Marketing & search · Practical guide

Remove public links to staff-only information

A public index links to a staff-only resource, even though access is restricted. The site is advertising a destination it cannot fulfil for visitors.

Healthcare marketing calendar, campaign materials and a laptop showing anonymous charts.
Help the right people find your service and take a useful next step.

What to change

Public discovery files should reflect the access decision already made by the resource owner. Ask the supplier to trace how the protected route entered the library, whether through a source list, automatic scanner or copied link. Remove that public reference at its origin and confirm regeneration does not recreate it. The protected destination must retain its access policy throughout the correction.

A worked example

Illustrative example

Illustrative test: Open the public resource directory in a signed-out session and follow relevant links. Suppose a staff preparation checklist appears in the public resource directory because an automatic scan included its file. The resource owner confirms it should remain restricted. The supplier removes it from the public listing source and rebuilds the directory. Your signed-out review checks that the link stays absent and that directly opening the restricted address still follows its intended access policy, rather than becoming public to remove a warning.

Healthcare marketing planning with an editorial calendar, audience question and campaign brief.
Start with the audience question and a clear content brief.
Healthcare marketing enquiry journey connecting a service page, message and appointment calendar.
Connect the public promise to a supported next step.

What this means for your practice

A public resource list should not advertise an item that visitors are not meant to access. Even where protection works, that link creates a frustrating dead end and may reveal an unintended description. Confirm with the resource owner that the material remains restricted, then ask the supplier to trace where its public reference originates. It might be an automatic list or a copied menu entry. Correcting that source matters because a manual deletion can return during the next update. Review the public directory while signed out and have the supplier demonstrate that the protected destination remains protected. Making it public merely to clear a broken-link warning would reverse the original decision.

How to check the result

Public indexes contain only intended public destinations and restricted content remains inaccessible.

A mistake to avoid

Making the page public just to clear a search engine error reverses the requirement.

Turn reading into a next step

Your action checklist

Work through these checks with your team or supplier. Tick the ones you have resolved and leave unknowns open.

Checks to discuss

Record what you know, what is still missing and the answer you need from your team or supplier.

Use project decisions only, without personal, patient or confidential details. Entries stay in this page and are not submitted to Kay & Co. Copy or download before leaving; this page does not save your notes.

Further reading

These sources provide background for the topic. The practice examples and checklist are illustrative planning suggestions from Kay & Co.

Related guides

Need help with this?

Tell us what is getting in the way. Kay & Co. can help you understand the options and turn the next step into something that works for your practice.

Explore marketing & search services or discuss your project.

Try the free Healthcare Digital Planner to find your starting priority.