If you have ever had a client claim they were not told about aftercare, or an insurance company ask for proof of informed consent, you already know why consent forms matter. If you have not, consider yourself lucky, and consider this your heads-up.
Consent forms are not just paperwork. They are a legal agreement between you and your client. They confirm that the client understands what is about to happen, that they have disclosed relevant health information, and that they accept the risks involved. Without one, you are exposed.
This guide covers what consent forms should include for tattoo and beauty studios, how to handle them properly, and what changes when you move from paper to digital.
Why consent forms exist
The purpose of a consent form is straightforward: informed consent. Before you put a needle to someone's skin, apply chemicals to their hair, or perform any treatment that carries risk, the client needs to understand what they are agreeing to.
From a legal perspective, a signed consent form demonstrates three things:
- The client was informed of the procedure, its risks, and its aftercare requirements
- The client disclosed any health conditions, allergies, or medications that could affect the outcome
- The client agreed to proceed with full knowledge of the above
Without this documentation, any dispute becomes your word against theirs. And in a legal setting, the burden of proof falls on the service provider.
What tattoo consent forms should cover
Tattooing is an invasive procedure. You are breaking skin, introducing ink, and creating a permanent result. The consent form needs to reflect that reality.
Health disclosures
Your form should ask about:
- Allergies, particularly to metals, latex, and topical products. Some clients react to specific ink pigments, especially reds and yellows. If they do not disclose an allergy and you do not ask, both of you have a problem.
- Skin conditions like eczema, psoriasis, or keloid scarring. These can affect healing and final results. A client with a history of keloids needs to know (and acknowledge) that the tattoo may not heal as expected.
- Medications that affect bleeding or healing. Blood thinners, immunosuppressants, and certain acne medications (like isotretinoin) are all relevant. A client on blood thinners will bleed more during the session, which affects your work and their healing.
- Pregnancy and breastfeeding. Most studios decline to tattoo pregnant clients as a precaution. Your consent form should ask, and your policy should be clear.
- Recent sun exposure or sunburn. Tattooing sunburned skin produces poor results and increases healing complications.
Aftercare acknowledgment
The client needs to confirm that they understand how to care for their new tattoo. This includes keeping the area clean, avoiding sun exposure during healing, not picking at scabs, and following any specific instructions you provide.
If a client comes back with an infected tattoo and claims you never told them about aftercare, a signed aftercare acknowledgment is your best defense.
Age verification
In most jurisdictions, you cannot tattoo a minor without parental consent, and some regions prohibit it entirely. Your consent form should include an age declaration, and you should verify it with ID.
Liability waiver
This section confirms that the client accepts the inherent risks of tattooing: infection (despite proper hygiene), allergic reactions, scarring, and dissatisfaction with the result. It does not absolve you of negligence, but it does establish that the client understood the risks before the procedure.
Contact information
Collect the client's full name, phone number, email address, and date of birth at minimum. You need this for follow-up care, and your records need it for identification.
What beauty and cosmetic consent forms should cover
The tattoo world gets the most attention around consent forms, but beauty and cosmetic services carry their own risks that require documentation.
Chemical treatments
Hair coloring, keratin treatments, chemical peels, and lash lifts all involve chemicals that can cause allergic reactions. A patch test is standard practice for many of these, but the consent form should document that:
- The client was offered a patch test (or that one was performed and the result was negative)
- The client disclosed any known allergies or sensitivities
- The client understands the risks of the specific chemicals being used
Skin treatments
Waxing, microneedling, dermaplaning, and facials all involve direct skin contact and carry risks of irritation, burns, or infection. Your consent form should cover:
- Skin conditions or sensitivities
- Current medications (retinoids, for example, make skin more sensitive)
- Recent procedures on the same area
- Aftercare instructions and expectations
Semi-permanent procedures
Microblading, permanent makeup, and lash extensions sit in a gray area between beauty and tattooing. They involve skin penetration or adhesive contact, and the consent requirements are closer to tattooing than to a standard haircut. Treat them accordingly.
The GDPR angle
If you operate in the EU, consent forms involve more than just treatment consent. You are also collecting personal data: names, contact details, health information. Under the GDPR, health data is a "special category" with stricter processing requirements.
What this means in practice:
- You need a lawful basis for collecting and storing the data. Consent for data processing (separate from treatment consent) or legitimate interest are the most common grounds.
- You must store the data securely. Paper forms in an unlocked cabinet are harder to justify than a digital system with access controls.
- Clients have the right to access and delete their data. If a client asks what information you hold about them, you need to be able to produce it. If they ask you to delete it, you need a process for that (balanced against any legal retention requirements).
- Data minimization. Only collect what you actually need. A consent form for a haircut does not need a client's home address.
For studios that operate across borders or serve international clients, GDPR compliance is not optional. And even outside the EU, more regions are adopting similar data protection frameworks.
Paper vs. digital consent forms
Paper consent forms have been the industry standard for decades. They work, technically. But they come with problems that digital alternatives solve.
The case against paper
Storage. Every signed form needs to go somewhere. Filing cabinets fill up. Forms get misfiled, lost, or damaged. Finding a specific client's consent form from a year ago means digging through stacks of paper.
Legibility. Clients fill out forms in a hurry. Handwriting is often unclear, phone numbers are ambiguous, email addresses are unreadable. You end up asking them to repeat information verbally, which defeats the purpose of having a form.
