Guide

CRM for salons, med spas and gyms: client records, rebooking and what to watch

Salons, med spas and gyms usually already have a CRM without calling it that: the client list inside their booking or membership software, with history, notes and reminders. A separate CRM adds lead tracking and follow-up for people who have not booked yet. Med spas must be more careful, because treatment notes and photos are health information that needs a vendor who signs a HIPAA business associate agreement.

By Plato Belmont, founder of Magnet Mint, Boston. Updated

Your booking software is already a CRM

A salon owner searching for a CRM often finds enterprise sales software built for teams of fifty. That is the wrong tool. Salon, spa and gym software already stores what a CRM stores: a profile per client, appointment or visit history, notes, forms, spend and reminders.

So the real question is narrower. Is your booking or membership software enough, or is there a gap before or after the booking? For the general idea, see what is a CRM, and for a method of choosing see how to choose a CRM.

What the booking software lists

These are statements from the vendors’ own pages, as we read them in October 2026.

ToolWhat the page lists
GlossGeniusBeauty and wellness plans: Standard $28, Gold $56, Platinum $168 a month billed monthly ($24, $48 and $148 billed annually). Med spa plans: Practice Essentials $168 and Practice Advanced $298 a month billed monthly ($148 and $248 billed annually). 14-day free trial
MindbodyThe pricing FAQ gives Starter at $79 a month per location for North America; the main price block we saw showed euros, so see the vendor’s US pricing page. The top plan, Ultimate, lists a built-in sales pipeline, a lead management dashboard, and automated email and text campaigns
VagaroThe page we opened displayed prices in pounds, so see the vendor’s US pricing page. It lists customer tracking and client data on every plan

GlossGenius lists client profiles, notes and history, forms and waivers, review management and rebooking reminders. Which tier includes which feature is not clear on its comparison table, so confirm with the vendor before you buy. Text marketing is limited to credits by plan: 500 on Gold and Practice Essentials, 2,500 on Platinum and Practice Advanced.

Prices change. Check each vendor’s US pricing page before you decide. Our CRM setup page explains how we recommend a tool for a service business.

What a separate CRM adds

A booking tool is built around people who have already booked. A CRM adds the people who have not:

  • Inquiries. Someone asks about bridal hair, lip filler or a trial class on your website or Instagram and never books. Without a record, that interest disappears.
  • Source tracking. Which channel brings clients who return, not just ones who come once?
  • Follow-up. A reminder to reply, a quote, a consultation date, a win-back message to someone who stopped coming.
  • Several tools in one view. If your booking is in one tool, your website forms in another and your texts in a third, a CRM or a connection between them gives one list.

A free option is enough to test this. HubSpot lists a free CRM for up to 2 users and 1,000 contacts (October 2026). For an all-in-one platform with texting and automation, read our GoHighLevel review.

Salon: the minimum useful setup

  1. Client card. Name, phone, email, preferred stylist, services, last visit, next visit.
  2. Rebooking date. Before the client leaves, book the next visit or set the due date based on the service (color, cut, nails).
  3. Reminder and win-back. An appointment reminder, and a message to anyone past their usual return date.
  4. Consent field. Record that the client agreed to texts and emails, and when.
  5. Review request. One message after a visit, sent once.

Med spa: client records are health information

A med spa differs from a salon. Treatment history, intake forms, medical questions, consent forms, SOAP notes and before-and-after photos tied to a named client are health information when a licensed provider is delivering care. Under HIPAA, a patient’s name tied to an appointment request counts as protected health information (45 CFR 160.103), so the software vendor that stores it needs to sign a business associate agreement (BAA) with your practice first.

What to check:

  • Does the vendor sign a BAA, and does it cover the exact plan and features you use? A HIPAA option, such as the free HIPAA add-on GlossGenius describes in its FAQ, is a good sign. It is not a signed agreement, so get the agreement in writing.
  • Does the texting tool, the website form and the reminders tool also have an agreement? Each tool that carries a client’s name and treatment interest is part of the chain.
  • Where do photos go? Keep them inside the covered system, not a phone camera roll.

Without an agreement, keep the CRM to general information, such as someone’s interest in a skin consultation, and send the person to your booking system or front desk for details. Whether HIPAA applies to your business depends on how you operate, so ask a lawyer about your situation. This is not legal advice. For a practice-focused walk-through, see CRM for dental and medical practices.

