and clinic every day
In the morning the lines are red. Three people wait, a fourth hangs up and goes to a competitor or “somewhere else on the public system”. Reception is simultaneously writing in a notebook, hunting a card and explaining that on Tuesday the doctor only sees follow-ups. The doctor keeps a private spreadsheet “to stay in control”. In the afternoon the phone goes quiet, and the calendar is full of holes left by people who booked with energy in the morning and forgot. Video visits live in the doctor’s inbox, in-person visits in the notebook, someone walks into the room “because yesterday it was written on a slip”. That is not a lack of goodwill. It is booking that is not a system, only a queue for an ear.
There is a risk a hairdresser does not carry at this scale: health data is a special category under GDPR. Consent for SMS, minimising national ID numbers, who sees a note, how long you keep a card after the last visit, how a patient asks for erasure. Paper and a doctor’s private email do not give logs or a deletion path. At an inspection or after a leak, “this is how we always did it” does not work. Privacy by design means roles, encryption, retention and the right to be forgotten live in the project, not in an annex after an audit. More in GDPR in web applications.
- The morning queue: three people on the line, the rest hang up and go where a slot can be clicked.
- No-shows with no reminder and no deposit on private visits — an empty slot someone on a waitlist could have taken.
- The doctor has a spreadsheet, reception a notebook. Doubles and “the doctor already left” are daily, not incidents.
- Missing consents, logs and a deletion path — a risk at inspection and in a leak.
- Video and in-person visits mixed in someone’s head, not in a calendar with a slot type.
- Older patients and urgent cases drown in the same queue as “a follow-up in three weeks, please”.
- The manager cannot see the week’s load except by asking reception “how is it going”.
The numbers: 18% medical no-show and what actually works
Etisia’s 2026 benchmarks put average no-shows in medical practices and clinics at about 18%. That is higher than dental (about 12%) and beauty (about 14%). Other outpatient round-ups cite a wide 5–18% band, and well-run practices in MGMA data sit near 5–7%. The gap between 18% and 6% is not “better patients”. It is reminders, easy cancellation, a waitlist and — on first private visits — a deposit. The US national average often quoted around 18% is close to what a private clinic sees without SMS.
Bookeo (services, not hospitals) shows a mechanic that transfers to a private practice: online booking = about 49% lower miss risk than phone; reminders about −29%; SMS versus no reminder about −38%. The Cochrane review (Gurol-Urganci et al.) found a 29–39% drop in missed healthcare appointments after SMS. Athenahealth flags a second cost: patients with a no-show are more likely to leave the practice altogether (in their data about 32% versus about 19% for people with no misses). An empty slot hurts today. Losing the patient hurts for a year.
- An 18% no-show rate (Etisia, medical/clinic) on 20 visits a day is 3–4 empty slots — and a queue of people who could not get through.
- The operational target for a well-run practice: around 5–8%, not “we match the industry average”.
- SMS at 24 h and 2 h with a cancel link; a deposit on the first private visit; a waitlist for a freed slot.
- Online booking: lower absence (Bookeo about 49%) and less morning hell on the line.
- No-show is also retention: people who miss are more likely not to return — a reminder is cheaper than a new patient.
E-registration people will actually use
The patient picks a specialist or service, sees open slots, leaves a data minimum and — for private visits — can pay a deposit. Confirmation and reminder go by SMS. A cancel link returns the slot to a waitlist. Reception still books the phone into the same calendar. There are not two truths. There is no forced national health account to book a private follow-up on the clinic site. We integrate state platforms only where it is needed and actually possible — not as brochure decoration.
A doctor calendar, not a shared inbox
Each doctor has a rota, visit types (first, follow-up, video), duration and a room. The system will not double-book a slot. The manager sees the week’s load instead of guessing. An online slot gets a join link, a reminder and a place for a note after the visit. The patient does not call “is the doctor waiting”. The doctor does not hunt for a link in email. If you need more, we add a telemedicine path — still calendar and access, not a “virtual hospital”.
