Skip to content

Guide

How do online intake and consent forms work for a med spa?

How online intake and consent forms work for a med spa: what the software must do, where each signed form is kept, and what stays with the practice.

Published · Updated · 5 min read

In short

A client gets a link after booking, fills in the intake form and signs each consent form on a phone before the visit, and every signed form is saved to that client's record with the date and time. Staff read it before the appointment. The practice and its advisers write the wording, and the software delivers it, records the signature and keeps the copy.

Definition

Online intake and consent forms: Online intake and consent forms are the forms a med spa sends a client to complete on a phone or a computer before a visit, in place of a clipboard at the desk. The intake form gathers contact details and health history, and each consent form states what a treatment involves and records the client's agreement to it. The software shows the practice's own wording, captures a signature with the date and time, and files the result on the client's record, where the provider can read it before the appointment begins.

Key facts

  • The American Med Spa Association describes intake forms as the first information and authorizations needed from each new patient, including contact information, initial medical histories, HIPAA disclosures and privacy statements.

    Source: American Med Spa Association, Why Intake and Consent Forms Matter, checked October 2, 2026

  • The American Med Spa Association says informed consent means the patient has the pertinent information on risks, complications and chances of success before making a decision.

    Source: American Med Spa Association, Why Intake and Consent Forms Matter, checked October 2, 2026

  • The HIPAA Privacy Rule set national standards for the protection of individually identifiable health information by three types of covered entities: health plans, health care clearinghouses, and health care providers who conduct the standard health care transactions electronically.

    Source: HHS, HIPAA for Professionals, checked October 2, 2026

How the forms reach a client and come back

In short

The booking confirmation carries a link. The client opens it on a phone, completes the intake form and signs the consent for the treatment booked, and the signed copies are on their record before they arrive.

The American Med Spa Association describes intake forms as the first set of information and authorizations a practice needs from each new patient: contact information, initial medical histories, HIPAA disclosures and privacy statements. A consent form is narrower: the association calls it the recorded evidence of a patient giving informed consent to a treatment. It also says a medical spa needs a medical records system, since each customer is really a patient.

Online, the two travel together. A new client receives both, and a returning client receives the consent for the treatment booked with a prompt to confirm that nothing in their history has changed. Someone who stops partway can pick the form up again from the same link, and the desk can see who has not finished before the day begins.

What the software must do

In short

The software has six jobs: let a client fill the form on a phone before the visit, capture a signature with a timestamp, file a copy on the client's record, flag what is missing, keep every version of the wording, and export on request.

None of these jobs is unusual, and booking products built for aesthetics practices include some of them. The two to ask a vendor about are the last in the table: whether a signed form keeps the exact wording it was signed under, and whether you can take every record with you.

When the forms are built into a system of your own, the same table is the specification. Each row is something the written plan says the build will do, and something you can test before launch.

What the software must do with a form, and why each job matters
What the software doesWhy it matters
Fill on a phone before the visitA link in the confirmation opens the forms, and a half-finished form can be resumedThe appointment begins on time, with the answers already in
A signature with a timestampThe client signs on the screen, and the date and time are stored with the formThe record shows who agreed to what, and when
A copy on the client's recordEach signed form is filed where staff open the client's cardThe provider reads it before the appointment
A flag on the cardA treatment with no signed consent is marked on the day viewNobody has to remember to check
Versioned wording the practice ownsEach change to a form is saved as a new version, and a signed copy keeps the wording it was signed underAn old signature is never shown against new text
An exportOne client's forms, or all of them, can be taken out as filesThe records stay yours if you change systems

Swipe sideways to see every column

What stays with the practice and its advisers

In short

The wording of every form, who reviews a client's answers and how the records are kept under the law are the practice's decisions. Software carries those decisions out, and makes none of them.

The American Med Spa Association says a consent document should be written in plain, non-medical language and be frank about the risks and complications. Writing it is work for the practice and its counsel, and so is deciding how often a returning client signs again.

Health information that a form collects may fall under HIPAA. HHS says the Privacy Rule applies to covered entities, among them health care providers who conduct the standard health care transactions electronically, and that the Security Rule sets national standards for protecting electronic protected health information. Whether your practice is a covered entity, and whether a software vendor needs an agreement with you, is for the practice and its adviser to decide.

This guide describes software, and none of it is medical or legal advice. Ask your own counsel which rules apply to your practice before any form goes live.

What this means for a small business

In short

Check first whether the booking software you already pay for sends forms the way the table describes. Build your own only for the jobs it cannot do.

For many practices the forms inside an aesthetics booking product are enough, and turning them on costs nothing to build. The site's job is then small: send the client to those forms at the right moment, and say plainly on the booking page that they will arrive.

A system of your own earns its price when the forms have to follow rules the product cannot, such as wording or a signing step it has no setting for, or a flag the desk needs on its own day view. That is app work, which costs more than pages do, and our guide to what a med spa website costs explains why.

Common questions

Can clients sign consent forms on their phone?

Yes. The client opens a link, reads the form and signs on the screen, and the signed copy is stored with the date and time. Whether an electronic signature is acceptable for a given form is a question for the practice's own counsel.

What is the difference between an intake form and a consent form?

An intake form gathers who the client is and their health history, once, and is updated when something changes. A consent form belongs to one treatment and records that the client agreed to it after reading its risks.

Does a returning client fill everything in again on each visit?

Usually not. A returning client confirms that the intake answers still hold and signs only the consent for the treatment booked. How often a consent has to be signed again is the practice's rule, and the software follows it.

Are online intake forms covered by HIPAA?

They may be. Health information a form collects can fall under HIPAA, depending on whether the practice is a covered entity. That is for the practice and its adviser to settle, along with any agreement a software vendor would need.

Do you write the consent forms?

No. The practice and its advisers write and approve every form. We build what delivers the form, records the signature and files the copy, and it shows your wording exactly as approved.

What does it cost to build the forms into our own system?

It is app work, since every form belongs to one client and sits behind a sign-in. The written plan prices it by what your forms have to do, after a short call about how they run today.

Sources

  1. Why Intake and Consent Forms Matter, American Med Spa Association, April 4, 2022
  2. Medical Spa Legal Requirements, American Med Spa Association, December 8, 2021
  3. HIPAA for Professionals, U.S. Department of Health and Human Services, updated July 19, 2024

Start with a written plan

Tell us about the business and what you need. We reply with questions, then a written plan that lists the work and its price, and nothing starts until you have read it.