Questions, answered.
How much does med spa marketing cost?
We price med spa marketing after a free strategy call. The quote depends on how many treatments, providers and locations you have, and on the shape your site and profiles are in. There's no fixed package price for it on our site. For a spa that's still opening, the Marketing Startup Kit is $7,997. Ad spend is billed by the ad platforms.
Can we advertise injectables on Google Ads?
With limits. Google requires its healthcare certification before you target prescription drug terms as keywords, and we check the ad text against the same policy. Its health policy for personalized ads also covers injections, so those campaigns can't use remarketing lists or uploaded client lists. We check both rules before launch.
Can we use before-and-after photos in ads and on our website?
On your website, yes, with care. Each photo needs the client's written OK, and the FTC reads a result in a client testimonial as one other clients can expect, unless you show what's typical. Ads are stricter. Meta's health and wellness standard sets its own rules for before-and-after images, and they vary by treatment, so we check each ad against the current text before launch. Your medical director approves which sets run in either place.
Does HIPAA apply to our med spa's marketing?
It depends on whether your practice is a covered entity. HHS says a provider is covered when it electronically sends health information in connection with certain transactions, such as claims to health plans. If you're covered, HHS's tracking guidance applies to your site, apart from the part a federal court vacated in June 2024. If you aren't, the FTC still expects you to protect health information. Your lawyer confirms your status.
Can we give clients a discount for leaving a review?
No. Google's Maps policy doesn't allow payment, discounts or free services in exchange for any review. The FTC's rule separately bans rewards that depend on a review being positive. We set up one honest request for every client after a visit, with no reward attached.
Do you work with med spas outside Indiana?
Yes. We take on practices in any U.S. state and work with them remotely. Local search work is planned town by town for the areas you serve, and calls, profiles and reporting work the same way wherever you are.
What should we have ready before we start?
Access to your Google Business Profile, ad accounts, analytics and website, plus your treatment list and the prices you publish. We also need the person who approves treatment claims, usually your medical director, and the person who owns privacy choices. If you use client photos, have the signed releases ready.
Can you set up a chat assistant for after-hours questions?
Yes. We've built a website chat assistant and 24/7 AI helpers for a client business. For a med spa, the assistant answers questions about hours, published prices and booking, and it hands any medical question to your staff. If your practice is a covered entity, your privacy officer approves what it collects before launch.
“I had a great experience working with Jeff…”
“…drove a noticeable uptick in leads within just a few weeks…”
Based in Indianapolis, we serve businesses across central Indiana, including Carmel, Fishers, Zionsville, Westfield, Noblesville, Greenwood, Avon and Plainfield.
We also work with clients across the United States.
What med spa marketing covers
Short answer: Med spa marketing puts your treatments in front of nearby people who are ready to book a consultation. The work covers search, Google and Meta ads, your website and the reviews people read before they call. Each part has its own rules for health claims, photos, reviews and tracking, and we plan around them from the first day. We quote the work after a free strategy call.
As a medical spa marketing agency, we take on med spas and aesthetic practices anywhere in the United States. That includes a single injector's office and groups with several locations. It's part of our national SEO and AI search work, set up for practices that sell injectables, lasers, skin treatments and wellness services. You can hire us for every channel in the table or start with one. If you run a dental office, our dental marketing page fits your practice better.
| Channel | What we do | The rule we plan around |
|---|---|---|
| Med spa SEO | Write a page for each treatment you sell, set up your Business Profiles and speed up pages that load slowly on phones. | Google's guidelines for practices with more than one provider |
| Google Ads | Run search ads for the treatments and towns you choose, each one sent to a page that answers the search. | Google's rules on prescription drug terms and health audiences |
| Meta ads | Build Facebook and Instagram campaigns for consultations and the offers you approve. | Meta's age limit and photo rules for cosmetic procedures |
| Website design | Design treatment pages, provider bios, a booking path and a photo gallery your team can update. | FTC guidance on testimonials and HHS guidance on tracking |
| Reviews | Set up one request for every client, plus replies that never reveal a treatment. | The FTC's reviews rule and Google's review policy |
Med spa SEO: show up for each treatment people search
Each treatment you sell is its own search. Someone looking for lip filler and someone pricing laser hair removal ask different questions, so each treatment gets its own page. Your Google Business Profile lists the same treatments under the same names, so your profile and your site tell people the same thing.
A treatment page answers what a client wants to know before booking. It says who performs the treatment, how the consultation works and where the price starts. It also covers how long a visit takes and what aftercare involves. Your medical director or lead provider approves every line about results, safety and downtime before the page goes live. We write these pages so AI tools can quote them correctly too, and nobody can promise a tool will name your spa.
Business Profiles for the practice and each provider
Google treats doctors, dentists and similar professionals with their own clients as individual practitioners. A provider qualifies for their own profile if they work in a public-facing role. Clients also have to be able to reach them directly at the verified location during posted hours. Support staff don't get one.
