Beauty Therapist Leaving with Client Data and Making Unverifiable Claims
A 26-year-old beauty therapist has worked three years at a salon. She plans to resign in two weeks and start a home salon. She has copied 180 client phone numbers from the salon booking system and saved before/after photos of 12 clients from her phone. She intends to message all 180 with a 20% opening discount, post the photos on Instagram, and advertise 'dermatologist-approved acne cure' and 'permanent hair removal guaranteed.' Her home room has a sink, one treatment bed, no separate toilet, and a rented chair. She has a diploma but no local registration or insurance. She asks whether she can keep using the salon's loyalty card design and product brand names in her ads. She has saved ₹40,000 as starting capital and expects to charge ₹800 for a facial; her rent is ₹12,000 per month. She has not yet opened a business bank account or written a consent form.
1. Which parts of the therapist's launch plan create ethical, legal or business risk, and why?
Read the worked answer
Client data: The 180 phone numbers belong to the salon's booking system. Copying and using them without consent is a confidentiality and data-protection problem, even if she personally treated those clients. The before/after photos need specific written consent for marketing, including whether faces are identifiable. Using them without consent can breach privacy.
Claims: 'Dermatologist-approved acne cure' and 'permanent hair removal guaranteed' are medical and guaranteed-result claims that she cannot substantiate with a diploma alone. They can mislead clients and create legal exposure. Using the salon's loyalty card design or brand names may infringe intellectual property.
Premises and business: A home room with no separate toilet may not meet local hygiene or licensing requirements. She has no insurance, no business bank account and no consent form. A ₹800 facial against ₹12,000 rent needs a realistic client-volume calculation; a 20% discount may worsen cash flow. These are not minor details; they affect whether the business can operate safely and lawfully.
2. Recommend a compliant client-contact and launch plan for the first 60 days.
Read the worked answer
First: Do not use the copied list. Return or delete the salon data and photos, and check the employment contract for confidentiality and non-solicitation terms. Resign properly and do not solicit salon clients while still employed. After leaving, build a public presence through a business page, local advertising and word of mouth; clients who independently choose to follow her can opt in.
Compliance: Register the business where required, obtain insurance, write consultation and consent forms, set up a business bank account, and complete a hygiene risk assessment for the room. Use only labelled products with batch records and follow local rules on toilet and hand-washing facilities. Price by calculating rent, products, time and tax; if using an opening offer, limit it and set an end date.
First 60 days: Open bookings with patch tests, keep treatment records, collect written reviews and photos only with separate consent, and track income and expenses. This builds a defensible business rather than a quick transfer of someone else's client base.
3. Rewrite her advertising and digital record-keeping approach to be accurate and privacy-conscious.
Read the worked answer
Advertising rewrite: Replace 'dermatologist-approved acne cure' with a factual service description such as 'deep-cleansing facial for oily and congested skin; consultation required.' Replace 'permanent hair removal guaranteed' with the actual method and realistic outcome, and only advertise that method if she is trained and insured to perform it. Remove 'guaranteed' and 'cure'. Do not use salon brand names or loyalty-card designs without permission.
Photos and records: Use only written, specific consent for before/after images, state where they will appear, and avoid identifiable faces unless separately agreed. Keep consent forms and treatment records securely, separate from personal phone galleries, and delete images when consent is withdrawn. Do not post client messages or screenshots without permission. Use a business account with two-factor authentication and a simple privacy notice explaining what data is kept and why. Accurate language and consent-based images protect both the business and the client.