Coast Studio
Book a Consultation
  • Methodology
  • Growth LabsEcommerce & DTC Scale Regulated MarketsHealth, Fintech & Legal
  • Creative
  • Case Studies
  • Blog
  • About
  • Methodology
  • Growth Labs
  • Regulated Markets
  • Creative
  • Case Studies
  • Blog
  • About
  • Book Consultation →
Home / Blog / Medspa & Aesthetics Ad Tracking

HIPAA Tracking · Playbook

How Should a Medspa or Aesthetics Clinic Track Ad Conversions?

Last updated: August 10, 2026 ยท By Jason Garrett, Founder, Coast Studio. Not legal advice — review your setup with healthcare counsel. Full legal landscape: The State of HIPAA Tracking.

A medspa is part retail, part medical, and its tracking has to respect the medical half. Botox, laser, and injectables are administered under medical supervision, and a booking for them is health information. The retail glow of the category tempts owners to run a standard e-commerce pixel setup. That is the mistake.

Where the line sits

Selling a $40 serum is retail. Booking a consultation for a prescription injectable or a laser treatment for a skin condition is a medical event tied to an identifiable person. When your booking flow, URL, or confirmation names a treatment, a pixel that fires there transmits health information to a platform that signs no BAA. Some medspas are covered entities; many aren't — but the FTC and state law reach you either way.

The setup that works

  1. Split retail from treatment. Product sales can run a normal pixel. Treatment bookings route through server-side, scrubbed conversions.
  2. Neutralize treatment URLs. /book/botox becomes a neutral path; keep the treatment detail in on-page content, not the address.
  3. Use neutral conversion names. consult_booked, not filler_consult.
  4. Keep the pixel off the booking and confirmation pages where a treatment is named next to contact details.
  5. Watch before/after galleries. A user tagged as viewing a specific treatment gallery is a health signal; don't build audiences from it.

Creative that converts without naming the condition

Sell the outcome and the experience — "refresh, on your lunch break" — and keep condition-specific claims and identifiable before/after testimonials out of the ad. This clears both platform review and regulator scrutiny, and it usually performs better anyway.

Measurement

Run scrubbed conversions for optimization and confirm real lift with geo experiments. For multi-location groups, geo holdouts also tell you which locations paid media actually moves.

FAQ

We only do aesthetics, no diagnoses. Does this still apply? Yes. Injectables and lasers are medical procedures, and a booking implies one. The FTC and state laws apply regardless of HIPAA status.

Can we retarget people who viewed a treatment page? That audience encodes a health interest. Retarget from general brand pages with consent instead; skip treatment-page retargeting.

Is product-only e-commerce fine with a normal pixel? Generally yes, as long as the flow never mixes treatment bookings into the same tagged pages.

Related

  • The State of HIPAA-Compliant Marketing Tracking
  • Google Ads for a Healthcare Clinic
  • Meta Ads for Telehealth Under HIPAA
  • Measure ROAS Without Sending PHI
JG

Jason Garrett

Founder & CEO of Coast Studio, a performance marketing agency for regulated industries — health & wellness, healthtech, fintech, and legal. Jason writes about privacy-compliant tracking and paid acquisition for publications including Ours Privacy and Curve. Not legal advice — validate decisions about your stack with your privacy counsel.

Connect on LinkedIn →

Medspa ad tracking, done right

Coast Studio builds compliant paid media for medspas and aesthetics groups — split retail and treatment tracking, scrubbed conversions, and campaigns that scale across locations.

Book a Consultation
Coast Studio

© 2026 Left Coast Agency, LLC.

AboutJason GarrettBlogPrivacyTermsContact
Google Partner