A UK aesthetic clinic website may show treatments, practitioners, prices and results. The challenge is presenting them accurately. A page can cross the line through an exaggerated photograph, a claim about a prescription-only medicine, an out-of-date CQC rating or a form that collects more patient information than expected.
The rules also come from different places. Advertising standards, medicine rules, professional regulators, service regulators and privacy law each cover a different part of the site.
Advertising rules apply to clinic websites
The UK’s Advertising Standards Authority and Committee of Advertising Practice (ASA/CAP) cover marketing on a clinic’s own website as well as paid campaigns. Their guidance on cosmetic interventions addresses results claims, images, qualifications, promotions and responsible advertising. Ads for cosmetic interventions must not be directed at under-18s through the choice of media or context.
This is separate from a stricter rule on the treatment itself: since October 2021, it has been a criminal offence in England to administer — or arrange — botulinum toxin or filler injections for cosmetic purposes to anyone under 18.
A useful treatment page can still explain benefits. It should also give patients enough information to understand limits, risks, recovery and whether a consultation is needed. “Suitable for everyone” or “guaranteed results” creates a very different impression from an account of what a treatment may achieve.
Our audit of 200 UK aesthetic clinic websites found that information patients need before contacting a clinic was often hard to find. Clearer pages can help without making stronger promises.
Botox and other prescription-only medicines
Botox and other prescription-only botulinum toxin products cannot be advertised to the public. That rule reaches beyond a paid ad. A homepage headline, navigation label, promotional treatment page, offer, testimonial or before-and-after image can also promote a prescription-only medicine.
CAP’s specific guidance for websites offering prescription-only medicines says to lead with the consultation, not the medicine. “Consultation for lines and wrinkles” is its example of an approach that may be acceptable. “Botox consultation” is likely to be seen as advertising the medicine. CAP permits limited, balanced and factual information on inner pages in the context of a possible option following consultation. That is a narrow distinction, not permission to build a promotional Botox landing page.
Do not assume that replacing a product name with a hint solves the problem. CAP also warns against indirect promotion. Price-led offers and before-and-after photographs suggesting the medicine’s effectiveness need particular care.
Before-and-after images are possible, with conditions
The UK does not impose a general ban on before-and-after photographs for cosmetic interventions. But the images must represent genuine results. Editing the treated area, changing the lighting to exaggerate an effect or suggesting that an exceptional result is typical can mislead patients. CAP treats before-and-after images as efficacy claims and applies rules similar to those for testimonials. Images that promote a prescription-only medicine raise the separate prohibition above. See the ASA’s before-and-after photo guidance.
A useful gallery needs context: what was done, whether treatments were combined, and when the “after” image was taken. It also needs the patient’s appropriate permission. A striking picture with none of that information may sell an outcome the clinic cannot reasonably promise.
CQC registration and ratings: be precise about their scope
The Care Quality Commission (CQC) regulates relevant healthcare activities in England. Its guidance on surgical procedures includes cosmetic surgery within its scope, subject to the details of the activity. It excludes subcutaneous injections to enhance appearance from that particular regulated activity. A clinic that offers surgery and cosmetic injectables may therefore have CQC-regulated services alongside services outside CQC’s scope.
If a provider has received a CQC rating for its regulated activities, Regulation 20A requires it to display the current rating conspicuously on its website. The display must make clear which provider, premises or activities the rating covers and link to the relevant CQC assessment. A general “CQC approved” badge can give patients the wrong impression, particularly where the clinic also offers services CQC does not regulate.
CQC is England’s regulator. Clinics elsewhere in the UK need to check their corresponding service regulator, such as Healthcare Inspectorate Wales, Healthcare Improvement Scotland or Northern Ireland’s RQIA.
A wider licensing scheme for non-surgical treatments is coming, though not yet in force. Section 180 of the Health and Care Act 2022 gives government the power to introduce a licensing scheme for non-surgical cosmetic procedures in England, covering treatments such as Botox and dermal fillers under a tiered (red/amber/green) risk model. The Department of Health and Social Care published its consultation response in August 2025, confirming this direction; a further public consultation on the detail is expected before secondary legislation is made. Until then, the CQC scope described above still applies unchanged — but once the scheme is live, it will likely bring its own website display requirements, such as showing a licence number.
The practitioner’s regulator matters as well
A clinic registration and an individual practitioner’s registration answer different questions. Patients should be able to identify who will treat them and check their relevant professional registration.
The General Medical Council’s cosmetic intervention guidance tells doctors not to use promotional tactics that could encourage an ill-considered decision. It also tells them not to knowingly allow others to misrepresent their services.
For dental professionals, the General Dental Council’s advertising guidance is particularly specific about websites. It covers registration numbers, qualifications, practice contact details, complaints information and keeping the site up to date. Nurses must follow the Nursing and Midwifery Council’s Code and its standards for professional conduct. A team page should reflect the people and registrations of the clinic, not rely on one generic “expert practitioners” claim.
Contact forms, live chat and WhatsApp
A “quick question” box can become a source of sensitive health information within seconds. Someone may type a diagnosis, list medications or upload a face photograph. Under the UK GDPR, health information is special category data. A clinic must establish an appropriate lawful basis and additional condition for processing it, and explain its use to the person providing it.
Keep the first-contact form focused. Name, contact details and the type of enquiry may be enough to arrange a consultation. Put privacy information where people submit the form. Check where submissions are stored, who can access them and whether the form provider is acting as a data processor.
Live chat needs the same review. Is a human or AI responding? Are conversations retained? Can staff recognise when a question needs a clinician or urgent help? What does the chat supplier do with transcripts? Our article on whether an aesthetic clinic AI chatbot can be GDPR-compliant explores these questions in more depth.
A WhatsApp button is convenient, but it should be a deliberate communication choice. Tell visitors they are opening an external messaging service, set expectations about response times and offer another contact route. Decide which information staff should request there and where clinically relevant messages must be recorded. NHS England’s guidance on messaging patients is a useful reference for minimising confidential details and assessing messaging platforms. Its organisational rules do not automatically apply to every private clinic, but the confidentiality questions do.
Cookies, pixels and follow-up messages
Aesthetic clinics often use ad pixels to measure enquiries or build audiences. The UK Information Commissioner’s Office (ICO) says its rules for storage and access technologies cover cookies, pixels and similar tools. Advertising tracking generally requires consent before it runs. The ICO also warns that browsing activity can reveal or imply sensitive information about a person’s health. A pixel on a treatment page deserves more thought than a simple “accept cookies” banner.
An enquiry is not automatic permission to send marketing messages. Appointment information and care communications are different from promotional email or WhatsApp campaigns. The ICO’s direct marketing guidance explains the additional rules, particularly where health information may be used to target people.
How iGlowly approaches a UK clinic website
We connect treatment information, practitioner profiles, enquiries and booking routes so patients can find what they need. We also flag medicine claims, results imagery, registration statements, chat tools and trackers for review. The clinic and its practitioners check the clinical details and approve the final content.
The clinic and its practitioners decide what appears on their website and are responsible for the content they approve. We may flag a concern, but the clinic makes the final decision on wording, treatment labels and navigation.
Read what an aesthetic clinic website should include, or explore iGlowly’s website design and management service.