The verdict in three sentences
For a clinic website in Dublin or Montpellier, EU hosting at EUR 15 to 80 per month is enough as long as the site does not collect health data. As soon as a form gathers a reason for consultation, symptoms or a medical document, you need a certified health-data host (HDS in France, ISO 27001 and HSE-aligned in Ireland), at EUR 150 to 400 per month. Full GDPR compliance (cookie banner, record of processing, data processing agreement) adds little cost but protects against fines of up to 4% of turnover.
Health data or not: the question that sets the budget
Under GDPR Article 9, health data is a special category requiring stronger safeguards. France goes further with mandatory HDS certification; Ireland's Data Protection Commission expects equivalent security (encryption, access logs, EU residency). Everything depends on what your forms collect.
| Site feature | Data collected | Health-grade hosting required? |
|---|---|---|
| Practitioner profiles, opening hours, map | No personal data | No |
| Contact form "name, email, message" | Identity, free-text message | Risk if patients describe symptoms |
| Appointment booking via an external platform | Handled by the platform | No for your site |
| Pre-consultation form (reason, history) | Health data | Yes |
| Prescription or lab result upload | Health data | Yes |
| Prevention newsletter | Email only | No |
The cheapest option is often to outsource everything health-related (booking, teleconsultation, document exchange) to platforms already certified, and keep a showcase site on standard EU hosting. The contact form must then clearly ask patients not to send medical information.
2026 hosting and compliance costs
| Item | Option | 2026 cost (EUR excl. VAT) |
|---|---|---|
| EU showcase hosting | OVHcloud, Scaleway, AWS eu-west-1 | 15 to 80 / month |
| Certified health-data hosting | OVHcloud HDS, Scaleway HDS, specialist providers | 150 to 400 / month |
| Compliant cookie banner | Tarteaucitron (free) or Axeptio, Didomi | 0 to 15 / month |
| Consent-exempt analytics | Self-hosted Matomo, Plausible | 0 to 20 / month |
| Record of processing + privacy notice | One-off service | 400 to 900 |
| Data processing agreement (DPA) with host | Included with serious hosts | 0 |
| Annual GDPR audit of the site | Optional | 300 to 700 / year |
For a showcase site without health data, total compliance and hosting comes to about EUR 600 to 1,900 in year one. With health-grade hosting, it rises to EUR 2,300 to 5,700 per year.
Frequently forgotten GDPR obligations
- Record of processing: even a small practice must list its processing activities (contact, newsletter, recruitment).
- Cookie banner: refusing must be as easy as accepting, with a "Reject all" button on the first layer, as both the CNIL and the Irish DPC require.
- Google Analytics: its use remains constrained; prefer Matomo or Plausible in exempt mode.
- Fonts and maps: Google Fonts loaded from Google servers sends visitor IPs to the US; host fonts locally.
- Retention period: 3 years maximum for an inactive prospect, stated in the privacy policy.
Mini case study
Dr Sophie Martin runs a 9-practitioner health centre (the same reasoning applies to a Dublin clinic). Her current site, hosted in the US, offers a "describe your problem" form and uses Google Analytics without a compliant banner.
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
Scenario A: move to a health-grade host (EUR 250 per month) and keep the form, i.e. EUR 3,000 per year plus EUR 800 of compliance work, total EUR 3,800 in year one. Scenario B: remove the medical form, redirect to a certified booking platform, host on Scaleway at EUR 30 per month with Matomo and Tarteaucitron, plus EUR 800 of compliance work, total EUR 1,160 in year one. Scenario B saves EUR 2,640 a year while removing the health-data risk.
FAQ
Does a clinic need health-grade hosting for its website?
Only if the site stores or transmits health data. A showcase site without a medical form can be hosted in the EU for EUR 15 to 80 per month.
How much does certified health-data hosting cost in 2026?
Between EUR 150 and 400 per month for a small site, depending on service level and redundancy. Custom offers often exceed EUR 500 per month.
What fine does a non-compliant clinic risk?
Regulators can impose up to EUR 20 million or 4% of worldwide turnover. For small practices, recent sanctions range from a few thousand to a few tens of thousands of euros.
Is a cookie banner a paid tool?
Not necessarily: Tarteaucitron is free and compliant. Managed solutions cost EUR 5 to 15 per month for a small site.
Can we keep Google Analytics?
Yes with prior consent, but Matomo or Plausible in exempt mode avoid the banner for audience measurement and cost EUR 0 to 20 per month.
Let's scope your project. Send us your site address and the list of your forms: we will tell you whether health-grade hosting is required and price the migration and compliance work, usually between EUR 600 and 5,700 in year one. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