When several providers work at one location, Google says the practice should have its own profile, separate from each provider's. Each provider's profile title "should include only the name of the practitioner." For a solo provider under a spa's brand, Google recommends sharing the spa's profile, named with the brand first and then the provider's name. We set up the practice profile first and add provider profiles only where Google's test fits. Groups with several locations get a profile and a page on the site for each location. Our Google Business Profile optimization service covers categories, services, photos and posts.
Med spa website design that books consultations
Your website's main job is getting a visitor to a booked consultation or a call. We design for phones first and test the booking path on a phone before launch, from the first tap to the confirmation screen. If your booking software can't hold a time slot online, the page says a team member will call to confirm.
A med spa site we design includes these parts:
- A page for each treatment, with the price you publish or the range a consultation confirms
- Provider bios that list each person's license and training, written with them
- A booking path that works with the scheduling software you already use
- A before-and-after gallery with only the photos clients agreed to share
- Forms and tracking your privacy officer has signed off on
A before-and-after photo works like a client testimonial, and visitors read it as the result they can expect. The FTC says endorsements claiming specific results "usually will be interpreted to mean that the endorser's experience reflects what others can also expect." Labels such as "Results not typical" or "Individual results may vary" "won't change that interpretation," it adds.
So each photo set names the treatment, the number of sessions and the time between the photos. Your medical director confirms the set shows a result clients can generally expect, or the caption says what they usually see. Each client photo also needs the client's written OK for public use, kept on file with the image. Our website design process covers speed, accessibility and how your team edits pages after launch.
Google Ads and Meta ads: what each platform allows for med spas
- 1. Name
- Move to the name field.
- 2. Email
- Keep keyboard focus visible.
- 3. Send inquiry
- Complete the action without a mouse.
Paid ads reach people on Google while they search and on Facebook and Instagram while they scroll. Both platforms have health rules that change how a med spa campaign gets built. We check them before we write a single ad.
Google Ads
Google's policy on prescription drug terms in the U.S. says "you must be certified in order to keyword-target these terms." If you want to bid on the name of a prescription product your providers use, your account needs Google's healthcare certification first. We check every keyword and every line of ad text against that policy before launch.
Google's policy on health in personalized ads covers invasive procedures, and it lists cosmetic surgery and injections. Ads in that group can't use audiences you build, such as remarketing lists of past visitors or uploaded client lists. We build injectable campaigns around search terms and locations to fit that rule. Our Google Ads management covers bids, search terms and conversion setup.
Meta ads on Facebook and Instagram
Meta says ads for cosmetic products, procedures or surgeries "must be targeted to people at least 18 years or older." Its health and wellness standard also sets rules for before-and-after images, and those rules vary by treatment and change over time. So we check each gallery ad against the current text before it runs, and your medical director approves which photos appear. Meta's ad standards also bar ads that imply or try to create negative self-perception to sell diet, weight loss or other health products. Any before-and-after ad that runs still has to pass the FTC test above, so it shows a typical result or says what clients usually see.
Tracking rules changed too. Meta's developer pages say that beginning September 2, 2025, it would roll out "more proactive restrictions on custom conversions." The targets are conversions that may suggest information its terms don't permit, such as a health condition. A flagged conversion can't be used to run campaigns. We name conversions after the step, like a booked consultation. Treatment and condition words stay out of the event names and page addresses Meta reads. Our Meta ads management covers the rest of the setup.
Reviews and testimonials under the FTC rule and Google's policy
Two sets of rules shape how a med spa asks for reviews. The FTC's Consumer Reviews and Testimonials Rule has applied since October 21, 2024. Fake reviews are banned. So is a reward that's paid only if the review is positive, or only if it's negative. If you ask staff or their families for reviews, they need to disclose the relationship. A business also can't use groundless legal threats or intimidation to get a bad review removed.
Read more
Google's Maps policy is stricter about rewards. It doesn't let a business offer payment, discounts or free goods or services in exchange for any review. It also bars discouraging negative reviews or asking only happy clients. Businesses shouldn't ask for specific content either, and Google names reviews that identify a staff member as an example. So we don't ask clients to mention their injector by name.
We set up one review process for a med spa. Every client gets the same request after a completed visit, by email or by text if they agreed to texts. Clients write it in their own words, and nothing is offered for it. Nobody asks in the treatment room, since Google also warns against pressing people to review while they're on the premises. Jeff asks each of Trojan Digital Marketing's own clients to review us honestly, good or bad, and leaving one is up to them.
Replies thank the reviewer and never confirm the person is a client or mention a treatment. HHS has settled with a psychiatric practice and a dental practice whose replies to online reviews disclosed patient information. Our review reply workflow lays out the steps.
Influencer posts follow FTC rules as well. The FTC counts "free or discounted products or services" as a material connection. A post about a comped treatment has to say so clearly, in the post itself. Our social media management sets that up with each creator before anything goes out.
