Key Takeaways
A medical spa client intake form is a legal and clinical document that screens for contraindications before any aesthetic treatment begins.
Required sections include patient demographics, full medical history, current medications, allergy screening, and treatment-specific consent.
HIPAA applies to med spas that transmit health information electronically for billing purposes – intake forms must reflect this.
Pabau’s digital forms automate intake workflows, send forms before appointments, and attach completed data directly to client records.
A client discloses a pacemaker at check-in, after the laser has already been prepared. Another mentions a herpes history only after their first IPL session triggers an outbreak. These are documentation failures that create clinical risk and legal exposure, and they happen when the medical spa client intake form is incomplete, generic, or skipped entirely.
This guide covers exactly what belongs in a med spa intake form, why each section carries clinical and legal weight, and how to move the whole process digital without creating compliance gaps. It’s written for med spa owners, clinic managers, and aesthetic practitioners who need a working framework, not a generic template.
What a Medical Spa Client Intake Form Actually Does
Most practitioners think of the medical spa client intake form as paperwork. It is, in practice, a contraindication screen, a liability record, a consent anchor, and a clinical starting point for treatment planning. Every section exists for a reason grounded in either patient safety or legal protection.
The American Med Spa Association (AmSpa) recommends that med spas collect medical history before any aesthetic treatment as a standard of care requirement. Specific obligations vary by state, but the principle is consistent across US jurisdictions: treat without documented screening and you’ve assumed full liability for any adverse outcome.
There is also a meaningful distinction between a consent form and an intake form. The intake form collects health history and identifies risks. The consent form documents that the client understands those risks and authorizes treatment. Both are necessary. Neither replaces the other. Med spas that hand patients a single combined document are usually missing clinical detail in one or both sections.
Who Completes It and When
The intake form should reach the client before the appointment, not at the front desk five minutes before their treatment starts. Rushed completion produces inaccurate answers. Clients skip questions, misremember medications, and underreport conditions when they’re standing at a check-in counter. Digital delivery 24 to 48 hours before the visit gives clients time to check their medication list, consult their GP if needed, and provide accurate information.
The practitioner reviewing the completed form should do so before the treatment room, not during it. This review step is where contraindications get caught. It takes two minutes and protects both the client and the practice from outcomes that are entirely preventable.
Core Sections Every Medical Spa Client Intake Form Must Include
The following sections are not optional additions to a basic contact form. Each one addresses a specific clinical or legal risk area that med spas face. Omitting any of them creates a gap that a plaintiff’s attorney or state medical board will notice.
Patient Demographics and Contact Information
Full legal name, date of birth, address, phone number, and email. Date of birth is clinical, not administrative – it determines eligibility for certain treatments and establishes a verified identity for the medical record. Emergency contact information should appear in this section, including the contact’s relationship to the patient and a reliable phone number.
Medical History
This is the highest-risk section for most aesthetic treatments. The practitioner needs to know about conditions that directly contraindicate common procedures. The checklist should cover:
- Cardiovascular conditions and pacemakers (relevant for radiofrequency and laser treatments)
- Autoimmune disorders and current steroid use
- Seizure history and epilepsy
- Active infections, MRSA history, and hepatitis
- Diabetes (affects healing and infection risk)
- Bleeding disorders and current anticoagulant therapy
- History of herpes simplex (cold sores or fever blisters – critical for laser and microneedling)
- Cancer history and current chemotherapy or radiation
- HIV/AIDS status
- Pregnancy or breastfeeding status
This list is not exhaustive – treatment-specific additions apply depending on the services offered. A med spa compliance checklist is a useful companion to this section when building out your full documentation suite.
Current Medications and Supplements
Prescription medications, over-the-counter drugs, and supplements all matter. Retinoids increase photosensitivity and contraindicate certain laser treatments. Blood thinners elevate bruising risk for injectables. St. John’s Wort interacts with several topical agents. Clients often don’t think of vitamins and herbal supplements as “medications” – the form should explicitly ask for both.
Allergy Screening
Document all known allergies, including drug allergies, latex, and specific ingredient sensitivities. For practices offering Botox and dermal fillers, allergy screening for botulinum toxin components and hyaluronic acid derivatives is required. Clients with known sensitivity to lidocaine need alternative topical anesthetic options before any procedure that uses them.
Previous Aesthetic Treatments
Ask specifically what treatments the client has received, which clinic performed them, and the approximate date. This section catches previous reactions, identifies cumulative exposure risks (particularly relevant for filler clients), and informs treatment planning. A client who has had multiple hyaluronic acid filler treatments over several years requires a different assessment than a first-time patient.
Current Skincare Routine
Active ingredients in home skincare directly affect treatment safety. Retinoids, AHAs, BHAs, and vitamin C serums all affect skin sensitivity and can interact with certain professional treatments. This section also opens a natural upsell conversation around professional skincare products aligned with the client’s treatment plan, making it clinically and commercially useful.