Registration SaaS or your own clinic system
Ready-made medical calendars can be fine for one room and a simple private price list. They break when you mix public/private (even if public stays in another tool), several doctors with different visit types, video visits, your own onboarding on the site for SEO “cardiologist [city] book now”, or when the patient card cannot leave your infrastructure. A per-doctor subscription grows with the team. A custom appointment system makes sense when the process is yours and sensitive data should stay with you — with a processor agreement, EU hosting and roles you can defend at inspection.
We do not push a one-doctor practice with 30 visits a week into custom if a Booksy-like calendar is enough and you do not keep records in it. Custom when reception walks around the tool with paper, when two sites share one patient, when you need video in the same slot, or when the vendor will not do roles: reception does not see the doctor’s note. Then we do not glue a medical card onto a hairdresser calendar. We design minimisation, logs and retention from the first screen.
- SaaS: fast start, foreign retention, limited roles and visit types, a fee per doctor.
- Custom: a longer start, your site, your roles, a database under your contract, growth without waiting on a vendor Q3.
- Health data: GDPR Article 9 — a lawful basis, minimisation, privacy by design and by default, not a checkbox in the terms.
- Full electronic records and state integrations: a separate quote, a separate scope, never “in the widget price”.
A rollout that does not block Monday morning
A clinic cannot “turn the phone off for IT”. First doctors, visit types, durations, rooms, what the patient may click (follow-up, first private) and what stays with reception (urgent, complex). Then a calendar on the site, SMS, a parallel week. Consents and privacy notices go with the first booking, not “we will add GDPR later”. Clinical notes — only when there is a decision on who sees them and how long they live. Public-system work, if any, must not block the start of private e-registration.
- A map: doctors, sites, slot types, what the patient clicks, what reception types.
- E-registration + confirmation + SMS at 24 h / 2 h + cancel link + the same phone entry.
- Roles and logs from day one. Reception does not see a note if it does not need to.
- Measure no-shows for two or three weeks, then a deposit on first private visits and a waitlist.
- Video visits in the same calendar (link, reminder) if you actually run them.
- Card / attachments / possible electronic records — phase two, with a separate GDPR scope, not a bolt-on to the MVP.
Mistakes that sabotage e-registration
The most expensive: a widget on the site and still two doctor spreadsheets. Doubles return within a week, the team stops trusting. Second: forcing a national health account for a private visit — conversion falls, people without an account go elsewhere. Third: a reminder with no cancel path. Fourth: one consent for marketing, SMS and “processing medical data”. Fifth: promising full medical records in the calendar price — then disappointment and risk. Sixth: no path for seniors and urgent cases; the system should take routine, not close the window.
- Two calendars (system + the doctor’s notebook) — “the doctor already left” stays.
- Too many fields on the first booking (national ID, history, scans) — the patient abandons the form.
- Video as a normal slot with no link and no buffer — a queue in the corridor and on the call at once.
- No waitlist: a 7:50 cancellation leaves a hole, even though someone could not get through that morning.
- Hosting and backups outside a processor agreement — privacy by design ends on a slide.
- Treating the clinic like a beauty salon on permissions: the same time engine, a different data category.
Privacy by design: Articles 9 and 25, not a footer sticker
Health data is a special category (GDPR Article 9): processing is prohibited unless you have a basis (including explicit consent, or health care under law / a contract with a health professional, with the safeguards in paragraph 3). Privacy by design and by default (Article 25) is an obligation: minimisation (a national ID number only when you truly need it), roles from the first screen, logs of who opened a card, retention after the last visit, a right to erasure, EU hosting and a processor agreement. Reception does not see the doctor’s note if it does not need to. One consent for marketing, SMS and “medical data” is not enough. This is not a hairdresser calendar with a card glued on. More in GDPR in web applications.
