Most med spa problems do not begin with a dramatic lawsuit. They begin with an unclear expectation, an undocumented training gap, or a staff member handling a client situation differently from everyone else. Those inconsistencies drain margin and become harder to defend as the practice grows.
A well-built med spa employee handbook turns expectations into an operating system. It defines conduct, compensation, safety, privacy, clinical oversight, and accountability in language your team can follow and your practice can enforce consistently.
The goal is not to copy a generic HR template. It is to document how your aesthetics practice actually operates, where risk sits, and what good performance looks like. Start by understanding why a written handbook is operational insurance, not administrative paperwork.
A med spa handbook is not an HR formality. It is the operating framework that tells every employee what safe, consistent, defensible work looks like when the owner or medical director is not standing in the treatment room.
The numbers make that exposure clear. Only 22.52% of medical spas have a physician on-site while cosmetic treatments are administered, and non-physician staff average 2.1 staff members for every MD or DO affiliate. The same research identifies significant variation in staff training and supervision across the industry. That evidence is a warning for owners, not an academic footnote.
When oversight is distributed, verbal instructions are not enough. Your handbook should define who may perform each service, what training must be completed, and when supervision is required. How concerns are escalated and what documentation belongs in the patient record should also be specified. It should also distinguish practice rules from step-by-step procedures and clinical treatment parameters. A policy that says “follow safety standards” leaves too much room for interpretation. A usable policy states the required action, the responsible role, and the record that proves it happened.
That structure is supported by the clinical literature. Policy and procedure protocols are described as a must-have for every aesthetic provider because they support safety and standardization. Written protocols create accountability before an incident, not after an attorney asks what your team was supposed to do.
The financial case is just as direct. Consistent expectations reduce preventable rework, uneven patient experiences, training gaps, and margin leakage caused by improvisation. They also make the practice less dependent on one owner’s memory. Start by standardize operations, then connect the handbook to onboarding, coaching, and performance reviews.
It is also a retention tool. Good employees want to know how decisions get made, how success is measured, and whether standards apply consistently. Your staffing and hiring process becomes stronger when candidates can see the operating culture before they accept the role. A documented system protects today’s margins and builds the repeatable enterprise value a future buyer can evaluate.
Build the handbook as one operating system, not a stack of copied HR pages. Each section should tell your team what the practice expects, what happens when a standard is missed, and where clinical or managerial judgment begins. The distinction matters: policies define the rules, procedures explain the step-by-step actions, and clinical protocols specify treatment parameters. That framework keeps employment expectations separate from instructions that belong in your clinical governance system. This policy and procedure distinction is a useful starting point.
| Document type | What it answers | Example in a med spa handbook |
|---|---|---|
| Policy | The rule your team must follow. | Commissions are paid on net collected service revenue. |
| Procedure | The step-by-step action to complete a task. | How the front desk collects a no-show fee at the register. |
| Clinical protocol | The exact treatment parameters and clinical limits. | Authorized operators, laser settings, and supervision for each service. |
Use the following seven sections as the build sequence. The later sections of this guide will work through each one in detail.
Do not download a generic handbook and swap in your logo. The Society for Human Resource Management warns that boilerplate language can omit critical protections and create problems through overbroad social media rules or weak employment disclaimers. Review each provision against your state law, ownership structure, staffing model, and clinical services. A handbook earns its value when your managers can use it consistently on a difficult Tuesday, not when it looks complete in a shared drive.
Your team represents the practice whenever a client sees a uniform, treatment room, or branded account. The handbook should make that responsibility operational, especially when staff create content around injectables, laser treatments, or before-and-after results.
Use direct language employees can apply without guessing. Your policy might state:
Client content policy: “Employees may not photograph, record, identify, or publish any client, treatment, chart, conversation, or image from the practice without written authorization from the client and prior written approval from management. Before-and-after photos require the practice’s approved consent form for each intended channel. Consent for treatment does not equal consent for marketing. Do not use a client’s name, initials, location, appointment details, or recognizable features unless the authorization expressly permits it.”
Require approved storage and workflow, too. Personal phones should not retain client images after approved transfer. Staff should not send treatment photos through personal messaging apps, post identifiable content from a treatment room, or use hashtags that reveal a client’s condition or visit. A permission form is not a substitute for judgment. If there is any doubt, the content stays private.
Define who may post for the practice, who approves captions and images, and what happens when a post is removed. For example: “Only authorized employees may publish on practice accounts. All client-related content must use the approved review process. Employees may not imply that personal opinions are statements from the practice.”
