A website with no legal notices, unsecured patient data, services provided without a contract: these situations, common in the wellbeing professions, nonetheless expose practitioners to significant risks. The webinar hosted by Julie and Oriane, founders of the legal platform Ujo, offers a clear framework to help every therapist secure their practice.
Why you should strengthen the legal compliance of your practice
Whether it involves naturopathy, energy healing or integrative health support, the regulations apply to every professional working in a helping relationship. The legal framework does not depend on the status of the business (sole trader, SPRL and so on), but on the nature of the services provided.
This point is crucial: therapists are increasingly being targeted by the authorities. A failure to include mandatory notices, inappropriate collection of personal data, or the absence of T&Cs, can lead to complaints being reported, or even to penalties.
GDPR: a key issue for the relationship of trust
GDPR does not only concern large companies. Any professional who collects, stores or processes personal data (contact details, questionnaires, medical history) is required to comply with this regulation.
Julie and Oriane highlight the importance of the privacy policy: it must clearly state what data is collected, for what purpose, with what tools, and how it is protected.
Key points:
- A well-drafted GDPR policy is essential, even for a small independent practice.
- Every online form must state the patient’s rights (access, rectification, deletion).
Securing your dealings with suitable contracts
In practice, many therapists offer their services without formalising the agreement with their clients. Yet a clear contract protects both parties: it sets out the conditions, the mutual obligations, and anticipates disputes.
Julie and Oriane stress the importance of a general terms and conditions of sale (T&Cs) template, or a signed informed consent document, at the start of care.
Key points:
- Having T&Cs is mandatory whenever a service is sold to a private individual.
- A contract or engagement document clarifies the terms of follow-up, cancellations and responsibilities.
A 3-step protocol for the legal security of your practice
StepToolGoal1Legal notices + Privacy policyWebsite compliance and client information2T&Cs or a signed standard contractStructuring services and preventing disputes3GDPR management tool (secure platform)Protection of personal data
5 habits to build in from tomorrow
- Add a “Legal notices” page and a “Privacy policy” page to your website.
- Formalise every service with T&Cs or a signed contract.
- Use a secure tool to manage client data (for example, Mes Dossiers, Salut Santé).
- Inform patients of their rights regarding personal data.
- Keep a regular watch on legal developments to stay up to date with your professional obligations.
Essential points for your practice
Legal compliance is not just an administrative formality. It protects your practice, showcases your professionalism, and strengthens the relationship of trust with your patients. These practical suggestions reflect Simplycure’s commitment to bringing theory and practice closer together for a tangible impact on patients.
FAQ
What are the minimum legal requirements for a therapist’s website?
The website must include legal notices, a privacy policy and, if a service is sold, T&Cs.
Is a contract needed even for a one-off session?
Yes. Even a single session should be formally covered, at the very least by acceptance of the T&Cs or a signed document.
What penalties are possible for GDPR non-compliance?
Penalties can range from a simple warning to administrative fines. But the reputational risks are also significant.
Can you manage client data without a dedicated tool?
This is not recommended. A GDPR-compliant platform (encryption, traceability, access rights) is preferable.
What does the Ujo legal pack contain?
Customisable document templates, explanatory videos and access to regular legal updates.