Treatment claims your medical director signs off on
The FTC's health products guidance covers "foods, dietary supplements, drugs, and other health-related products." Claims about their health benefits or safety need "competent and reliable scientific evidence," it says. Many med spa treatments rest on a drug or a device, so we hold treatment claims to that bar. Each one goes to your medical director before it runs.
| Claim in a draft | What it needs first |
|---|---|
| "Results last a year" | Support for that time frame for the product you use, plus your medical director's OK |
| "No downtime" | A plain description of the recovery your providers see, in their words |
| "Painless" | A description of the numbing or comfort steps you actually use |
| "FDA approved" | The exact FDA status for that product and that use, checked in FDA's own records |
| A client quote about a result | Proof the result is typical, or a line saying what clients generally see |
Your state may also have rules on who can perform and advertise some treatments. Your counsel or medical director confirms them for your state, and we write to their answer.
Tracking, forms and HIPAA after the 2024 court ruling
Start with one question: is your med spa a HIPAA covered entity? HHS says, "Every health care provider, regardless of size, who electronically transmits health information in connection with certain transactions, is a covered entity." Those transactions include claims sent to health plans. HHS adds that using email doesn't make a provider covered, so a spa that never bills health plans electronically may fall outside the test. Your lawyer confirms where you stand.
If your med spa is a covered entity
HHS's tracking bulletin says a covered practice can't use tracking tools in a way that leads to "impermissible disclosures of PHI to tracking technology vendors." Trackers on pages behind a login, such as a client portal, "generally have access to PHI," HHS says. If a tracking vendor receives PHI from your site, the bulletin calls for a business associate agreement with that vendor.
In June 2024, a federal court in Texas vacated one part of that bulletin, about public pages that need no login. That part said HIPAA applies when a tool links someone's IP address to a visit to a public page about health conditions or providers. HHS appealed and then withdrew the appeal in August 2024. Its page says HHS "is evaluating its next steps in light of that order." The rest of the bulletin is still on HHS's page.
On a covered spa's site, ad pixels stay off booking, intake and portal pages unless your privacy officer approves the tool and its contract. We report from booking totals, so the reports don't need client records. A practice that bills health plans for part of its work runs more like a clinic. If yours is around Indianapolis, start with our Indianapolis medical marketing page.
If your med spa isn't a covered entity
The FTC Act still applies. The FTC said in 2023 that "Companies not covered by HIPAA still have a responsibility to protect against the unauthorized disclosure of personal health information." So we set up forms, pixels and consultation requests with the same care for every med spa, covered or not.
What we measure for a med spa
We track the steps between a search and a paid treatment, using totals from your booking and payment systems. Ad platforms count conversions their own way, and their numbers can differ from your calendar. The report shows both and says which one we trust.
- Calls, form requests and online bookings, by channel and by treatment
- Booked consultations, and how many clients show up for them
- Consultations that turn into a first treatment
- Revenue by treatment, as totals your team exports
- Cost per booked consultation for each campaign
We agree with you at the start on what counts as a booked consultation. Our guide to defining a qualified lead walks through that conversation.
How a med spa marketing project starts
- Free strategy call. We talk through your treatments, providers and locations, and the treatments you most want to grow.
- Access and approvers. You share your Business Profile, ad accounts, analytics and website, and you name who approves claims and who owns privacy.
- Tracking and profiles. We fix what gets counted, where form data goes and how your profiles read before ad spend goes up.
- Treatment pages and ads. We write or rebuild the pages for the treatments you picked, then launch ads that send people to them.
- Check-ins. We meet on a schedule you choose and adjust to what bookings and costs show.
We price med spa SEO, ads and website work after that first call. By then we've looked at your profiles, your site and the spas you compete with. Ad spend is paid to Google or Meta. If you're opening a new med spa, our Marketing Startup Kit costs $7,997. It covers a 15 page custom website, Business Profile setup, twenty blog posts, schema markup and three months of strategy calls. Your medical director approves every page and post before it goes live.
Ready to talk? Book a free strategy call. Want a look at your current site first? Run our free website audit.
Sources & further reading
- Google Business Profile Help: Guidelines for representing your business on Google
- FTC: FTC's Endorsement Guides: What People Are Asking
- Google Ads Policies Help: Restricted drug terms
- Google Ads Policies Help: Health in personalized advertising
- Meta Transparency Center: Health and Wellness advertising standards
- Meta Business Help Center: Facebook's Advertising Policy on Personal Health
- Meta for Developers: Conversion Tracking, custom conversion restrictions from September 2, 2025
- FTC: The Consumer Reviews and Testimonials Rule: Questions and Answers
- Google Maps User Generated Content Policy Help: Prohibited and restricted content
- HHS: Agreement with a New Jersey health care provider that disclosed patient information in response to negative online reviews
- HHS: Settlement with a dental practice over disclosures in replies to online reviews
- FTC: Disclosures 101 for Social Media Influencers
- FTC: Health Products Compliance Guidance
- HHS: Summary of the HIPAA Privacy Rule
- HHS: Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates
- McDermott Will and Emery: OCR Withdraws Appeal in AHA v. Becerra
- FTC: FTC and HHS Warn Hospital Systems and Telehealth Providers about Privacy and Security Risks from Online Tracking Technologies (July 2023)
Talk with Trojan Digital Marketing
Based in Indianapolis, we serve central Indiana and clients across the United States.



