Here’s a scenario we see more often than we’d like. A physio or psychology practice invests in a beautiful new website. The designer (talented, well-meaning, completely unaware of health advertising law) adds a testimonial slider to the homepage. Five-star quotes about pain disappearing, anxiety lifting, life-changing results. It looks fantastic. It converts well.
It’s also a breach of the National Law.
Allied health is one of the very few industries where the wrong website content isn’t just ineffective. It’s a compliance risk with your name on it. Most web designers have never read AHPRA’s advertising guidelines. Plenty don’t know they exist. So this article is our attempt to lay out, in plain English, what the rules actually say, where practices most commonly trip up, and, importantly, how to build trust and fill your diary without the stuff you’re not allowed to use.
One thing before we start: we’re web designers, not lawyers. This is general information based on AHPRA’s published guidelines, not legal advice, and responsibility for your advertising always sits with your practice. When in doubt, check AHPRA’s Advertising Hub or get proper legal advice.
First, the uncomfortable truth: your website is advertising
Some practice owners assume “advertising” means paid ads. Google Ads, Facebook campaigns, a spot in the local paper. It doesn’t.
Under Section 133 of the Health Practitioner Regulation National Law, advertising covers essentially any public communication that promotes a regulated health service. Your website. Your Google Business Profile. Your Instagram. Your email newsletter. The brochure at reception. If it promotes your services to the public, the rules apply.
And they apply to every AHPRA-registered profession: physiotherapists, psychologists, occupational therapists, chiropractors, osteopaths, podiatrists, Chinese medicine practitioners and the rest. They also apply to the business advertising the service, not just the practitioner. So a group practice can’t shrug it off because the marketing was done by an admin or an agency. If it’s your website, it’s your responsibility.
Breaches aren’t theoretical, either. AHPRA fields hundreds of advertising complaints every year, and penalties under the National Law can run to tens of thousands of dollars per offence. Most cases start with a request to fix the material, but “we didn’t know” has never been much of a defence, and a public compliance action is not the kind of local publicity any clinic wants.
The five things that most commonly put practice websites in breach
1. Testimonials about clinical care
This is the big one, and the one that catches practices out most often.
The National Law prohibits using testimonials, or purported testimonials, about a regulated health service in your advertising. AHPRA defines a testimonial as a recommendation or positive statement about the clinical aspects of care: symptoms, diagnosis, treatment, outcomes, results.
So a quote on your website saying “After three sessions my back pain was gone. Highly recommend!” is a breach. It doesn’t matter that the patient said it. It doesn’t matter that it’s true. It doesn’t matter that they gave permission. If it comments on clinical care and it appears in advertising you control, it’s not allowed.
2. Google review widgets pulling clinical reviews onto your site
Here’s the nuance that surprises people. Reviews that patients leave on independent platforms you don’t control, like Google, are generally not your problem. AHPRA doesn’t expect you to police the internet, and you’re not required to disable reviews.
But the moment you republish those reviews in your own advertising, they become your advertising. That star-rating widget your web designer installed, the one that automatically pulls your latest Google reviews onto your homepage? If any of those reviews mention clinical care or outcomes (and they almost always do), you’ve just published prohibited testimonials on your own website.
This is probably the single most common breach we see on allied health websites, and it’s usually there because a generic review plugin was installed without a second thought.
3. Outcome promises and guarantee language
Advertising must not create an unreasonable expectation of beneficial treatment. In practice, that rules out a lot of the punchy marketing language other industries lean on:
“Guaranteed results.” “We’ll get you pain-free.” “Proven to fix sciatica.” “Success rate of 95%.”
Health outcomes vary from person to person, and language that promises or strongly implies a particular result is exactly what the guidelines target. The same goes for claims that aren’t backed by acceptable evidence. “The most effective treatment for X” needs to be demonstrably true, and vague appeals to research (“studies show…”) don’t cut it if the studies don’t actually support the claim.
