A filler consultation generates more paperwork than most patients realize, and more than most clinics manage well. There’s general treatment consent, product-specific consent disclosing the particular neurotoxin or filler brand being used, photo consent for the clinical record, and — often handled separately, sometimes not at all — a distinct consent for using those same photos in marketing.
In a lot of practices, this collapses into a single signature on a generic form that was templated years ago and never revisited. That’s a problem on two fronts: it’s weaker legal protection for the practice, and it’s a worse experience for the patient, who’s effectively been asked to consent to several different things without any of them being made clear individually.
Why cosmetic consent isn’t the same as general medical consent
Medical consent is usually built around a single question: does the patient understand and agree to a specific procedure and its risks. Cosmetic consent has to answer that question and several others at once.
It needs to disclose the specific product being used — brand, not just category, since “filler” covers products with materially different safety profiles. It needs to document realistic expectations, since dissatisfaction in aesthetics is rarely about a procedure going wrong and far more often about a result not matching what the patient pictured. And it needs to separate clinical photo documentation, which is standard practice and arguably part of the medical record, from marketing use of those same photos, which is a commercial use the patient may or may not want to grant — and can reasonably withdraw later.
Treating these as one blanket signature creates real exposure. A patient who agreed to clinical photos for their chart didn’t necessarily agree to having their face on the clinic’s Instagram, and conflating the two is the kind of thing that turns into a complaint, or worse, when a patient notices their photo being used somewhere they didn’t expect.
What a proper consent workflow covers
Procedure-specific and product-specific consent
Generic “cosmetic procedure consent” forms tend to undersell the specifics that matter for informed consent — and for the practice’s own protection if something goes wrong. A consent form for a neurotoxin injection should name the product, the treatment area, and the recognized risks for that specific product, not a paragraph that could apply to any injectable.
Separated photo consent, by purpose
Clinical photos and marketing photos should be two distinct consent decisions, captured separately, each with its own record of when it was given. A patient should be able to say yes to clinical documentation and no to marketing without it being an awkward conversation or a form that doesn’t accommodate the distinction.
A consent record that’s easy to produce later
If a patient disputes what they agreed to, or a regulator asks for documentation, the practice needs to produce the specific consent that was signed, when, for what — not “we have a folder of signed forms somewhere.” Digital consent with a timestamp and a stored copy of exactly what was presented to the patient is materially easier to retrieve than paper in a filing cabinet.
Withdrawal of marketing consent, honored going forward
Patients change their minds about appearing in marketing material, sometimes years after a photo was taken. A workflow that can’t easily flag “this patient withdrew marketing consent, pull any photos in use” creates ongoing risk that doesn’t go away just because the original form is on file.
Before/after photos: documentation and liability at once
Before/after photos serve two purposes that are easy to conflate: they’re a clinical record of treatment outcome, and they’re often the practice’s most persuasive marketing asset. Treating them purely as the latter is where things go wrong.
Pairing matters more than people think
A before photo and its corresponding after photo need to be tied together — same angle, same lighting where possible, same patient, same treatment area, with the date and treatment recorded against both. Loose photos in a generic camera roll or a shared drive lose that pairing quickly, and an unpaired photo is far less useful as either a clinical record or a marketing asset.
Storage needs to meet the same bar as any other medical record
A before/after photo is part of the patient’s clinical record and should be protected accordingly — encrypted storage, access limited to staff who need it, and never sitting in a personal phone’s camera roll or an unsecured shared folder, however convenient that feels in the moment. The same standard you’d apply to a chart note should apply to a treatment photo.
Marketing use needs an audit trail
If a photo is used on a website or social account, the practice should be able to show, on request, that marketing consent was given, by whom, and when — separate from the consent for the procedure itself. This is the kind of record that’s rarely needed until the day it’s needed urgently.
What this looks like in Zdrovia
Zdrovia’s forms module supports structured, procedure-specific consent that patients complete digitally and sign on their own device, with each version of the form retained and timestamped against the patient record. Photos attach directly to the treatment record in patient charts, encrypted the same way as any other clinical document, with before/after pairing and separate consent flags for clinical versus marketing use.
If you’re putting together the rest of a med spa’s software stack, the guide to choosing practice software for a med spa covers how consent and documentation fit alongside scheduling and inventory, and the med spa solution overview shows how the pieces work together in one platform. Core forms and charting features are included in the free tier, and you can book a walkthrough to see the consent and photo workflow directly.