Guides · Last updated July 2026

How should aesthetic clinics take and store before and after photos?

Before and after photos need three things done properly: written consent that separates clinical record use from marketing use, consistent capture technique (same angle, lighting, distance and expression every time), and secure storage linked to the patient record rather than a personal camera roll. Get those right and photography becomes both your best clinical protection and your best marketing asset.

Photography is the most double-edged asset in an aesthetic clinic. Done well, it is your clinical evidence when a client questions a result, your proof of progress that drives rebooking, and the marketing content that fills your diary. Done casually, on a personal phone, without proper consent, it is a GDPR breach and an insurance gap wearing a nice filter.

What consent do you need for clinical photography?

Two separate consents, recorded separately:

Clinical record photography. Photos taken to document treatment, stored in the patient record. This should be near-universal, explain that it protects both parties and documents progress.
Marketing use. Permission to publish, on Instagram, your website, training portfolios, with choices about anonymisation (eyes cropped or covered). This must be optional, separate, and withdrawable at any time without affecting treatment.

Bundling both into one signature is the most common mistake we see. It invalidates the marketing consent (not freely given if it feels required for treatment) and creates awkward conversations when a client spots themselves on your feed. Our consent forms guide covers the wider documentation picture.

How do you take comparable before and after photos?

The value of an after photo is entirely dependent on how well it matches the before. A checklist worth laminating:

Same place. One designated spot in the clinic with a plain background. Mark the floor where the client stands and where the camera goes.
Same light. Consistent artificial lighting. Window light changes by the hour and season and will flatter or damn a result unfairly.
Same distance and focal length. Phone zoom changes facial proportions; a selfie-distance lens widens noses and chins.
Same angles. For facial work: front, left and right 45 degrees, both profiles. For body treatments, front, back and sides at fixed distance.
Same client presentation. Neutral expression, hair back, no makeup on the treated area, jewellery off.
Timed correctly. Immediately before treatment, then at the review: about 2 weeks for toxin, 2 to 4 weeks for filler once swelling has settled, and per-protocol across a course of skin treatments.

Where should the photos live?

Clinical photographs are special category health data under UK GDPR. The storage bar is the same as for medical records:

Encrypted at rest, transmitted over HTTPS.
Linked to the patient record, tagged with date and treatment, not searchable-by-nobody in a 30,000-item camera roll.
Access-controlled: clinic staff only, with the ability to remove access when someone leaves.
Retained on a policy: clinical copies for your records retention period, marketing copies only while consent stands.
Exportable: for subject access requests, insurer queries and complaint responses.

The personal-phone workflow fails every one of those tests, and it fails them in the worst way: invisibly, until the day a phone is lost, an employee leaves with their camera roll, or a client makes a subject access request you cannot fulfil.

How should you use photos for marketing without crossing lines?

Only clients with explicit, current marketing consent.
Honest comparisons: same lighting and angle, no filters, no retouching of the treated area. The ASA has upheld complaints against clinics for misleading imagery, filtered afters are an advertising compliance issue, not just an ethics one.
Watermark your work; good results get stolen.
Re-check consent before big campaigns, consent given in 2024 for "social media" is worth re-confirming before a billboard.

How does ClinicBook handle photography?

ClinicBooktreats photography as a first-class part of the patient record: photos upload straight to encrypted storage linked to the patient and treatment, tagged before, during or after, viewable as a gallery, side by side, or with a draggable comparison slider for the money shot at review appointments. Access follows clinic roles, and a patient's full record, photos included, exports when you need it.

Related guides

Frequently asked questions

Is it legal to store patient photos on my personal phone?

It is a GDPR incident waiting to happen. Clinical photographs are special category health data: they need encrypted storage, access control and retention rules. A personal camera roll that syncs to iCloud, backs up to a laptop and sits next to holiday photos meets none of those requirements. Use clinic software with secure, patient-linked photo storage.

Do I need separate consent to use photos in marketing?

Yes. Consent to clinical photography (for the treatment record) and consent to marketing use (Instagram, website, portfolios) are separate decisions. Record them separately, and make marketing consent freely refusable and withdrawable, a client must be able to say yes to the record and no to Instagram.

When should before and after photos be taken?

Before photos immediately pre-treatment at the consultation. After photos at the review appointment, typically 2 weeks for anti-wrinkle treatments (full effect), 2 to 4 weeks for fillers (swelling settled), and per-protocol for skin treatments. Same lighting, angle, distance and expression every time, or the comparison is meaningless.

How long should clinical photographs be kept?

Treat them like the rest of the clinical record: at least 8 years from the last treatment for adults is the commonly used standard, aligned with your insurance claim window. Marketing copies are separate, delete those promptly if the client withdraws marketing consent.

What makes before and after photos consistent enough to compare?

Fixed position and distance (use the same room and marks), neutral expression, hair off the face, no makeup where relevant, identical lighting (avoid window light that changes hourly), the same camera or device, and the same angles every visit: typically front, left 45 degrees, right 45 degrees, and profile for facial work.

Can patients request their photos?

Yes. Photographs form part of their health record, so a subject access request includes them. Software that can export a patient's full record, forms, notes and photos, turns a stressful legal deadline into a button.