Cosmetic Clinic Marketing: Ethical Growth for Med Spas

A cosmetic clinic in Australia now grows by building trust it can legally display, because the tactics that used to fill the appointment book have been made unlawful. You cannot name the injectable. You cannot post the glowing testimonial. You cannot run the price promotion. What you can do is own a fast, credible website, earn genuine reviews, publish honest education, and show up in local search. This post covers the compliance detail first, because getting it wrong now costs up to $60,000 per offence, then the durable growth model the rules leave standing.

The market is real and growing. The Australian facial injectable market was worth about USD 2.7 billion in 2023 and is forecast to grow at roughly 19% a year to 2030, with botulinum toxin type A alone making up about 36% of sales (Grand View Research). Demand is not the problem. Reaching it without breaking the law is.

What you can no longer say about injectables

Botulinum toxin type A is a prescription-only (Schedule 4) medicine, and advertising a prescription medicine to the public is unlawful under the Therapeutic Goods Act. The Therapeutic Goods Administration closed the old workaround where clinics used generic phrasing to hint at the product. According to the TGA, a clinic cannot advertise cosmetic injectables directly or indirectly, which now rules out:

• Brand names and trademarks: Botox, Dysport, Juvederm, Restylane
• Generic product references: "anti-wrinkle injections", "wrinkle-reducing injections", "dermal fillers"
• Nicknames and slang: "tox", "baby botox", "brotox", "lip flicks"
• Hashtags that reference any of the above
• The price of the treatment, including package deals and specials

The test the TGA applies is whether a reasonable consumer would understand the content as promoting the use or supply of a prescription medicine (TGA advertising FAQ). Naming a treatment area with a price next to it fails that test even if the word "Botox" never appears.

There is a separate clinical change worth knowing, because it shapes the funnel. Every script for a cosmetic injectable now requires a real-time in-person or video consultation with the prescribing practitioner. Prescribing by text, email, or an online tickbox is no longer acceptable (MDA National). The consultation is the gate, so your marketing job is to get the right person to book a genuine consult, not to sell a product online.

The AHPRA rules that changed the game in September 2025

AHPRA's guidelines for advertising higher-risk non-surgical cosmetic procedures took effect on 2 September 2025 and apply to your website, Google Business Profile, and every social channel, plus any agency or influencer acting for you (AHPRA). The changes that matter most for marketing:

• Testimonials are banned for higher-risk cosmetic procedures. That covers any statement about the experience, reason, or outcome of a procedure, or about the practitioner's skill.
• Before-and-after photos are heavily restricted. They need genuine consent and authenticity, must carry a warning that results vary, and cannot be airbrushed. AI-generated images of results are prohibited.
• Advertising to under-18s is banned, and under-18s get a mandatory seven-day cooling-off period between first consultation and any procedure.
• Trivialising language is out. Terms like "sculptor", "artist", "doll-maker", "world's best", and "world renowned" breach the guidelines, as do reassurance words like "safe" and "painless" (MDA National).

The enforcement backs it up. The maximum penalty for an advertising offence under the National Law is now $60,000 for an individual and $120,000 for a company, per offence (AHPRA advertising guidelines). A page of before-and-afters with patient quotes and a price list, the standard aesthetic clinic homepage of a few years ago, is now several offences on one screen.

What the rules leave you: a trust-based growth model

The rules kill the easy tactics, which rewards the clinics that build trust the slow way. Every banned tactic has one thing in common. It was a shortcut to trust: borrow a celebrity name, borrow a patient's words, undercut on price. What the rules leave standing are the trust signals a clinic has to earn, and earned trust is harder for a competitor to copy. Four assets carry the weight now.

1. A fast, professional website that signals a serious clinic.
2. A steady flow of genuine Google reviews.
3. Plain-English education content that answers what patients actually ask.
4. Local SEO so you appear when someone nearby searches for a provider.

None of these name a product. All of them are legal. And they compound, where a paid promotion stops the day you stop paying.

Your website is now the main advertisement

A cosmetic clinic's website is the one marketing asset it fully controls and the one prospective patients judge hardest. Stanford's Web Credibility research found 46.1% of consumers judge a company's credibility on website design. For a clinic asking someone to trust a needle near their face, a dated or slow site quietly does the opposite of what you need.

Speed is not cosmetic. Google's research found 53% of mobile visitors abandon a site that takes more than 3 seconds to load. Most of your traffic is a woman on a phone, mid-scroll, deciding in seconds whether your clinic looks legitimate. If the booking page stutters, she is gone before she reads a word about your practitioners.

