Nine ideas: clinician-led treatment explainers on social; reviews asked for from everyone; a complete Business Profile per location; paid social to adults within Meta's rules; memberships and packages; recall and seasonal email within the email laws; open-house events with consultations; a website that books on a phone; and a monthly count of booked clients by source.
Three rules sit over all of them. The FTC's: evidence behind every claim, no promised outcomes, no before-and-after presented as typical. The platforms': adult targeting and no inferiority or clickbait language. Your state's or province's: who may perform, supervise and advertise each treatment, which you check before any campaign.
The rule that shapes everything: the FTC on claims and images
The Federal Trade Commission's Health Products Compliance Guidance (December 2022) says claims about health benefits need substantiation in the form of competent and reliable scientific evidence, which for health benefit claims generally means randomized, controlled human clinical testing; that before-and-after images and testimonials convey claims the advertiser must be able to substantiate; and that a disclaimer such as “results not typical” does not cure the deception. For a med spa that means: describe what a treatment is, who it is for, how it is performed and what the risks are; show a before-and-after only where you can stand behind what it implies about what a typical client gets, never as a promise; and keep words like “permanent”, “erase” and “forever” out of every caption. Your medical director approves claims before they are published.
Idea 1: Treatment explainers, led by the clinician
The content that earns trust is a clinician explaining one treatment at a time: what it is, who it suits, what the appointment is like, how long it takes, what recovery involves, what it does not do, and what the risks are. Short videos from the treatment room with the real team outperform stock imagery, and a question-and-answer format fits what people type into search and social. Every post follows the FTC rule above, carries no promised outcome, and is approved by the medical director. Our social media optimization service plans and produces this with your team.
Idea 2: Reviews from every client, within three rules
Reviews decide which med spa a new client books. BrightLocal's 2026 survey of 1,002 US adults, summarized by PinMeTo, found 41% always read reviews when choosing a local business, 31% will only use a business rated 4.5 stars or higher, and 80% are more likely to use a business that replies to all its reviews.
Three rules govern how you earn them. Google's Maps content policy forbids any incentive for a review and forbids asking only happy clients; the FTC's rule on fake reviews, announced in August 2024, bans fake, bought and undisclosed insider reviews with civil penalties; and the FTC's Endorsement Guides require clear disclosure of any connection a reader would not expect, such as a free treatment or a discount. Ask every client after the visit with a direct link, offer nothing, reply to every review without confirming treatment details, and use a client's name, story or photo in your own marketing only with written authorization.
Idea 3: A complete Business Profile per location
Google's guidance on local ranking says local results rest on relevance, distance and prominence, that a complete and accurate profile is more likely to show, and that there is no way to pay for a better local ranking. List the real business name, the right category, hours, each treatment as a service with a plain description, photos of the actual rooms and team, and a booking link. Update it the day hours or treatments change.
Idea 4: Paid social to adults, within Meta's rules
Meta's Health and Wellness advertising standards, updated 22 July 2026, say ads promoting cosmetic products, procedures or surgeries must be targeted to people aged at least 18, must not contain statements of inferiority about physical appearance, must not use clickbait such as promises of specific outcomes within a set time frame without disclaimers or qualifiers, and must not claim to cure the listed incurable diseases. For audiences 18 and over, the policy allows ads for listed procedures including dermal fillers, injectable treatments, chemical peels, micro-needling and laser or light treatments, and general cosmetic procedures depicting before-and-after transformation. Run campaigns by treatment and city, aimed at adults, with creative that describes the treatment and promises nothing, landing on a page built as idea 8 requires, and count booked consultations, with clicks as context. Our paid social page covers how we run it.
Idea 5: Memberships and packages, described plainly
Recurring treatments suit memberships, and a membership turns a one-time client into a yearly one. Describe what the membership includes, what it costs, how it renews and how it is cancelled, in plain words on one page, with the same words in the ad and at the front desk. State and provincial consumer law on automatic renewals and cancellation applies, so counsel reads the terms before launch.
Idea 6: Recall and seasonal email, within the email laws
Clients who have been once are the cheapest appointments you will book. A recall message when a treatment is due, a seasonal note on a treatment that suits the season, and a members' message about a new service bring people back. In the USA the FTC's CAN-SPAM guide requires accurate headers, a truthful subject line, identification as an advertisement where the message is one, a postal address and an opt-out honored within 10 business days, with penalties up to $53,088 per email; in Canada, CASL requires consent before a commercial electronic message. If HIPAA applies to your spa (the next section), HHS's marketing guidance also applies: marketing with protected health information needs written authorization, with an exception for your own health-related services.
Does HIPAA apply to a med spa?
It depends on how the business is structured and whether it is a covered entity under the rule, which is a question for counsel, not a marketing page. Design as if it does: HHS's tracking bulletin says tracking that reaches protected health information on appointment forms, intake tools and portal pages is regulated, that vendors receiving it need a business associate agreement, and that a cookie banner is not an authorization. Keep ad pixels and retargeting off the booking and intake pages, build audiences from geography and interests, never from client lists, and do not upload client lists to ad platforms without authorization. Our guide to HIPAA-compliant website design covers the build.
Idea 7: Open-house events with consultations
An evening event with the clinician explaining treatments, consultations booked in advance, and a clear invitation to book an appointment fills a schedule in a way ads rarely do. Promote it through the Business Profile, social, email and the website; collect RSVPs through a form on the patient side of the site; and follow up within the email laws. Any offer at the event follows the same claim rules and the state's or province's rules on inducements for treatment.
Idea 8: A website that books on a phone
Most clients reach you from a phone. A page per treatment written in the client's words and approved by the medical director, a page per clinician with credentials, pricing or a pricing approach where you choose to publish it, real photos, a booking path in a few taps, and a tag setup that keeps ad pixels off the booking and intake pages. Our guide to medical practice marketing strategies covers the same website rules for a practice.
Idea 9: Count booked clients by source, monthly
The habit that tells you which of the eight to keep: a monthly count of booked and kept appointments by source (profile, website, social, paid social, email, event, referral), by treatment and by clinician, from the booking system and a question at check-in, through a method your compliance review has approved. After three months, the count shows what fills the schedule. Followers, likes and reach are context only.
If you want it run with you
PromotEdge International is an international strategy, technology, marketing and design company, and our delivery team is in India. Our social content and paid social campaigns pages cover the work we do for med spas and clinics, and our healthcare industry page list the sectors we work with. We are a marketing company: we do not certify compliance and we do not call ourselves HIPAA compliant, and we sign HIPAA business associate agreements where our work touches client health data. This guide is general information, not legal advice.
Facts we rely on: see our company facts for what we state about ourselves and where each fact comes from.