The short answer
A med spa handbook needs the standard employment content — at-will disclaimer, anti-harassment and reporting, wage, overtime, tip and commission rules, leave entitlements and an acknowledgement page — plus clinic-specific sections most templates omit: scope-of-practice limits per license, HIPAA and patient photography rules, social media boundaries, infection control and OSHA duties, and adverse event reporting.
What has to be in any employer's handbook?
Start with the employment law core, because this is where handbooks create liability rather than reduce it. An at-will disclaimer stating that the handbook is not a contract and that either party may end the relationship at any time should be prominent and acknowledged in writing. Anti-harassment, anti-discrimination and retaliation policies need named reporting channels including an alternative to the direct supervisor, since several states mandate specific training and complaint procedures.
Wage and hour is the biggest exposure in this industry. Spell out classification, timekeeping and meal and rest break rules, overtime, commission and bonus structures with the calculation method, tip pooling if you allow it, and how service charges are treated. Misclassifying injectors or estheticians as independent contractors is a common and expensive error, and a handbook that describes contractors as subject to schedules and supervision documents the misclassification for the regulator.
Leave policies must be built state by state. Paid sick leave, family and medical leave, pregnancy accommodation, jury duty and voting leave vary widely, and a national template will be wrong somewhere. A multi-state practice needs state supplements rather than one averaged policy.
Watch the National Labor Relations Act. Under the Board's Stericycle framework, broadly worded confidentiality, social media, civility and non-disparagement rules can be found unlawful because employees could reasonably read them as restricting protected discussion of pay and working conditions. Include an explicit Section 7 savings clause and avoid blanket bans on discussing wages.
What does a med spa handbook need that a retail one does not?
| Section | What it must cover |
|---|---|
| Scope of practice | What each license type may and may not do, by service, with a delegation matrix reference |
| Supervision and protocols | Who the medical director is, which standing orders apply, when to stop and escalate |
| Good-faith exam | That no patient is treated before the required exam and order exist |
| HIPAA | Minimum necessary access, no discussion of patients outside work, snooping prohibition, sanctions |
| Patient photography | Clinic devices only, no personal phones, consent required, storage rules |
| Social media | No patient content without signed release, no clinical advice, no impersonating the clinic |
| Product handling | Cold chain, reconstitution, lot logging, no personal purchase or diversion of drugs |
| Infection control and OSHA | Bloodborne pathogen exposure plan, sharps handling, PPE, hazard communication |
| Adverse events | Immediate reporting duty, non-retaliation for reporting, who to contact after hours |
| Licensure maintenance | Duty to report license discipline, lapse or restriction immediately |
| Treating friends and family | Whether staff may be treated, and by whom, with the same charting requirements |
| Non-solicitation and confidentiality | Client list protection, drafted to state law limits on restrictive covenants |
The photography and social media sections carry disproportionate risk. Staff posting a client's before-and-after from a personal phone is simultaneously a HIPAA disclosure without authorization, a marketing claim you did not approve and, if the client is identifiable, a potential privacy tort. Make the rule absolute and make the sanction explicit.
How should the handbook interact with the clinical manual?
Keep them separate but cross-referenced. The handbook governs the employment relationship and can be changed unilaterally with notice. The policies and procedures manual governs clinical practice, is signed by the medical director, and carries version control tied to what was in force on a given treatment date. Merging them means every clinical protocol update becomes an employment law event, and every handbook revision muddies your clinical record.
What this means for your paperwork
Have each employee sign a dated acknowledgement of receipt confirming the at-will status and that they have read the scope-of-practice and HIPAA sections, and re-sign after every material revision. File it with their license copy, credential verification, training and competency records, and HIPAA training certificate — that bundle is what an investigator or an underwriter asks for by name.
Have employment counsel in each state you operate in review the handbook annually. Leave laws, pay transparency rules and restrictive covenant limits change frequently, and an outdated handbook is worse than a short one because it documents a policy you are no longer permitted to enforce.
Related questions
This answer is educational and is not legal or medical advice. Requirements vary by state and change over time — verify with your own legal and clinical advisors before applying anything here in practice.