What a compliant, high-performing clinic site looks like:

• Loads in under two seconds on mobile, with a Lighthouse performance score near 100.
• Leads with the practitioners: names, AHPRA registration, real photos, genuine qualifications. This is credibility you are allowed to show.
• Explains the consultation process clearly, since the consult is the legal gate and the real conversion point.
• Makes booking obvious and fast, with no dead ends.
• Carries no banned content: no product names, no prices on injectables, no testimonials about procedures, no unconsented before-and-afters.

Most clinic sites run on WordPress themes loaded with plugins, which is why so many are slow. A custom build on a modern framework loads faster, needs less maintenance, and gives you full control over exactly what appears on the page, which matters more than ever when a stray testimonial widget can be a $60,000 problem.

Reviews, within the rules

Genuine Google reviews are the strongest legal trust signal a clinic has, and 84% of patients read online reviews before booking a provider (rater8, 2025). The compliance line is precise, so getting it right matters.

A patient can post a review on their own, and the clinic is not responsible for what a patient chooses to write. What a clinic cannot do is use that review as advertising: sharing it, reposting it, liking it, or embedding it on the site, if it comments on a higher-risk procedure or the practitioner. AHPRA treats that curation as a banned testimonial (Clayton Utz). Practitioners are advised to consider disabling reviews, comments, and tagging on pages they control.

The workable approach:

• Keep collecting Google reviews. They live on Google, they are patient-generated, and they lift your local ranking. Ask every satisfied patient at the end of a visit.
• Steer feedback toward the non-clinical experience: ease of booking, the reception team, cleanliness, feeling listened to. Reviews about service carry far less risk than reviews describing a procedure outcome.
• Do not repurpose reviews into your own marketing. No screenshots on the homepage, no "what our patients say" carousel about treatments, no resharing to Instagram.
• Respond carefully. A generic thank-you is fine. Do not confirm what treatment someone had or add clinical claims in your reply.

Volume and recency of reviews still feed Google's local ranking, so this is a growth lever and a compliance minefield at the same time. Train the front desk on both sides of it.

Education content and local SEO

Education content wins the patient who is researching before they are ready to book, and it does it without naming a single product. Someone typing "how long does a lip consultation take" or "what to ask at a cosmetic consultation" is a future patient two weeks early. A clinic that answers those questions honestly earns the visit. A clinic that only runs treatment promotions has nothing to show that person, and now legally cannot.

Write about the questions, not the products:

• What happens in a first consultation, and why the in-person requirement exists now.
• How to check a practitioner's AHPRA registration, and why it matters.
• Recovery, aftercare, and realistic expectations for common concerns.
• How the 2025 rules changed what clinics are allowed to tell you, which positions you as the honest operator.

This content does double duty. It ranks in Google for the long-tail questions patients ask, and it is the kind of clear, sourced writing that AI answer engines like ChatGPT and Google's AI Overviews cite when someone asks about cosmetic procedures. Both send you people who are already informed and closer to booking.

Local SEO is where the intent-heavy searches land. Someone searching "cosmetic clinic [suburb]" or "skin clinic near me" is ready now. Winning that means a complete, accurate Google Business Profile, consistent name, address, and phone across every listing, a page on your site for each location and core service you can legally describe, and the review velocity covered above. For clinics with more than one location, each needs its own properly built page, not a shared template with the suburb swapped in. If you want the full mechanics of ranking a local health practice, our SEO service covers the build, and the dental guide below walks through the same local playbook step by step.

Dental Marketing: How to Get More Patients Online (2026)

The local SEO, Google Business Profile, and review playbook for a regulated health practice, with real patient-acquisition costs and channel data.

Read more

What to do this quarter

Start with an audit, because the fastest financial win is removing what could be fined. Read every page of your website, Google Business Profile, and social accounts against the two rules above, and delete anything that names a prescription injectable, prices it, or quotes a patient about a procedure. Then check your site's mobile speed on PageSpeed Insights; if it loads slower than three seconds or scores under 70, the site is costing you patients before the rules even come into it.

With the risks removed, build the assets that compound: a fast credible website, a front-desk habit of asking for reviews, one honest education article a month, and a complete local SEO setup. None of it is quick, and that is the point. The clinics that spent years buying attention with the product name and the discount are the ones scrambling now. The ones that built trust the durable way barely have to change.