Gym or studio: membership first

A gym lives on recurring billing and attendance. The core system is membership software that handles billing, check-ins and class bookings. A CRM idea that helps on top:

  • Lead pipeline. Trial-class signups and tour requests, with a follow-up date. Mindbody’s page lists a lead management dashboard on its top plan, described as helping capture, nurture and convert leads.
  • Early warning. Members who have not visited in 14 days get a friendly message from a person.
  • Win-back. A message to lapsed members a few months later.

Gyms and salons are typically outside HIPAA, since it applies to health care providers, plans and clearinghouses. Still, keep injury notes and waivers to what you need and restrict who can see them.

All three businesses text a lot, and the rules are the same. Automated texts need prior express consent, and marketing texts need prior express written consent (47 CFR 64.1200). Honor “stop” immediately. Business texting numbers need carrier registration (A2P 10DLC), which is separate from the software plan. We set up opt-in and STOP handling as part of any texting setup. This is not legal advice.

Mistakes we would avoid

  • Buying a second system to do what the first already does. Check your booking software for rebooking reminders, review requests and win-back messages before paying for another tool.
  • Keeping the client list in the stylist’s phone. When a stylist or trainer leaves, the relationship leaves with them. Keep contact details in a business account the owner controls.
  • Texting everyone. Send reminders to clients who agreed to them, and send promotions only to those who opted in to promotions.
  • Collecting more than you use. Every extra field is something to protect. If you do not use a client’s birthday or medical answers, do not ask for them.
  • No monthly look. Once a month, count new inquiries, bookings, returning clients and lapsed clients. Four numbers tell you more than a long report.

How to decide

  1. If you only need to see clients and rebook them, your booking software is probably enough.
  2. If you lose inquiries that never book, add a lead list, even a free one.
  3. If you hold treatment records, choose software whose vendor signs a BAA before anything else.
  4. If you run several tools, connect them so a lead is not typed twice. See website to CRM integration.

If you would like a second opinion on which tool fits, ask for a free demo.

Published . Updated .

Frequently asked questions

Do salons need a CRM?

Most salons already have one inside their booking software: client profiles, visit history, notes and rebooking reminders. A separate CRM is worth it for tracking inquiries that have not booked, running follow-up campaigns, or combining several locations.

What is the best CRM for a med spa?

Start with software built for med spas, where client records, treatment notes, photos and consent forms live together, and ask whether the vendor signs a HIPAA business associate agreement. GlossGenius lists med spa plans at $168 and $298 a month on monthly billing ($148 and $248 billed annually), and its FAQ describes HIPAA compliance as a free add-on (October 2026). The page does not mention a business associate agreement, so ask for one.

What is the best CRM for a gym?

Membership software with billing, check-ins and client records is the core. Mindbody's pricing FAQ gives a Starter price of $79 a month per location for North America, and the page lists a lead management dashboard on its top plan, Ultimate. A separate CRM helps with trial-class leads and win-back campaigns.

What should a CRM include for a salon or studio?

Client profile with contact and preferences, visit and spend history, notes, a rebooking date, lead source, consent to text and email, and a way to send reminders and win-back messages.

Is a med spa CRM covered by HIPAA?

Treatment notes, photos and consent forms tied to a named client are health information when a med spa provides care, so the software vendor should sign a HIPAA business associate agreement before you store them. A plan that lists HIPAA features is not the same as a signed agreement. This is not legal advice.

Are salons and gyms covered by HIPAA?

HIPAA applies to health care providers, health plans and clearinghouses and their business associates, so a hair salon or a gym is typically outside it. Even so, treat waivers, injury notes and photos as private and keep them to what you need. This is not legal advice.

Sources

  1. GlossGenius: Pricing, October 2026
  2. Mindbody: Pricing, October 2026
  3. Vagaro: Pricing, October 2026
  4. Cornell LII: 45 CFR 160.103 (HIPAA definitions), October 2026
  5. Cornell LII: 47 CFR 64.1200 (TCPA consent rules), October 2026
  6. HubSpot: CRM pricing, October 2026

Related reading

Start with a free demo

See how customers and AI assistants see your business today.

A short call, then a demo for your business: what customers find, what AI answers say, and where you lose leads. No obligation.