Can Chiropractors Use Testimonials? Patient Reviews and the UK Rules

Chiropractors can use patient testimonials in the UK when each one is genuine, published with the patient’s permission, backed by documentary evidence and contact details, and free of any claim the clinic could not make itself. Once published, a testimonial’s claims need the same evidence as the clinic’s own advertising, according to the ASA.

Four sets of rules meet on every review a clinic asks for, publishes or answers: the CAP Code enforced by the Advertising Standards Authority (ASA), the General Chiropractic Council (GCC) Code of Professional Practice, the Digital Markets, Competition and Consumers Act 2024, and Google’s own review policies. This guide takes each in the order a clinic meets it, from the testimonial page to the reply box, and it uses findings from our own audit of 50 UK clinic websites.

What makes a patient testimonial acceptable under the CAP Code?

A patient testimonial is acceptable under the CAP Code when it is genuine, relates to the service advertised, appears with the patient’s permission and contains no claim likely to mislead, with documentary evidence and the patient’s contact details held on file.

CAP AdviceOnline sets out the testimonial rules one by one:

• Rule 3.47: the clinic must hold documentary evidence that the testimonial is genuine, and contact details for the person who gave it.
• Rule 3.48: the testimonial must relate to the service being advertised.
• Rule 3.49: claims inside a testimonial must not mislead.
• Rule 3.50: a testimonial must not appear without permission.

CAP adds that testimonials should not be taken out of context or edited in a way that misleads. On evidence, CAP says signed and dated proof is not the only form the ASA is likely to accept, but an email from an unverifiable address, such as a free webmail account, would not be acceptable by itself. Keeping the patient’s message with the date it arrived, matched to the contact details in the clinic’s own patient records, makes the testimonial easier to show as genuine.

The GCC adds a professional layer on top. Standard C5 of the GCC Code of Professional Practice, in force from 1 January 2026, requires that information about your services is factual, verifiable and does not mislead, and the GCC’s mapping document places the duty to keep up with the CAP Code under standard C4. In a 2023 news item the GCC said a review may be considered advertising, and that registrants are accountable for promotional content on sites they own or control, regardless of who wrote it. The GCC’s social media toolkit (December 2021) asks for full written consent before a testimonial is posted and suggests letting the patient see the wording first.

A testimonial file for each quote a clinic publishes holds six things:

1. The patient’s original wording, exactly as received.
2. The date it was received.
3. The patient’s written permission to publish it, and where.
4. The patient’s contact details.
5. Every place the quote now appears: website page, social post, leaflet or Google post.
6. The date someone last read it against the CAP list of accepted conditions.

Permission and a tidy file make a testimonial genuine. They do not make what it says acceptable, and that second test is where most problems sit.

When does a patient testimonial become the clinic’s own claim?

A patient testimonial becomes the clinic’s own claim the moment the clinic publishes it, so the clinic needs the same evidence for a patient’s sentence about curing whiplash as it would need for its own advert saying it treats whiplash.

The ASA’s 2024 guidance for back care awareness week, “Avoid getting the ASA’s back up”, says claims in testimonials must be supported by sufficient evidence, and that this includes implied claims where the testimonial could be understood as an efficacy claim. The ASA accepts that a testimonial may be a genuinely held opinion, but says a view likely to be read as an objective claim should not be included unless the marketer holds evidence. The same guidance adds that testimonials alone are not sufficient substantiation, which closes the usual defence: a clinic cannot use ten patients saying it worked as proof that it works.

The CAP list of conditions a chiropractor may advertise without holding further evidence is fixed at 19 entries, and whiplash and frozen shoulder both sit outside it. Conditions specific to babies, children or pregnant women, such as colic, morning sickness or pelvic pain in pregnancy, need a strong body of evidence according to the ASA. We set out the full list of conditions chiropractors can advertise in a separate guide, so this page applies it only to testimonials.

Trimming a testimonial down to its experience sentences is possible only where the shorter version still reflects what the patient said, because CAP rules out editing that misleads. Where cutting the claim changes the meaning, the testimonial stays in the private feedback file. Keeping it there costs the clinic nothing: the patient’s words still tell the team what went well.

Where do the testimonial rules apply: website, social media and Google posts?

The testimonial rules apply wherever the clinic publishes or adopts a patient’s words: its own website, its social media accounts and any other online space it controls, which in our reading includes the posts it writes on its Google Business Profile.

CAP AdviceOnline says the CAP Code has applied since 2011 to advertising on a company’s own website and in other non paid for space online under its control, naming a brand’s X feed, Facebook page and Instagram profile as examples. A patient’s own Google review is different. CAP’s guidance on social media treats reviews written by private individuals as user generated content, outside the clinic’s marketing until the clinic “adopts and incorporates” it. CAP says adopting can include retweeting, commenting on or even liking a user’s post.