18% no-show and the morning queue: count on your own slots
Etisia 2026: about 18% no-show in medical practices and clinics — higher than dental (12%) and beauty (14%). On 20 visits a day that is 3–4 empty slots while someone cannot get through in the morning. MGMA for well-run practices: around 5–7%. The gap is not “better patients”, it is SMS at 24 h and 2 h, a cancel link, a waitlist and a deposit on the first private visit. Cochrane (Gurol-Urganci): SMS cuts missed healthcare appointments by 29–39%. Bookeo (services): online booking about 49% lower risk than phone. Athenahealth: patients with a no-show are more likely to leave the practice (about 32% vs about 19%). An empty slot hurts today; losing the patient hurts for a year.
- Operational target: 5–8% no-show, not “we match the 18% average”.
- Measure first private visits and follow-ups separately — 18% often hides 30% on a debut with no deposit.
- Share of online bookings vs phone: if the widget exists and 95% still call, the form is too long or hidden.
- Time to the first open slot and morning hang-ups — that is the cost of no 24/7 e-registration.
Video visits in the same calendar, without pretending to be a HIS
An online slot gets a type, a duration, a room or a link, a reminder and a place for a note. The patient does not call “is the doctor waiting”. The doctor does not hunt for a URL in email. This is still booking time, not a virtual hospital and not a medical device. If you need more, we add a telemedicine path. A full HIS, electronic records under state platforms and a national health account are quoted separately. We deliberately do not mix that into the e-registration MVP — otherwise the clinic waits six months for a calendar that was meant to take the morning queue this month. Compare a dental practice: the same quieter reception, a different slot length and treatment plan.
What to roll out first so Monday morning survives
A map of doctors and visit types (what the patient clicks: follow-up, first private; what stays at the desk: urgent). Calendar on the site, SMS, a parallel week, consents with the first booking. Clinical notes only when roles and retention are decided. Public-system work, if any, must not block private e-registration. After two or three weeks you look at no-shows, then a deposit and a waitlist. Seniors and urgent cases still have the phone — the system takes routine, it does not close the window. That is a rollout that does not tell you to “turn registration off for IT”.
If reception is drowning and the calendar is full of holes — describe doctor count, public/private mix and the biggest pain. An e-registration quote in 24 hours, with a clear GDPR scope: what is in the MVP (slots, SMS, roles) and what this phase deliberately does not promise (full electronic records, national platforms, a HIS).
Frequently asked questions
- Does the patient need a national health account?
- No. Private e-registration runs on the clinic site. We integrate national platforms only where it is needed and actually possible — quoted separately, never as a condition of the first booking.
- Will the system produce medical records?
- It can hold notes and files with permissions. Full electronic medical records and state-platform integrations are quoted separately. We do not promise records “in the calendar price” and we do not pretend to be a hospital HIS.
- How do we cut an 18% no-show rate?
- Online booking, SMS at 24 h and 2 h with a cancel link, a deposit on first private visits, a waitlist. A calendar with no messaging is not enough. Well-run practices aim for 5–8%, not the industry average.
- Does reception stay?
- Yes. Phone and desk stay for older patients and urgent cases. The system takes routine slots so reception can talk to the people who really need to call.
- Is this a medical device or diagnostic software?
- No. We do not make diagnoses, drive equipment or replace clinical software. We book time, enforce roles and consents, and optionally hold a note the doctor types.
- Where is the data and who sees it?
- EU hosting, a processor agreement, roles (doctor / reception / manager), access logs, retention and a right to erasure. Reception does not see a clinical note if it does not need to. That is privacy by design, not a PDF clause.
- Can one system run several clinics?
- Yes — one patient, several sites, separate doctor and room diaries. A shared card only in the scope you have a basis and consent for.
- How long does e-registration take to roll out?
- Calendar, SMS and a booking page: usually a few weeks including a parallel week. Video in the same phase if it is simple. Electronic records and state integrations — a separate contract, not “two more days”.
Related service:
Custom software for companies
Describe your project