Straight answers about compliance, pricing, packages, memberships, and what medspa.shop actually does.
Honest answer: we provide industry-standard safeguards — TLS encryption in transit, encryption at rest, role-based access controls, and audit logging — but we do not market medspa.shop as a HIPAA-compliant platform and we do not sign HIPAA Business Associate Agreements (BAAs) as a standard part of our offering.
Most purely cosmetic, cash-pay med spas are not "covered entities" under HIPAA. If your practice bills insurance, handles protected health information, or otherwise needs a BAA, please consult qualified legal or compliance counsel before using the Service and contact us to discuss your specific needs.
Intake forms are customizable per treatment. Clients fill them out on their phone before the appointment. Responses are encrypted at rest and visible only to the specific med spa that collected them. We never share intake data across practices or use it for advertising.
Yes — turn it on per location. When it's required, check-in stays blocked until your front desk confirms the client's photo ID and marks it verified. We record only that the ID was checked, and by whom — we never photograph or store the ID itself.
Aftercare instructions go out to the client automatically, matched to the treatment they received. You write them once (or start from our templates and make them yours), and every client gets the right care guidance without anyone having to remember to send it.
Yes. You can attach treatment-specific consent forms (injectables, laser, chemical peel, microneedling, body contouring, IV therapy, etc.) to each service. Clients sign on their phone before arrival, and the signed form is stored as part of the client record.
Photos are private by default and visible only to the client and your authorized staff. If you want to use a photo for marketing, social media, or a public gallery, the client must provide separate written consent for that specific use. Clients can withdraw consent at any time and we'll remove the photo from public-facing areas on request.
Client records — including intake forms, consent forms, and treatment history — are retained for as long as the practice needs them or as required by state regulations governing cosmetic and medical records. Deleting a client's login does not automatically delete records the practice is legally obligated to keep.
Yes. Consultations and paid treatments share the same booking calendar. Consultations can be set to no-charge, and the client can convert directly into a treatment booking at the end of the consult.
Yes. Build a package, set the number of sessions, and sell it at a bundled price. The platform tracks sessions used vs. remaining and prompts the client to rebook when they haven't scheduled their next session.
Yes. Monthly or annual memberships with recurring stored-card billing on your own merchant account. Members can pause, upgrade, or cancel without calling your front desk.
Yes. Assign treatments to individual practitioners based on their credentials. Injectables can be limited to your nurse injectors, lasers to certified laser techs, and so on.
No. We charge a flat monthly subscription. We do not take a percentage of treatments, packages, memberships, or retail sales. You keep your revenue; the only variable cost is the processing rate from your merchant provider.
Yes. You open a merchant account in your practice's name. Funds settle directly to your bank. medspa.shop never holds your money.
We integrate with CardPointe (Fiserv) for card-present and card-not-present transactions, including stored-card flows for membership and package billing.
Most practices are live within a week. Branding, treatment menu, practitioners, and consent forms are all configurable in a single setup session.
Yes — we support CSV imports of clients and can work with you directly on more complex migrations from other platforms.
Multiple locations are supported under a single account, with per-location calendars, practitioners, and treatment menus.
Email owners@medspa.shop for practice support, or help@medspa.shop for client booking questions. See our contact page for more options.