Three everyday actions can bring a patient’s review inside the CAP Code:

• Quoting it on the homepage or in a reviews feed on the website.
• Sharing it as a social media post or a Google Business Profile post.
• Replying in a way that agrees with a claim it makes.

Placement matters as well. A testimonial about sciatica sitting under the sciatica section of the site reads as support for that page’s own wording, which is one reason we keep condition pages worded inside the rules separate from any patient quote that goes further than they do. CAP also warns that a moderation policy which removes negative content, or a site that publishes only positive reviews, can mislead. Consumer law takes the same view of filtered review feeds.

What did our audit find about testimonials on UK chiropractic websites?

Our audit found that published patient testimonials hold some of the riskiest wording on UK chiropractic websites: 3 of 49 sites presented a condition outside the CAP list only through testimonials, and on 3 of the 4 sites with a clear problem use of “cure”, the word came through testimonials.

We audited 50 chiropractic clinic websites across the UK on 13 October 2026, five clinics in each of ten cities, and checked the content of 49 of them (one site blocked our content checks). These are the four findings that matter for testimonials:

• 3 out of 49 sites present a condition outside the CAP list only through a published patient testimonial that implies the treatment worked. In each case the condition was whiplash or frozen shoulder. A clinic checking its own service pages would not find these claims, because they sit in the patients’ words.
• 4 out of 49 sites use the word “cure” in a clear problem way, promising or reporting a cure: 1 in the clinic’s own blog copy and 3 through published patient testimonials. The word appeared on 23 sites in total, and most of those uses were negations, idioms or disclaimers.
• 10 out of 49 sites show “Dr” with a clinician’s name only inside quoted patient reviews. The clinic did not write the title, but the page still displays it.
• 13 out of 49 sites had no reviews feed (widget) and no testimonials page on the pages we checked. A patient comparing clinics on those sites sees no patient voice at all before booking.

For context, 25 out of 49 sites present at least one condition outside the CAP list somewhere on the site, so the testimonial route is a small share of a wider pattern. The claim counts are lower bounds: we checked up to 45 pages per site, an AI model classified each match against written rules, and unclear cases were never counted. The audit measured what clinics publish. It did not measure rankings, traffic or enquiries, and it does not assess whether any individual site meets the CAP Code or GCC standards.

The method, the full findings and the limits are on the page for our audit of 50 UK chiropractic websites. The full report (Research Report TSC-2026-02) and the anonymised data are published with DOI 10.5281/zenodo.23363411.

What does the DMCC Act 2024 say about fake and incentivised reviews?

The Digital Markets, Competition and Consumers Act 2024 lists fake consumer reviews, and consumer reviews that conceal the fact they were incentivised, among the commercial practices considered unfair in all circumstances, and those provisions came into force on 6 April 2025.

The CAP Code governs what a published review says; this Act governs how a clinic obtains and displays reviews in the first place. This section describes what the Act and the CMA’s guidance say. This is not legal advice.

Schedule 20, paragraph 13 of the Act covers three things a clinic can touch:

• Submitting or commissioning a fake review, or a review that conceals it was incentivised. The Act defines a fake review as one that purports to be, but is not, based on a person’s genuine experience. A review conceals an incentive where someone was commissioned to write it and that fact is not made apparent.
• Publishing reviews in a misleading way, which covers how a clinic displays them.
• Publishing reviews without reasonable and proportionate steps to prevent and remove fake, concealed incentivised or misleading review information.

The Competition and Markets Authority’s fake reviews guidance (CMA208, April 2025) fills in the detail. It says commissioning is not limited to money: its examples include discounts, vouchers and products given free of charge, and a trader asking a member of staff to write a review. A free session or money off the next visit is the kind of benefit those examples describe. The guidance treats suppressing genuine negative reviews as problematic, and describes cherry picking as including “encouraging just those who are satisfied to leave reviews”. It also says that hiding a reviewer’s financial interest, such as being an employee, may be misleading, and that even a small trader publishing only its own customers’ reviews must take proportionate steps where those reviews pose a risk. A reviews feed on a clinic website is one way of publishing reviews.

The CMA says a prize draw entry is unlikely to amount to commissioning under the Act. Google’s policy is a separate rule: it prohibits offering incentives such as payment, discounts, or free goods or services in exchange for a review, and that list is open ended, so we advise clinics to offer nothing at all. The CMA can now fine a company that infringes consumer protection law up to 10% of its global turnover, according to its March 2026 announcement of five investigations into reviews.

How should a chiropractor ask patients for Google reviews?

A chiropractor should ask every patient for a Google review in the same way, at the same point in their care, with one direct link and nothing offered in return, because Google’s policy prohibits both incentives and selectively soliciting positive reviews.