Give employees a personal-account disclaimer such as: “Opinions expressed here are my own and do not represent [Practice Name].” However, do not write an overly broad rule that bans employees from discussing wages, schedules, or working conditions. The Society for Human Resource Management cautions against restrictive social media policies that can interfere with employees’ rights under the National Labor Relations Act. Have employment counsel review the final language.
Good staffing and hiring processes support this policy before the first post goes live. Train new hires on privacy, consent, account access, and escalation. Document violations consistently, preserve the original post, and investigate before disciplining anyone. The goal is not to silence your team. It is to protect clients, maintain trust, and make conduct expectations enforceable.
Compensation and attendance rules become expensive when every manager explains them differently. Write the policy so a provider can calculate pay, a front-desk lead can collect a fee, and an owner can defend the decision without improvising.
A practical starting point is a 10% commission on collected service revenue, paid on the next regular payroll after the client payment clears. For example, if a provider performs $8,000 in eligible services during March, but the practice collects $7,400 after refunds and unpaid balances, the commission is $740, not $800. Exclude retail, tips, discounts, refunds, chargebacks, and unpaid invoices unless your employment agreement says otherwise.
Use language this specific: “Commission is calculated on net collected service revenue received by the practice. Commissions are reviewed monthly and paid on the second regular payroll following month-end, provided the employee remains eligible under this policy.” Have employment counsel confirm the formula and timing for your state. Paying from collections protects margin while keeping the calculation visible to the team.
Set one standard across providers: “Clients must cancel or reschedule at least 24 hours before the appointment. A late cancellation or no-show may result in a fee equal to 50% of the reserved service, up to $150. The fee is waived once for a documented emergency and is charged after the second missed appointment within 90 days.”
Require a card on file for appointments that meet your risk threshold. A practical threshold covers services priced at $250 or more, or appointments longer than 90 minutes. The front desk should document the notice time, contact attempts, and reason for any waiver. Staff should never invent exceptions in the moment. Owners can approve a documented exception, but the same rule must remain the default.
Review the policy quarterly against collected revenue, commission expense, cancellations, and no-show recovery. If the fee creates client friction, adjust the threshold deliberately, not provider by provider. Consistency is what protects both profitability and trust.
Safety language in your handbook cannot be a vague promise to “follow regulations.” It must tell each team member what they may do, what they may not do, and when they must stop and escalate. OSHA workplace safety and hazardous-material requirements are not optional for medical spas. Your handbook should identify required protective equipment, sharps handling, spill response, incident reporting, and chemical storage, with links to the applicable OSHA standards.
Start with scope of practice. List every treatment your practice offers, the license or credential required, the training threshold, and the level of supervision required in your state. Delegation must follow the clinician’s legal scope, not a staffing shortage or an employee’s confidence. Document who may assess a patient, administer an injectable, operate a laser, approve a treatment plan, and respond to an adverse event. Because only about 22.52% of medical spas report having a physician on-site during cosmetic treatments, written oversight is a business necessity, not paperwork. Use this guide to define staff oversight roles.
Laser protocols should name the authorized operators, required training, room controls, protective eyewear, device checks, treatment parameters, emergency steps, and documentation requirements. Do not rely on a manufacturer’s manual sitting in a drawer. Require competency verification before independent treatment, then schedule refreshers and incident reviews. Research indicates that comprehensive laser safety programs and standardized staff training protocols significantly reduce clinical risk. Cite the supporting evidence from laser safety research in the handbook’s reference section.
HIPAA rules apply to how staff handle, store, and share protected health information. Write the workflow in plain language: verify identity before discussing treatment, use approved systems for photos and messages, lock screens, limit access by role, and report misdirected communications immediately. Personal phones and social platforms should never become an unofficial charting system. The U.S. Department of Health and Human Services provides the controlling HIPAA guidance.
Finally, separate policies, procedures, and clinical protocols. Policies state the rule, procedures explain the steps, and clinical protocols specify treatment parameters. Standardized onboarding and documented training reduce variability and improve outcomes, according to aesthetic practice research. Require a signed acknowledgment, competency checklist, and annual review for each safety-critical role.
Your handbook should protect the relationships and operating knowledge you paid to build. A departing employee should not walk out with your client list, recruit your team, or create confusion about what happens after resignation. Have employment counsel adapt these provisions to your state before using them. A clause that is too broad may be unenforceable.