Informed Consent and Authorization
The FDA’s guidance on informed consent establishes that patients must understand the nature of the treatment, its risks, alternatives, and their right to decline before any procedure. For botulinum toxin and dermal filler injections, this is a verified standard of care requirement under FDA labeling. The consent section should include a plain-language description of the proposed treatment, a risk disclosure section, a photo release authorization, and a dated signature field. Electronic signatures are legally valid in most US jurisdictions under the E-SIGN Act.
Pro Tip
Review completed intake forms before the client enters the treatment room, not during the consultation. Flag contraindications in the client record with a visible indicator so any practitioner reviewing the record sees them immediately. Pabau’s client record system allows custom flags and alerts that appear at booking and at check-in.
Treatment-Specific Screening for Injectables and Laser Procedures
A general medical history section is a baseline, not a complete contraindication screen for the specific treatments your med spa offers. Injectable treatments and laser procedures carry distinct risk profiles that require additional questions beyond the standard health history checklist.
Botox and Neurotoxin Injections
Key screening questions for botulinum toxin treatments include neuromuscular disorder history (myasthenia gravis, Lambert-Eaton syndrome, ALS), previous adverse reactions to any botulinum toxin product, and current use of aminoglycoside antibiotics, which can potentiate neurotoxin effects. The intake form should also capture the client’s primary concern and target areas to support injection plotting and dosing decisions. Pabau’s injection plotting tool integrates directly with client records, making it straightforward to connect intake data to treatment documentation.
Dermal Fillers
Vascular occlusion risk makes filler screening particularly important. Clients with a history of vascular conditions, previous filler complications, or significant facial surgery need a more detailed pre-treatment assessment. The form should document prior filler use, approximate volumes, and the treating practitioner. Clients currently using blood thinners or anti-inflammatory medications at therapeutic doses present elevated bruising risk that must be disclosed and documented.
Laser and Energy-Based Treatments
Skin type assessment using the Fitzpatrick scale is a standard pre-treatment requirement for laser procedures. The intake form should include a Fitzpatrick assessment or reference the consultation note where it was recorded. Additional screening for photosensitizing medications, recent sun exposure, active tan, isotretinoin use within the past 12 months, and history of keloid scarring all belong in a laser-specific intake section.
HIPAA Compliance and Digital Intake Workflows
HIPAA applies to med spas that qualify as covered entities, meaning those that transmit protected health information (PHI) electronically for billing purposes. According to HHS.gov HIPAA guidance, not every med spa is automatically a covered entity, but those that are must implement compliant intake processes for collecting, storing, and transmitting patient health data.
For med spas that are covered entities, a HIPAA-compliant intake process requires that digital forms are transmitted over encrypted connections, stored in a HIPAA-aligned environment, and accessible only to authorized staff. “HIPAA compliant” is not a certification that software vendors can hold. It is a designation that depends on how the practice implements and manages the technology. Any practice using digital intake forms should have a signed Business Associate Agreement (BAA) with its software provider.

Pabau’s digital forms feature delivers intake forms directly to clients before their appointment via secure link. Completed forms attach automatically to the client’s record in the practice management system, eliminating manual data entry and the file storage risks that come with paper forms. The Pabau HIPAA compliance page covers the technical and administrative safeguards built into the platform.
Moving from Paper to Digital: What Actually Changes
Switching to paperless intake forms removes several operational problems that paper creates: forms completed at the desk under time pressure, illegible handwriting, missing fields, storage costs, and the manual process of transferring data into patient records. Digital forms allow clients to complete their medical spa client intake form at home on any device, submit it securely, and have it waiting in their record when they arrive.
The operational change that practices report having the most impact is form delivery timing. Sending the medical spa client intake form 48 hours before the appointment, rather than at arrival, results in more complete answers and fewer treatment delays caused by undisclosed contraindications surfacing during the consultation.
| Intake Method | Form Completion Timing | Data Accuracy | Storage and Retrieval | HIPAA Risk Level |
|---|---|---|---|---|
| Paper (at desk) | 5 min before appointment | Lower (rushed, incomplete) | Manual filing, retrieval time | High (paper storage, fax) |
| Paper (mailed) | 1-7 days before | Moderate | Manual filing, retrieval time | High (mail interception risk) |
| Digital (practice software) | 24-48 hrs before | Higher (unhurried, complete) | Auto-attached to record | Lower (encrypted, BAA-covered) |
Building an Intake Form That Holds Up Legally
The legal weight of a medical spa client intake form depends on more than the fields it contains. How it is presented, signed, stored, and updated all affect whether it provides meaningful protection in the event of a complaint or claim. Several practices consistently undermine their own documentation.
Common Documentation Mistakes
Outdated forms: A medical spa client intake form completed two years ago is not a current health record. Medications change. Conditions develop. Practices should establish a re-intake policy for returning clients, either annually or before any new treatment type is introduced. Pabau’s client record management system makes it straightforward to flag records due for update.
Generic consent language: Consent that describes risks in broad, non-specific language provides limited legal protection. “Bruising and swelling may occur” is less protective than language that specifies the treatment, the injection sites, the anticipated recovery period, and the specific risks associated with that procedure at that anatomical location.
See How Pabau Handles Med Spa Intake
Pabau's digital forms automate your entire intake workflow. Send medical spa client intake forms before appointments, auto-attach them to client records, and flag contraindications directly in the booking flow. No paper, no manual entry, no compliance gaps.
