Fill open slots and events with promo texts that promote the visit. Keep prescription drugs and client treatment history out of every promotion.
Get started for freeSchedule a demo →Med spas can text specials, events and open appointment slots to clients who agreed in writing to promotional texts. Do not text a Botox special. FDA labeling describes BOTOX Cosmetic as "a prescription medicine," and carrier rules forbid promoting drugs that need a prescription, even from a licensed provider. Promote the visit instead: a consult, an open house, a gift card or a last-minute opening. Keep each client's treatment history out of promotional texts, and end every promo with "Reply STOP to opt out."
A "Botox specials text" is the message many med spas want to send. Here is why each version is risky and what to send instead.
Risky
Safer
BOTOX Cosmetic is a prescription medicine. Carriers forbid promoting prescription drugs, even from licensed providers.
Risky
Safer
It promotes a drug and reveals the client's treatment history in a regular text that anyone near the phone can read.
Risky
Safer
Swapping the brand name for the drug class is still promoting a prescription drug. Promote the event and the visit.
Promo texts work for med spas. Clients book when they hear about an opening or an event. The trouble is that the most popular med spa offer is often a prescription drug.
FDA's Medication Guide says "BOTOX Cosmetic is a prescription medicine that is injected into muscles." See the FDA Medication Guide for BOTOX and BOTOX Cosmetic. Other neurotoxins are prescription drugs too.
Twilio's carrier rules say "Promotional Messaging for drugs that cannot be sold over-the-counter (OTC) are forbidden regardless if the business is a licensed professional." Twilio also says a campaign rejected for prescription drug marketing "is not eligible for resubmission." See Twilio's forbidden message categories and Twilio error 30941.
Some spas swap "Botox" for "tox" or "neurotoxin." Others put the price on a web page and text a shortened link. Neither works. Carriers judge the business type and linked pages, not only the words. Twilio says public link shorteners "are not permitted."
Others pull a list of clients by last treatment and text "time for your touch-up." That puts a client's treatment history in a regular text on a lock screen. A family member or coworker can read it.
Marketing texting tools are built for retail. They make it easy to blast a discount, but they do not stop a prescription drug offer, and most do not sign a BAA. A med spa with medical providers needs a tool that keeps promotions and patient details apart. Read what makes texting HIPAA compliant.
Promote what clients book with you: consults, open slots, events, gift cards, a new provider, new hours or a referral thank-you. A discount on a consult or a gift card is a discount on your service, not on a drug.
Keep drug names, drug prices and before-and-after promises out of promotional texts. In an Insecure text, also leave out treatment names. That text is a regular SMS and can't contain PHI.
A promotion should read the same for every client on the list. Do not merge a last treatment, a product or a body area into the text. Do not build a list called "lapsed tox clients" and let the text reveal why the client was chosen.
If your med spa is a HIPAA covered entity, the marketing rules matter too. HIPAA generally does not treat a message about your own services as marketing. It does when a third party, such as a manufacturer, pays you to describe its product, and then you need the client's written authorization. See 45 CFR 164.501 and 45 CFR 164.508.
Anything that is about one client's own care, such as aftercare or a follow-up visit, belongs in a Secure text with link. It can contain PHI. It is still not a place for a drug offer.
Promotional texts need prior express written consent: a signed, written agreement that names the phone number and authorizes marketing messages. Add the consent line to your intake form. See 47 CFR 64.1200.
End every promo with "Reply STOP to opt out." Send between 9am and 8pm in the client's time zone. That sits inside the federal 8am to 9pm window for telephone solicitations.
Open Broadcast in the web app sidebar and follow the three steps: Details, Recipients, Message. Choose Insecure text for a promotion and keep it free of PHI. See the broadcast overview and how to create a campaign.
Export clients who agreed to promotional texts from your practice management system as a CSV of up to 20,000 rows. Map only the columns the promo needs, such as first name. Skip treatment columns. See adding recipients and personalizing messages.
For a last-minute opening, send to a small list first. Messages go out one at a time at the pace you set, and you can pause once the slots fill. Numbers on your org's opt-out list, including anyone who replied STOP, aren't texted. Replies arrive as private conversations in your team inbox. See sending and tracking.
Broadcasts need the Patient SMS Add-on and membership in a team with an assigned phone number. BloomText verifies new accounts before their first broadcast.
Promotional samples need the client's prior express written consent and end with opt-out wording. None names a drug or a treatment.
Insecure text: can't contain PHI
Send to a small list and pause once the slots fill.
Insecure text: can't contain PHI
Insecure text: can't contain PHI
Insecure text: can't contain PHI
Insecure text: can't contain PHI
Secure text with link: can contain PHI
About one client's own care, so it goes as a Secure text with link. No offer.
Last verified October 15, 2026.