4. Before-and-after imagery used loosely
Before-and-after photos aren’t banned outright for most allied health services, but they’re heavily constrained. They can’t be misleading, can’t be edited or cherry-picked in a way that creates unrealistic expectations, and need to represent genuinely comparable conditions. For anything in the cosmetic space, the rules tightened significantly again in 2025 and are stricter still. Our general advice for allied health websites: if you’re tempted to use before-and-afters, think very carefully about whether they’re doing compliant work. Most practices are better off without them.
5. Discounts and time-pressure offers around clinical services
Advertising can’t directly or indirectly encourage the unnecessary use of health services. Time-limited offers (“Book this week for 20% off your initial consult!”) sit uncomfortably against that rule, because they pressure people into clinical decisions for commercial reasons. Gift vouchers, package deals and promotional pricing all need care. Clear, factual pricing is fine. Countdown-timer urgency tactics are a problem.
So how do you build trust without any of that?
This is the question that actually matters, because trust is what converts a website visitor into a booked patient. The good news: the most effective trust signals for health websites were never testimonial sliders anyway. Here’s what works, and complies.
Lead with credentials and registration. Your qualifications, your AHPRA registration, your professional memberships, your years in practice. Factual, verifiable, and exactly what an anxious first-time patient is looking for. You can’t add glowing quotes, but you can absolutely say who you are and what you’re qualified to do.
Use non-clinical feedback carefully. AHPRA’s testimonial rules target clinical commentary. Feedback about your friendly reception team, how easy it was to book, or how welcoming the clinic feels is a different category, and it’s genuinely reassuring to prospective patients. The line takes judgement, and it’s worth having anything you publish looked over, but “trust content” doesn’t have to mean silence.
Write clear, factual service pages. Describe what you treat, how a first appointment works, what a patient should bring, how rebates and referrals work. This sounds boring. It converts brilliantly, because it answers the exact questions that stop people from booking. It’s also precisely the kind of accurate, honest information the guidelines exist to encourage. We’ve written before about why good website copy matters more than you probably think, and nowhere is that truer than in health.
Show the practice, not the promises. Real photos of your rooms and your team do more for trust than any stock image or star widget. People are choosing a place they’ll physically walk into, possibly while in pain or distress. Show them.
Remove booking friction. Here’s the thing nobody tells practices: the biggest conversion killer on allied health websites usually isn’t a lack of testimonials. It’s that a patient decides to book at 9pm on a Sunday and can’t. A booking system like Cliniko, Halaxy or Power Diary embedded directly in your site, front and centre, converts more enquiries than any marketing copy ever will. And it’s entirely compliance-neutral.
A quick self-audit for your current website
Ten minutes, honest answers:
- Are there any patient quotes on your site that mention symptoms, treatment or results?
- Is there a plugin or widget pulling Google reviews onto any page?
- Does any page use the words “guaranteed,” “proven,” “cure” or promise a specific outcome?
- Are there before-and-after photos, and could they create unrealistic expectations?
- Are you running time-limited discounts on clinical services?
- Can a patient actually book online, right now, from their phone?
If you answered yes to any of the first five, it’s worth acting sooner rather than later. These are the exact things AHPRA’s guidance calls out. If you answered no to the last one, you’re leaving bookings on the table every single week, compliant or not.
Compliance and conversion aren’t in tension
It’s tempting to see the advertising rules as marketing with one hand tied behind your back. We’d argue the opposite. The guidelines push health websites towards exactly what modern patients respond to: honesty, clarity, credentials, and a frictionless path to booking. The practices losing out aren’t the ones playing by the rules. They’re the ones with a beautiful but non-compliant site built by a designer who never knew the rules existed.
That’s the whole reason we build allied health websites with AHPRA’s guidelines in the room from day one: compliant trust elements, careful review handling, and your booking system wired straight into the site so the diary fills itself. If you’d like a second pair of eyes on your current site, or you’re starting fresh, get in touch and we’ll tell you straight what’s working, what’s risky, and what’s costing you bookings.
This article is general information about AHPRA’s advertising guidelines, current at the time of writing. It isn’t legal advice, and rules change. Always verify against AHPRA’s Advertising Hub at ahpra.gov.au or seek independent legal advice for your specific situation.