Missing signatures: A completed health history form without a dated signature is an unsigned document. It documents that questions were asked but not that the client reviewed and acknowledged the information. Every section that carries legal significance needs a dated signature or, for digital forms, a verified e-signature with timestamp.
No re-consent process: If a client’s treatment changes, the consent section of their existing intake form may no longer cover the new procedure. Treatment-specific consent is not a one-size-fits-all document. Each new treatment category should have its own consent section or a supplemental consent form.
Before-and-After Photo Authorization
Photo documentation is standard practice in aesthetic medicine and serves both clinical and compliance purposes. Before-and-after photos support treatment planning, track outcomes, and provide evidence in the event of a dispute about results. The intake form should include explicit authorization for photo capture, storage, and any intended use (clinical record only vs. marketing with client consent). Requirements for photo consent vary by state, so the authorization language should be reviewed by a healthcare attorney familiar with your jurisdiction. Pabau’s before-and-after photo feature stores photos directly in the client record with associated consent status.
Pro Tip
Build treatment-specific intake add-ons as supplemental form sections rather than creating entirely separate forms for every service. A core intake form handles demographics, medical history, and general consent. Treatment-specific sections for Botox, fillers, laser, and chemical peels attach as modules. This reduces redundant data entry while keeping clinical screening thorough.
Integrating Intake Forms into the Client Experience
The way a medical spa client intake form is delivered shapes the client’s first impression of the practice. A paper form on a clipboard signals a traditional, manual operation. A secure digital form sent with the appointment confirmation signals a professional, organized practice that takes client information seriously. For med spas positioning themselves at the premium end of the market, the intake process is part of the brand experience.

Automation handles most of this without staff involvement. When a new booking is confirmed, the intake form goes out automatically. When the client submits it, the record updates automatically. The practitioner opens the appointment and the health history is already there, reviewed, and flagged for any items that need discussion. Pabau’s automated workflows handle form delivery as part of the pre-appointment sequence alongside confirmation messages, deposit requests, and pre-care instructions.
For multi-location med spas, consistent intake documentation across sites is a compliance and clinical governance requirement, not just an operational preference. If each location uses a different version of the intake form, the practice cannot ensure consistent contraindication screening standards. Pabau’s multi-location management feature centralizes form templates so any update rolls out across all sites simultaneously.
The pre-care and post-care communication that follows intake is equally important for the client experience. Pabau’s pre and post care feature automates condition-specific instructions based on the treatment booked, closing the loop from intake through aftercare in a single workflow.
Expert Picks
Need a free downloadable template to start with? Spa Intake Form Template provides a structured starting point for building your practice’s intake documentation.
Looking for treatment-specific consent templates? Dermal Filler Consent Form Template covers the key risk disclosures and authorization language for filler procedures.
Want to understand HIPAA obligations for your med spa? Do Med Spas Have to Be HIPAA Compliant? breaks down exactly when HIPAA applies and what it requires in practice.
Ready to digitize your entire intake workflow? Medical Spa Software shows how Pabau manages forms, records, and compliance in one connected system.
Conclusion
Incomplete intake documentation is one of the most preventable sources of clinical and legal risk in aesthetic medicine. A well-designed medical spa client intake form catches contraindications before treatment begins, creates a defensible consent record, and gives practitioners the clinical context they need for safe, informed decision-making.
Pabau’s digital forms feature automates the entire intake workflow, from sending the form before the appointment to attaching completed data to the client record, flagging contraindications, and triggering pre-care instructions. If you want to see how this works in practice, book a demo and walk through the intake workflow with a Pabau specialist.
Frequently Asked Questions
At minimum: patient demographics, emergency contact, full medical history including conditions and surgeries, current medications and supplements, known allergies, previous aesthetic treatments, current skincare routine, and a signed informed consent section. Treatment-specific screening questions (for Botox, fillers, or laser) should be added as supplemental sections based on the services offered.
An intake form collects health history and identifies contraindications. A consent form documents that the client understands treatment risks, alternatives, and their right to refuse, and authorizes the procedure. Both are required. Med spas sometimes combine them into one document, but each section must be substantive enough to fulfill its distinct clinical and legal purpose.
HIPAA compliance depends on your transmission and storage infrastructure, not just the form’s content. Use a practice management platform that signs a Business Associate Agreement (BAA) with you, transmits forms over encrypted connections, and stores PHI in a secured environment. The form itself must include a HIPAA Notice of Privacy Practices acknowledgment when collected by a covered entity.
Most med spa compliance frameworks recommend re-intake annually for returning clients, or whenever a client is beginning a new treatment category they haven’t previously consented to. Medications, health conditions, and skin status change over time. A form completed at the first visit two years ago may not reflect the client’s current health picture.
Use a practice management platform with built-in digital forms, not a generic form builder. The key distinction is whether completed forms auto-attach to client records or require manual data transfer. Platforms built for healthcare (with BAA, encryption, and EHR integration) handle this correctly. Generic tools like standalone survey platforms typically lack the compliance infrastructure that HIPAA-covered med spas require.