A practical client non-solicit provision might read:
Client protection: “For 12 months after employment ends, the employee will not directly or indirectly solicit, divert, or provide competing services to any client or prospective client with whom the employee had material contact during the final 12 months of employment, using confidential practice information or relationships developed through the practice.”
Define “client” and “material contact” precisely. Do not assume every person in your database is covered. Add a separate employee non-solicit provision if appropriate: “For 12 months after separation, the employee will not knowingly recruit or encourage any practice employee or contractor to leave the practice.” State law may limit these restrictions, and some jurisdictions treat client and worker restrictions differently.
Then make PTO and benefits operationally clear. Employees should be able to calculate what they earn, when they can use it, and what happens at separation. For example:
Write benefits with the same precision. Identify eligibility dates, waiting periods, enrollment deadlines, employer contributions, and the right to amend or discontinue a plan. Include a conspicuous disclaimer: “This handbook describes current policies and does not create an employment contract. Employment remains at will where permitted by law. The practice may revise policies prospectively, subject to applicable law.”
Owners standardizing HR often need help aligning these clauses with hiring, compensation, and daily operations. The Growth Hub provides ongoing advisory support for building that system without leaving expensive gaps.
Progressive discipline is the final safety net in a med spa employee handbook. It gives owners a consistent response when someone violates a policy, misses a performance standard, or creates avoidable risk. It also prevents supervisors from improvising consequences based on frustration or favoritism.
A weak or missing discipline policy creates exposure because employees may receive inconsistent treatment, unclear expectations, or promises the practice cannot support. The Society for Human Resource Management warns employers about common handbook mistakes, including boilerplate language and policies that do not clearly reflect how the business operates. Treat this section as an operating process, not legal decoration.
Use the same sequence whenever the circumstances allow. Serious misconduct, safety violations, harassment, theft, or patient-endangerment concerns may justify skipping steps, but the reason for doing so must be documented and reviewed.
Example record: “March 14: Verbal warning issued to Jordan Lee for failing to complete the end-of-day sharps-container check on March 12 and March 13, despite the posted closing checklist. Jordan stated the front desk was short-staffed. Manager reviewed the checklist, reassigned closing coverage, and required completion for every shift beginning March 15. Follow-up scheduled March 22. Further missed checks may result in written discipline.”
Have employment counsel review the finished policy for local requirements, protected activity, and consistency with the rest of the handbook. The goal is not automatic termination. It is a fair, evidence-based process that protects the practice and gives capable employees a clear chance to correct course.
Not universally. Requirements vary by state, local jurisdiction, workforce size, and the subjects covered, but a written handbook gives your practice a consistent record of expectations. It should complement, not replace, required notices, clinical protocols, privacy training, and state-specific employment advice.
Have an employment attorney review employment policies, wage and hour language, leave, discipline, restrictive covenants, and state requirements. Your medical director or qualified clinical advisor should review scope of practice, delegation, treatment protocols, and supervision. This division of review prevents a handbook from being legally polished but clinically incomplete.
Review it at least annually and whenever laws, staffing models, services, equipment, compensation plans, or privacy and safety procedures change. Record the revision date, obtain approval from the appropriate advisors, and document how employees received and acknowledged the update.
Yes, if staff can access clients, treatment areas, or practice accounts. The policy should prohibit posting identifiable client information or treatment images without documented authorization, define who may speak for the practice, and explain approval requirements. Avoid overly broad restrictions on lawful employee discussion, a concern identified by SHRM: SHRM’s employee handbook guidance.
Usually, it should not. Include a clear statement that the handbook is not a contract and does not change at-will employment where that arrangement is lawful. Have counsel tailor the disclaimer and ensure compensation, benefits, discipline, and termination language does not accidentally create promises the practice cannot defend.
Every med spa employee handbook you write is only as good as the follow-through behind it. A policy you never train, enforce, or update is a liability dressed up as documentation.
If you want a second set of eyes on your handbook, your compensation model, or the operational systems that make policy stick, that is exactly what Projected Growth Consulting does every day for med spa owners. Kelly Smith and her team build the systems, retention, and leadership structures that turn a defensible handbook into a scalable, sellable practice.
Book a free practice strategy call and map out your next move before the next hire starts.
Written by
Founder & CEO, Projected Growth Consulting
Kelly Smith is a med spa business consultant with 20+ years of industry experience and the founder of Projected Growth Consulting. A former 7-figure med spa owner, published author of 5 books, and international speaker, Kelly has helped 6,000+ practices generate over $250 million in additional revenue through proven growth strategies.
