Disclaimer: BeautyKiln gives general information, not legal, tax or financial advice. Talk to a qualified professional before making big decisions.

11 - Before-and-After Photos: Legal and Marketing Rules

Before-and-after photos are the most powerful marketing tool in beauty. Nothing sells your work like proof. But posting them without proper consent breaks data protection law. Editing them to look better than reality breaks advertising rules. And using them to promote certain treatments can get your account restricted or your ad banned. This guide explains exactly what you can and can't do, and how to do it properly so your marketing works without landing you in trouble.

Quick rule of thumb: No form, no posting. Written consent to take a photo is not the same as consent to post it online. You need both, separately and clearly.

GDPR and consent

A photo of a client is personal data under UK GDPR. A photo showing the results of a treatment (especially on skin, face or body) could be sensitive personal data relating to health. The rules are strict.

What you need:

• Written consent before taking the photo
• Separate written consent before posting it anywhere (social media, website, portfolio, printed materials)
• The consent must say exactly where the photo will be used
• The client must be able to withdraw consent at any time, and you must remove the photo if they do

A single tick box that says "I consent to photos" is not enough. Your consent form needs separate tick boxes:

• I consent to photos being taken for my treatment records
• I consent to photos being used on social media (Instagram, TikTok, Facebook, etc.)
• I consent to photos being used on the practitioner's website
• I consent to photos being used in printed marketing materials

Each one should be a separate, active choice. Pre-ticked boxes don't count as valid consent.

Keep the signed forms. If someone challenges you, you need to produce proof of consent. Store them securely (locked cabinet or encrypted digital storage) in line with your GDPR obligations.

Tip for new starters: The ICO (Information Commissioner's Office) can investigate if a client reports that you posted their photo without consent. Fines for serious GDPR breaches can reach millions, though for a sole trader the more likely outcome is an enforcement notice and a very stressful process. Just get the form signed. It takes 30 seconds.

ASA and CAP advertising rules

The Advertising Standards Authority (ASA) and the Committee of Advertising Practice (CAP) regulate advertising in the UK. Before-and-after photos count as advertising when used to promote your services.

The rules:

• Photos must be genuine and not manipulated. Same lighting, same angle, same distance, no filters that change skin tone or texture.
• You must be able to prove the images are genuine if challenged. The ASA requires signed, dated proof.
• Results shown must be typical, not exceptional. If you show a best-case result, you need to make that clear.
• You cannot use time-pressure tactics alongside cosmetic procedure advertising. "Book now before prices go up" or "Only 3 slots left" paired with before-and-after photos of cosmetic work can trigger an ASA complaint.

Practically, this means:

• Take the "before" photo in the same spot, with the same lighting, as the "after" photo
• Don't use ring lights for the "after" and overhead fluorescent for the "before"
• Don't apply filters. Not even "auto-enhance." The ASA has upheld complaints about filtered before-and-afters.
• Save the original unedited files with metadata (date, time, device) intact

Cosmetic procedure restrictions

If you offer injectable treatments, semi-permanent makeup, or other cosmetic procedures, there are extra rules.

• You cannot advertise Botox by brand name. Botulinum toxin is a prescription-only medicine (POM). Advertising POMs to the public is banned under the Human Medicines Regulations 2012. You can say "anti-wrinkle injections" or "wrinkle-relaxing treatment" but not "Botox," even though everyone calls it that.
• You cannot advertise prescription-only treatments directly. You can talk about the results in general terms, but you can't name the product or encourage people to request a specific POM.
• CAP rules ban targeting under-18s with cosmetic procedure advertising. This includes avoiding platforms, placements or content that primarily reaches under-18 audiences.
• Time-pressure and promotional tactics are banned for cosmetic procedures. No "sale prices," no "limited availability," no countdown timers.

Tip for new starters: The Botox brand name rule catches a lot of people out. Even hashtagging #Botox on Instagram technically breaches advertising rules. Use #antiwrinkle or #wrinklerelaxing instead. The ASA actively monitors social media.