Google’s Maps user generated content policy also says businesses should not require or pressure customers to leave reviews while they are on the premises. Google Business Profile Help says a business can ask customers to visit a Google review link or scan a QR code. A request process that fits both:

1. Pick one trigger point. Choose a fixed moment, such as the end of a first course of care, and ask every patient who reaches it.
2. Send one short message. Email or text the direct review link from the clinic’s Business Profile.
3. Ask for honesty, not stars. Suggest no rating, no wording and no condition to mention.
4. Remove any satisfaction filter. A form that sends happy patients to Google and unhappy ones to a private inbox is the selective soliciting Google prohibits.
5. Let patients review at home. Hand a card with the QR code at the desk in place of a tablet to fill in while they wait.
6. Send one reminder at most. Then stop.

A request message that keeps to the rules:

Thank you for visiting [clinic name]. We ask every patient for feedback, and you can leave an honest Google review here: [review link]. Leaving a review is optional and makes no difference to your care.

The message names no treatment and no body part. A text reading “How is your back now?” on a lock screen tells anyone holding the phone why the patient attends a clinic, which is the same confidentiality point covered in the next section.

Review count and rating also feed into where a clinic appears on Google Maps, which Google describes as based mainly on relevance, distance and popularity, and our Google Business Profile guide for chiropractic clinics covers that side.

How do you reply to a review without breaching patient confidentiality?

A clinic replies to a review without breaching patient confidentiality by thanking the reviewer in general terms and never confirming that they are a patient, naming a condition or describing treatment, even when the reviewer has already shared those details publicly.

Three standards in the GCC Code of Professional Practice apply to a reply. Standard C8 requires chiropractors to respect confidential information about the patient and preserve their dignity at all times, including online. Standard G4 says information is shared only with the patient’s consent, unless another lawful basis applies. Standard G6 asks chiropractors communicating online, including through user generated content, to do so responsibly.

Data protection points the same way. The ICO says data concerning health includes information about the provision of health care that reveals someone’s health status, and gives an osteopath clinic’s appointment list as an example from which health data could reasonably be inferred. A reply saying “glad the sessions helped” confirms the reviewer attends a clinic for treatment. We treat a public review as the patient’s own disclosure, never as consent for the clinic to add to it.

A reply also carries an advertising risk. CAP says commenting on a user’s post can count as adopting it, so a reply agreeing that treatment fixed a condition outside the accepted list turns the patient’s claim into the clinic’s. Google’s Business Profile Help suggests replies that are short, polite and personalised. For a clinic, personalise the reply to the clinic (the team, the reception, the way first visits run) and never to the patient’s care.

The three replies below are illustrative, written to show the pattern.

Example 1: a five star review that names an injury

The reply leaves out the neck, the accident and any treatment, and it does not confirm the reviewer attended. Neck pain following injury sits outside the accepted list, so agreeing with the review would also adopt the claim.

Example 2: a short review with no detail

Example 3: a one star review about a charge

How should a clinic handle a negative review?

A clinic handles a negative review by replying once, briefly and politely, without confirming any patient details, then inviting the reviewer to contact the practice privately and dealing with the matter through the clinic’s normal complaints process.

Guidance for doctors from Medical Protection, the indemnity provider, sets the order: read the whole review, check the records, speak to the staff involved, then reply. Management in Practice, drawing on advice from a Medical Protection case manager, recommends keeping the complaint record in a separate file from the patient’s clinical record and saving screenshots, because reviews can be edited or removed. A patient whose concern is resolved can be asked whether they would update the review, though they have no obligation to, and Google’s policy prohibits any incentive to revise or remove a review.

The reply itself is worth posting. A 2024 experiment published in the Journal of Medical Internet Research found that a physician’s response decreased the influence of negative reviews on whether people chose that physician. Who posts the reply matters too: in a case described by the GCC in 2023, a registrant’s unprofessional reply to a Google review was removed swiftly and the Investigating Committee found no case to answer, and the GCC reminded registrants that anyone with access to their online profiles must be appropriate and trustworthy.

Three responses make a negative review worse:

• A conditional offer. The CMA’s fake reviews guidance lists making dispute resolution contingent on the consumer not leaving a negative review as something traders should not do.
• Hiding genuine negative reviews. That includes a website reviews feed filtered to five stars, which the CMA describes as cherry picking.
• Reporting a genuine review as fake. Google’s flagging tools are for reviews that break its content policies, and Management in Practice notes that platforms rarely take down subjective opinions.

What does a monthly testimonial and review routine look like?

A monthly testimonial and review routine is a short fixed checklist run by one named person: send review requests at one trigger point, reply to every new review, file testimonial permissions, and read every published testimonial against the CAP accepted list.

The two working day reply window is our recommendation, not a rule from Google or the GCC. One named owner keeps the routine running through busy months. Setting up this routine, with reply wording that keeps to the claim rules, is part of our SEO service for chiropractors, which starts from the claim check.

Check your own website

Frequently asked questions