Compliance risk. Paper forms in an unlocked drawer are difficult to protect and difficult to demonstrate compliance with under GDPR or similar regulations. If someone breaks into your studio, those forms and all the personal data on them are compromised.
Speed. Handing a clipboard to a client while you are finishing a session interrupts your workflow. You wait for them to fill it out, then you manually enter their details into whatever system you use.
The case for digital
Digital consent forms address all of these issues. The client enters their own information (no handwriting), reads the consent document on a screen, confirms they agree, and signs digitally. The data goes directly into your system, structured and searchable.
You can pull up any client's consent status instantly. Nothing to file, nothing to lose, nothing that smudges or fades. For studios that process multiple clients per day, the time savings add up fast.
ellume lets you upload your consent document as a PDF in Settings. When clients check in through Kiosk Mode on your iPad or iPhone, they view the document, confirm their agreement, and sign directly on the screen. The consent status and signature are saved to the client's profile.
What to include in your consent document
Regardless of format, your consent document (the actual text clients read and agree to) should be written clearly and cover these areas:
- Description of the procedure. What you are doing, in plain language.
- Risks and potential complications. Allergic reactions, infection, scarring, dissatisfaction.
- Health disclosure requirements. What the client needs to tell you before the procedure.
- Aftercare instructions. What the client needs to do after the procedure.
- Cancellation and refund policy. What happens if the client changes their mind.
- Data handling statement. How you will store and use their personal information (especially important under GDPR).
- Acknowledgment and signature. The client confirms they have read, understood, and agreed to everything above.
Have a lawyer review your consent document, especially if you are writing it for the first time. Template consent forms from the internet may not cover the specific requirements of your jurisdiction or your services.
When to update your consent form
Your consent document is not a "set it and forget it" piece of paper. You should review and update it:
- When you add new services. If you start offering a new treatment, your consent form needs to cover its specific risks.
- When regulations change. Data protection laws evolve. Your form should keep up.
- When your insurance provider advises it. Your liability insurance may have specific requirements about what your consent form should include. Check with your insurer.
- When you learn from incidents. If a client has a reaction or complication that your form did not specifically address, update the form to cover it going forward.
Insurance and consent forms
Speaking of insurance, this is where consent forms go from "good practice" to "non-negotiable."
Most professional liability insurance policies for tattoo and beauty studios require you to obtain informed consent before performing any procedure. If a client files a claim and you cannot produce a signed consent form, your insurer may deny coverage.
Some policies specify what the consent form must include. Others leave it to your discretion but expect documentation to exist. Either way, no consent form means no protection when you need it most.
Ask your insurance provider for their requirements. Some will even provide template language you can use.
Building client trust through consent
Consent forms are often seen as a studio's protection. And they are. But they also serve the client.
A well-written consent form tells the client: this studio takes safety seriously. They are transparent about risks. They care enough to document everything properly. For first-time clients who might be nervous, that professionalism builds confidence.
Compare two experiences. In one, you hand the client a crumpled form on a clipboard and say "just sign at the bottom." In the other, the client reads a clear, professional document on a clean screen, reviews the information at their own pace, and signs digitally. Which studio would you trust more?
A structured intake process does more than collect consent. Research on appointment commitment shows that clients who invest time in a check-in process are more likely to follow through with their appointment and return for future visits.
Practical steps to get started
If you are currently using paper consent forms (or, worse, no consent forms at all), here is how to make the switch:
- Draft your consent document. Use the checklist above. Cover the procedure, risks, health disclosures, aftercare, and data handling. Keep the language clear and direct.
- Have it reviewed. A lawyer familiar with your industry and jurisdiction should review the document. This is not the place to cut costs.
- Choose your format. Decide whether you will use paper or digital. If digital, pick a system that stores consent status and signatures in the client's profile so you can access them later.
- Train your team. Everyone in your studio should know where the consent form is, how to present it to clients, and what to do if a client refuses to sign (the answer: do not proceed with the treatment).
- Make it part of your intake flow. Consent should happen before the session, not during or after. Build it into your check-in process so it becomes automatic.
If you use ellume, uploading your consent PDF takes about a minute. Once it is set up, every client who checks in through Kiosk Mode will see it, agree, and sign before their appointment. No extra steps for you. Learn more about the check-in flow.
After the consent form: building complete client records
Consent is the first step in a client relationship, not the last. A good studio builds on that initial intake with session documentation. Post-session workflows that capture photos and notes after each appointment create a history that is valuable for future sessions, touch-ups, and continuity of care.
When your intake captures the client's information and consent, and your post-session workflow captures the results and notes, you end up with a complete client record that serves you well for years.
Frequently asked questions
What should a tattoo consent form include?
A tattoo consent form should cover health disclosures (allergies, skin conditions, medications, pregnancy), aftercare acknowledgment, age verification, and a liability waiver. It should also collect the client's contact details and be signed before any work begins.
How long should I keep consent forms on file?
Keep consent forms for at least the statute of limitations period in your jurisdiction, which is typically three to six years. In the EU, GDPR requires you to retain personal data only as long as necessary for the stated purpose, but you may need to balance this against legal retention requirements. When in doubt, consult a local lawyer.
Do beauty salons need consent forms too?
Yes. Any treatment that involves chemicals (hair dye, keratin, lash adhesive), skin contact (waxing, microneedling, facials), or physical alteration should have a consent form. It protects you from liability and demonstrates that the client was informed of the risks before the treatment began.