Social media platform rules

On top of UK advertising law, each platform has its own rules about beauty and cosmetic content.

TikTok is actively restricting cosmetic procedure content. Videos showing injectable treatments, surgical procedures, or before-and-afters of cosmetic work may be suppressed, age-gated, or removed entirely. Their community guidelines ban content that "promotes dangerous cosmetic procedures."

Instagram and Facebook (Meta) require you to follow their advertising policies if you're running paid ads. Before-and-after photos in paid cosmetic ads are heavily restricted and often rejected by their automated review. Organic posts have more freedom, but can still be reported.

All platforms require you to disclose paid partnerships and gifted treatments. If someone received a free or discounted treatment in exchange for posting about it, both you and they must use the platform's built-in disclosure tools or clearly mark the post with #ad. This comes from both ASA rules and platform terms.

How to take proper before-and-afters

Getting this right means your photos are both legally compliant and actually useful for marketing.

Setup:

• Same position every time. Mark a spot on the floor if you need to.
• Same lighting. Natural daylight from a window is best for consistency. If using artificial light, use the same setup for both shots.
• Same camera or phone. Don't take the "before" on an old phone and the "after" on a new one.
• Same distance from the client. A phone tripod helps.

For the shot:

• Clean, plain background (a white or neutral wall works best)
• Hair pulled back for skin and facial treatments so you can see the results
• No makeup in the "before" shot if you're showing skin treatment results
• Take multiple angles if relevant (front, side, three-quarter)

After the shot:

• Save originals with date stamps
• Do not edit beyond basic cropping
• No skin-smoothing filters, colour correction, or brightness changes that alter how the result looks
• Label each photo with the client reference (not their name, for GDPR reasons), date, and treatment

What happens if you get it wrong

Posting without consent: The client can complain to the ICO. You could face an enforcement notice requiring you to remove all photos and change your processes. Repeat or serious breaches can result in fines. Beyond the legal risk, it destroys trust and generates terrible reviews.

Misleading before-and-afters: The ASA can order you to remove the ad, publish a correction, and ban you from running similar ads in future. Repeated breaches get referred to Trading Standards, who can prosecute.

Naming prescription medicines: The MHRA (Medicines and Healthcare products Regulatory Agency) can take enforcement action. This can include formal warnings, fines, and in serious cases, criminal prosecution.

Missing #ad disclosure: The ASA can rule against you, and the CMA (Competition and Markets Authority) can take enforcement action for misleading consumers.

What to do next

1. Create a photo consent form with separate tick boxes for records, social media, website and print
2. Set up a consistent photo station with fixed lighting and a plain background
3. Audit your existing social media posts - do you have written consent for every before-and-after you've posted?
4. Remove any posts where you've named prescription medicines by brand
5. Check all your photos are unfiltered originals with date metadata intact
6. Save consent forms securely, either locked away or in encrypted digital storage

Who to Contact

• ICO (data protection) - 0303 123 1113 (Free)
• ASA (advertising complaints) - asa.org.uk/make-a-complaint (Free)
• CAP Copy Advice - 020 7492 2100 (Free)
• MHRA (medicines advertising) - 020 3080 6000 (Free)
• Citizens Advice - 0800 144 8848 (Free)

Sources

• UK GDPR and Data Protection Act 2018
• ASA and CAP Code (non-broadcast advertising)
• Human Medicines Regulations 2012
• CMA guidance on influencer advertising disclosure (2024)
• TikTok, Instagram, and Facebook community guidelines and advertising policies (2025)

Related Guides

• GDPR for Beauty Workers
• Advertising Rules for Beauty and Aesthetics
• Marketing Compliance
• Client Consultation Best Practice
• Photo and Social Media Consent Form (template)
• Accessibility and Inclusion

📢 Sponsorship available — Learn more

What to do next

Didn't find what you were looking for?