California med spa marketing that names the right doctor and quotes the whole price

A Medical Board consumer article on med spas, first printed in its January 2007 newsletter and still posted, tells patients what to ask: whether the doctor is board certified in an appropriate specialty, what the nurse or physician assistant's qualifications are, where the supervising doctor is, and how to check licenses at rn.ca.gov and pac.ca.gov.

A bio that answers those questions in that order, with each provider's license type and the board that issued it, is doing the patient's homework for them. The same article warns patients about procedures "heavily marketed, with high-pressure sales techniques promising unrealistic results", which is a fair description of a countdown-timer promotion.

• "Board certified" has a legal meaning here. Under Section 651(h)(5)(C) a physician may use it only with certification from an ABMS member board, a board with an ACGME-accredited training program, or one the Board approved before 2019, and the full name of the certifying board has to appear with comparable prominence. Advertising a specialty without certification is allowed.
• Nurse practitioner bios stay NP bios. The Board of Registered Nursing's AB 890 page says a 103 NP must work in a group setting with at least one physician, and a 103 or 104 NP must post a notice and tell every new patient verbally that a nurse practitioner is not a physician and surgeon. The Board's rulemaking record notes that no national certification for a plastic surgical NP exists. An "independent NP injector" offer goes to counsel before it goes into an ad.
• Facial menus written for estheticians avoid medical promises. In its answer on microdermabrasion, the Medical Board treats removing scarring, blemishes or wrinkles as medical treatment.
• Languages are an advertisable fact. Section 651(h)(4) expressly allows a statement of languages other than English fluently spoken by the practitioner or someone in the office. "Se habla español" or "Nói tiếng Việt" earns its place in the ad only when the person who speaks it answers the phone or holds the syringe.

A spa's biggest tickets are sold before the treatment happens: a six-session laser series, a bank of neurotoxin units, a skin package paid off over a year. California has a statute written for exactly that sale when it is financed, and Section 651 reaches the way it is priced.

• Financing taken at the front desk. When staff take a patient's application for a third-party health care credit card or loan, Business and Professions Code 654.3 applies. The patient gets a written treatment plan listing each service and its estimated cost, then signs a one-page notice in at least 14-point type which says, among other things, that the card or loan is not a payment plan with the office. The patient fills out the application, not the staff. The account may not be charged more than 30 days before the treatment it pays for, and on the patient's request the practice refunds the lender within 15 business days for treatment not yet given.
• What that does to the offer. A "six sessions, financed today" promotion cannot put all six on the card at signing when the sessions run weeks apart. The ad can still sell the series at one exact price; the checkout charges each session as its date comes inside the 30-day window.
• Unit banks and bonus units. Section 651(c) requires the price of each product or service to be clearly identifiable and bars price advertising that misleads through "bait, discount, premiums, gifts". A "buy 40 units, get 10" bank states the exact price paid, the units it buys and the treatment they cover. We found no California rule specific to unused injectable units, so whether they can lapse, and how a refund works for a patient told to stop treatment, are terms to settle with counsel and print at checkout.
• Refer-a-friend credits and deal sites. Business and Professions Code 650 makes it unlawful for a licensee to offer or accept consideration for referring patients. How it applies to refer-a-friend credits and deal sites is a question to settle with counsel before the program launches, not after.

Two general consumer laws apply as well: a membership that renews on its own falls under the Automatic Renewal Law in section 17602, including cancellation online when it was sold online, and a gift certificate sold to a patient may not expire under Civil Code 1749.5, with balances under $15 redeemable in cash.

Many single-location spas sit below the CCPA's revenue threshold, which CalPrivacy set at $26,625,000 in annual gross revenue from January 1, 2025. The law that reaches them anyway is the Confidentiality of Medical Information Act. It applies to anyone licensed under the healing arts division of the Business and Professions Code, with no size test, and Civil Code 56.10 bars a provider from using medical information for marketing without the patient's authorization. If that information is released in violation of the act, even negligently, a patient can recover nominal damages of $1,000 without showing any harm under Civil Code 56.36.

The clearest California example of how a health signal in tracking is treated comes from a different law and a different kind of business: a CCPA case against a health publisher. The Attorney General's $1.55 million Healthline settlement in July 2025 barred the company from sharing article titles that suggest a reader has been diagnosed with a condition. On a spa site the same signal travels in a page address, an event named after a treatment or a page title sent with a pixel.

So we name conversion events neutrally, keep intake answers and treatment history out of every ad platform, and build audiences from site visits rather than patient records. Beyaoshy signs a HIPAA business associate agreement with practices that are covered entities.

• No nurse persona for the bot. Business and Professions Code 4999.9 prohibits AI wording that implies the care or advice comes from a licensed person, and each use counts as a separate violation. "Nurse Ava" and "your RN will reply" are out.
• Say it is a bot. Section 17941 makes it unlawful to use a bot that hides its artificial identity to encourage a sale, unless it discloses clearly that it is a bot.
• Clinical messages and recordings. Disclaimers on clinical messages drafted by generative AI and all-party consent for recorded calls are in our texting, AI answering and call recording guide.

Website tracking suits are about to change. SB 690, signed September 30, 2026 as Chapter 976 and in effect January 1, 2027, will leave pen register suits over tracking on websites and apps to the Attorney General, and it reaches back to pending claims filed within two years before that date. Until then private suits can still be filed, and Pillsbury's summary notes that wiretap and eavesdropping claims stay open to private plaintiffs, so chat widgets and session recording still carry that risk. Whether your own widget or session recorder is exposed is a question for a privacy attorney.

Google's restricted drug terms keep most spas from bidding on brand names in every state; our injectors page covers that. Two things on Google are particular to California. Local Services Ads list a "Waxing or Hair removal" category for California and Florida only, described as "facial and body hair treatment, and eyebrow styling", and the screening requirements may include liability insurance and state license checks. Confirm with Google that a physician-supervised laser service qualifies before building on it; how Local Services is folding into Google Ads is on our Google Ads page.

Palm Springs, Palm Desert and the rest of the Coachella Valley run on a different calendar from the coast. A study in the journal Climatic Change, as The Weather Network reported, put the snowbird season at the first week of November through the second week of April and found 24 to 27 percent of the valley's adults are seasonal residents. A spa there has patients who live elsewhere half the year, so the budget, the profile posts and the rebooking reminders follow that season instead of running flat, and the reminder schedule asks which of them still count as an existing relationship in October.

• Early November to mid-April. The desert season above: launch the valley's campaigns before the first week of November and plan the last appointments of the season before patients leave in April.
• January 1, 2027. SB 690 takes effect, moving website pen register suits to the Attorney General.
• After the governor signs the year's bills. SB 690 was signed on September 30, 2026. A review of price, photo, financing and tracking templates in October leaves time to change them before the new year's laws apply.
• About 90 days before your permit's own expiration date. The Board's renewal notice arrives, renewal can only be paid within that window, and mailed renewals take six to eight weeks, so the name on every ad depends on acting early in it.