Marketing and AI Automation for Med Spas

For med spa owners who sell injectables, laser and body treatments, and keep running into ad rules, privacy questions and rebooking gaps.

Your ad for lip filler was disapproved on Tuesday. The client who loved her results in March never booked again.

That is not a marketing problem. It is a rules and timing problem. Med spas sit between beauty and medicine, and the ad platforms, privacy rules and client habits all treat that middle ground differently. When the ad setup ignores the medical rules and the follow-up ignores treatment timing, you pay for new clients and lose the ones you had.

What we would do first

We would sort your services into two groups: aesthetic services like facials and laser hair removal, and medical treatments like injectables. The ad rules, the audience options and possibly the privacy law differ between the two. Then we would check how many clients rebook within their treatment window.

Your website: medical credibility, spa experience

A client choosing where to get injections is choosing a medical provider. The site has to show who does the treatment.

• A page per treatment with who performs it, their credentials and the supervising physician where your state requires one.
• Pricing or "starting at" figures where you can state them honestly.
• Before-and-after photos only from your own clients, with consent on file.
• Online booking that does not send treatment details to ad platforms.

Reviews deserve care. The FTC's Consumer Reviews and Testimonials Rule bars paying for reviews conditioned on being positive, and the FTC says asking only happy clients for reviews could violate the FTC Act. Asking every client is fine. We build sites by hand so the booking flow loads only the scripts we choose; see our web design approach.

Google Ads: what you can and cannot target

Two Google policies shape med spa accounts. First, Google's restricted drug terms policy lets you use prescription drug terms in ads and landing pages in the US, but you must be certified to keyword-target them, and the FDA's medication guide describes Botox Cosmetic as a prescription medicine. Second, Google's health policy for personalized ads restricts "invasive medical procedures, including cosmetic surgery, surgical procedures, or injections," and advertisers in sensitive categories cannot use advertiser-curated audiences, which rules out your own remarketing lists for those services.

LocaliQ does not publish a med spa figure. LocaliQ's 2026 Search Advertising Benchmarks put Beauty and Personal Care at $4.62 per click and $39.25 per lead, and Physicians and Surgeons at $4.76 and $40.04. An illustration using the higher figure, not a forecast:

1. $1,000 a month in ad spend, paid directly to Google.
2. At about $40 per lead, roughly 25 inquiries.
3. If 8 book a consultation and 5 book treatment, each new client cost about $200 in ad spend.
4. Our management fee is a flat $300 a month on top.

A client who comes back every few months is worth several first visits, so rebooking decides whether that math works. Related categories such as Facial Spa, Hair Removal Service and Weight loss service appear on Google's US Local Services Ads list; there is no med spa category as such. For how we set accounts up, see Google Ads management.

Automations that fit how a med spa works

1. Rebooking by treatment window. Each treatment type sets its own reminder: the interval your providers recommend for injectables, the series spacing for laser. Clients get a booking link when they are due, not a monthly blast.
2. Consultation intake. Medical history and consent forms are completed before the visit and filed to the client record, with provider review flagged where needed.
3. Package and membership tracking. Remaining sessions and renewal dates are tracked, and clients are told before a package expires.
4. Photo consent log. Consent for before-and-after use is recorded with the photo, so marketing only ever uses photos with consent on file.

The privacy rules depend on your setup. HIPAA's definition of a covered entity includes health care providers who transmit health information electronically in connection with a covered transaction, typically insurance billing. If you are not covered by HIPAA and you offer an app or portal that pulls health information from multiple sources, the FTC's Health Breach Notification Rule may apply, and it treats sharing health data without authorization, for example with advertisers, as a breach. Settle which applies to you with your attorney before we build intake.

An illustration of the rebooking value, assumptions written out: 300 injectable clients, 20% who drift past their window without rebooking, and $400 a visit is $24,000 in visits worth a reminder.

Reminder texts need consent under the TCPA, and the FCC has ruled that AI-generated voices are "artificial" under that law.

Honest limits

If most of your clients come from referrals and social media, fix rebooking before buying search ads. And if you have not settled whether HIPAA or state health privacy law applies to you, do that first; we will not guess.

No lock-in

The ad account, the site and the workflows belong to you. Management is month to month with 30 days' notice, and treatment decisions stay with your licensed providers.

Book a free 30-minute call when it suits you.