The BloodClinic UK
Replacing 7,000 lines of risky legacy code with a secure lab-integrated patient platform.
A private blood testing clinic running on three outsourced plugins and around seven thousand lines of code nobody could safely touch. Bookings hung, results were hard to read, and a medical PDF could be downloaded by anyone who guessed the link. We rebuilt the whole thing: the booking engine, the patient portal, the reporting, the lab connection and the back office the owner runs it from.
Where friction was costing momentum before the rebuild.
Critical security flaw exposing guessable medical PDF URLs
Legacy outsourced plugins served patient blood test PDFs at public endpoints without proper tokenised ownership checks.
7,000 lines of untouched code hanging live customer bookings
Nobody could modify or debug the sprawling legacy snippet stack without breaking WooCommerce or lab dispatches.
Dense unreadable lab outputs lacking patient context
Patients struggled to interpret raw pathology figures after downloading their reports.
What we changed, engineered, and shipped cleanly.
Clean re-architecture across 5 clinical layers
Rebuilt the booking engine, authenticated patient portal, biomarker reporting UI, lab API integration, and clinic owner back-office cleanly.
Strict portal access & readable diagnostic reporting
Replaced open URL PDFs with authenticated portal downloads and visual biomarker range presentations.
Built for desktop clarity and thumb-first mobile conversion.
Hardened Private Pathology Platform, Lab API & Patient Portal.
Replaced ~7,000 lines of brittle outsourced code with a secure booking engine, authenticated lab reports, and clinic back-office.
Authenticated Result Security
Closed guessable public medical PDF vulnerabilities behind strict account access.
Direct Lab API & Readable Reports
Automated pathology syncing translated into clear, patient-friendly diagnostic breakdowns.
Owner Command Back-Office
Replaced three conflicting plugins with one maintainable operational dashboard.
Interface views and architectural frames from The Blood Clinic UK.
Verified scope, speed, and commercial outcomes.
Brittle outsourced plugins replaced cleanly
Booking, portal, reporting, Lab API, admin
Eliminated open guessable report links
Reliable checkout + lab dispatch sync
Eliminated exposed medical PDF links, stabilised appointment checkouts, and gave the clinic owner a clean command back-office.
- Eliminated the critical security vulnerability of publicly guessable medical PDF download links.
- Replaced three conflicting plugins and ~7,000 lines of legacy code with clean bespoke engineering.
- Unified booking engine, WooCommerce checkout, Lab API integration, readable reporting, and clinic back-office.
Every system, plugin, and deliverable included in this build.
Designed and engineered specifically for The Blood Clinic UK with zero bought page-builder shortcuts.
- Custom appointment & blood panel booking engine integrated with WooCommerce
- Authenticated, security-hardened patient results portal
- Structured visual biomarker & pathology reporting interface
- Direct diagnostic Lab API integration pipeline
- Clinic owner operational back-office dashboard
Explore more shipped case studies.
Ryze HRT
Ryze HRT is a hormone and functional medicine clinic treating men and women across all 50 states. Every new patient fills in a medical form before the team can help, and theirs was 83 questions on one page with no save. We built a patient portal that breaks it into seven short steps, saves every answer and chases anyone who stalls by text and email, then rebuilt the website to match. Both went live the same night.
Read case study →
Dixons Dispatch
A family courier firm that has carried radioactive and medical consignments for the NHS for over 40 years, being sold short by a dated listing site and run out of a 32-bit database with no future. We rebuilt both ends: a website that wins the specialist work, and a bespoke operations platform that runs the business behind it.
Read case study →Dr Shabri
A Marylebone practice that treats dentistry, facial aesthetics and regenerative health as one discipline rather than three departments. The website had to carry that idea across more than sixty pages without ever feeling like a treatment menu, book patients into three different clinical systems without dumping them in the wrong one, and be found by people searching for a treatment rather than for her name.
Read case study →Ready for a buildbuilt properly?
Book a 20-minute call directly with Alex to scope timelines and choose your lane.