Before/After Photos on Your Salon Website: Copyright Guide

Your portfolio is your best marketing tool. A row of before/after shots showing a perfect balayage or a flawless skin treatment does more than any ad copy could. But those photos come with legal strings attached, and most salon owners don't realize it until something goes wrong.

Two separate areas of law apply here: copyright (who owns the photo) and privacy (who's in the photo). Getting one right doesn't cover the other. You need both.

Who owns the photo?

Copyright belongs to whoever pressed the shutter button. That sounds simple enough, but in a salon it gets complicated fast.

Your staff took the photo on a work phone. If an employee takes photos as part of their job, the employer typically owns the copyright. This is the cleanest scenario. Make sure your employment contracts mention that work-related photos belong to the business.

A freelance photographer took the photo. This is where salon owners get tripped up. You hired the photographer, you paid for the session, but they still own the copyright unless you have a written agreement transferring it. A verbal "sure, you can use them" isn't enough. Get a signed contract that spells out what you're allowed to do with the images: website, social media, print materials and for how long.

The client took the photo. Clients sometimes send you photos of their results. Maybe they're proud of their new hair colour and want to share. That's flattering, but posting their photo on your website without written permission is a copyright problem. The client owns the photo. You also need their consent to show their face, which brings us to the privacy side.

The privacy side: GDPR and photos

A photo showing a recognizable person counts as personal data under the GDPR. It doesn't matter who took it. If someone can be identified in the image, you need a legal basis to publish it.

For salon websites, that legal basis is consent. You need the person in the photo to agree that you can use their image on your website and social media.

This is separate from copyright. Even if you took the photo yourself with your own phone, you still need the person's permission to put it online.

When photos become sensitive data

Here's where salons need extra caution. Some before/after photos reveal medical or health-related conditions. Hair loss treatments, acne skin care, scar camouflage, scalp conditions. Under GDPR Article 9, information about someone's health is "special category data" and gets much stricter protection.

If your before photo shows a client's skin condition or thinning hair, you're processing health data. The consent you get needs to be explicit, specific and documented. A casual "yeah you can post that" at the reception desk won't cut it.

Keep records of exactly what the client agreed to and when. If they withdraw consent later, remove the photos promptly.

A simple consent form that works

You don't need a ten-page legal document. A short, clear form covers what you need:

• What: which photos or types of photos you'll use
• Where: your website, Instagram, Facebook, Google Business profile, printed materials
• How long: until they ask you to remove them, or a fixed period like two years
• Withdrawal: how they can ask you to take the photos down
• Contact: who to reach out to with questions

Print a few copies and keep them at your front desk. Hand one to the client before the photo session, not after. Give them a moment to actually read it. Keep signed copies on file.

For treatments that involve health data, add a line that specifically mentions the health aspect: "I understand that these photos may show my [skin condition / hair loss / other], and I give explicit consent for their use."

Instagram reposts are not website consent

A client posts a photo of their new nails and tags your salon. You screenshot it and put it on your website's gallery page. That feels harmless, but it's not the same as having consent.

Posting on Instagram with a tag is not a blanket license for you to use that image anywhere you want. The client shared it on their own feed, for their own followers. Your website is a different context.

If you want to feature client photos from Instagram on your website, ask them directly. A quick DM followed by a signed consent form is the way to go. Reposting within Instagram Stories is generally fine as long as you credit the original poster. But moving content to your own website crosses into different territory.

Stock photos: an easier option with a catch

If all this sounds like too much hassle, you might consider stock photos instead. Sites like Unsplash and Pexels offer free, commercially licensed photos of salon settings and beauty treatments. Check our guide on safe free image sources for the full list.

The catch: customers can tell. A generic stock photo of a model with perfect lighting doesn't build trust the way your actual work does. People visit salon websites to see real results. Stock photos work fine for general pages like your homepage hero or team section. But your portfolio should show your actual work.

What to do right now

Check your existing photos. Go through your website gallery. Do you have written consent for every person shown? Do you have the right to use every photo? If not, either get consent now or remove the photo.

Set up a consent process. Print consent forms. Train your staff to offer them before taking photos. Make it part of the appointment workflow, not an afterthought.

Review freelance photographer contracts. If you've hired a photographer for your portfolio, check whether the contract gives you the right to use those photos online. If there's no contract at all, contact the photographer and get one in writing.

Check your web designer's work. Sometimes web designers add placeholder images during the build process and those images stick around. If you're not sure where a photo came from, that's a problem. Our guide on web designer copyright liability explains who's responsible.

Run a scan. Our free website scan checks for common image and compliance issues that could put your salon at risk.

For a broader look at GDPR rules specific to salons, dentists and other appointment-based businesses, read our GDPR guide for salons and dentists. And if you're worried about images that might already be flagged, our guide on scanning for copyrighted images walks you through the process.

Frequently asked questions

Can I use photos of my own work if the client's face isn't visible?

If the person truly cannot be identified, GDPR doesn't apply because it's not personal data anymore. A close-up of nails, a hair colour shot from behind or a skin treatment on an anonymous body part is generally fine from a privacy standpoint. But you still need copyright sorted. If someone else took the photo, you need their permission to use it.

What happens if a client withdraws their consent?

You have to remove the photos. The GDPR gives people the right to withdraw consent at any time. Remove the images from your website, social media and any marketing materials without unnecessary delay. Keep a record of when consent was withdrawn and when you removed the photos.

Do I need separate consent for each platform?

Not necessarily, but your consent form should list all the places where you plan to use the photos. If you later want to use them somewhere new that wasn't covered, you need to go back and ask. Being specific upfront saves you from awkward conversations later.

Can I keep using photos after a client leaves for another salon?

Yes, as long as you had valid consent and they haven't withdrawn it. A client switching salons doesn't automatically revoke their consent. But be prepared for them to ask you to remove the photos. Some people feel uncomfortable having their image on the website of a business they no longer visit.

Should I watermark my salon photos?

Watermarking protects against other people stealing your work, but it doesn't change any of the copyright or consent rules. It's a practical step, not a legal one. If you do watermark, keep it subtle. A giant logo across a before/after shot defeats the purpose of showing your work.