SMS Consent in Ireland: A Guide for Salons and Clinics

If you run a salon, beauty clinic or med spa in Ireland, you generally need a client’s clear, affirmative consent before you send them a promotional text. There is one narrow exception for existing customers, and appointment reminders are treated differently from marketing. This guide explains each rule in plain terms and shows how to build a consent process that holds up.

Growthreachmarketing

Build Better Salon Follow-Up

Growth Reach Marketing helps salons and clinics build automation and lead generation systems that support clear, well-managed customer follow-up.

Explore marketing services

TL;DR

Promotional SMS to individuals needs clear, affirmative consent. Silence, inactivity and pre-ticked boxes do not count.
You can text existing clients without fresh consent only if every condition of the existing-customer exception is met, including an opt-out at the point of collection and in every message.
An appointment reminder from a hairdresser is not direct marketing. A “20% off colour this week” text is.
When a client objects, you must stop marketing to them. Sending direct electronic marketing to a person who objects is a criminal offence.
Record who agreed, when, to what, and how, and make withdrawal as easy as saying yes.

Which rules apply to marketing texts in Ireland
Marketing text or service text?
What valid consent looks like
Collecting consent at the right moments
Can you text existing clients without asking again?
Recording consent so you can prove it
Handling opt-outs and withdrawal
What happens if you get it wrong
A practical SMS consent checklist for your salon or clinic
Where SMS fits in your wider marketing
Our perspective
Get your enquiry and follow-up process built properly
FAQ
Sources

Which rules apply to marketing texts in Ireland

Two pieces of law sit behind every marketing text you send. Electronic direct marketing, which includes SMS sent to individuals, is governed by the ePrivacy Regulations (S.I. No. 336/2011) and, where you process personal data, the GDPR, according to the Data Protection Commission’s guidance on electronic direct marketing.

In practice that means two questions for every message you plan to send:

Is this message direct marketing, or is it a service message about a booking that already exists?
If it is marketing, do you have valid consent, or does the existing-customer exception genuinely apply?

A phone number held in your booking system is personal data. A client’s name, treatment history and mobile number together tell a lot about a person, and for a clinic that can edge into health-related information. That is a good reason to keep your marketing list tidy and your reasons for holding each number clear.

Marketing text or service text?

The first sorting job is deciding what a message actually is. The Data Protection Commission’s page on what is and is not direct marketing gives a useful example: an appointment reminder from a hairdresser is not direct marketing.

That gives you a workable line for your own messages.

Message	Likely category	Consent needed for marketing?
“Reminder: your colour appointment is tomorrow at 2 pm”	Service message	No
“Your booking is confirmed for Friday at 11 am”	Service message	No
“Your cancellation is confirmed”	Service message	No
“Book a facial this month and get a free mask”	Direct marketing	Yes
“We have missed you. Come back for 15% off”	Direct marketing	Yes
“Reminder: your appointment is tomorrow. Also, try our new lip treatment”	Mixed, treat as marketing	Yes

The last row is the trap. Once you add a promotion to a reminder, you have turned a service message into a marketing one. The safest habit is to keep reminders clean: date, time, treatment, location, how to reschedule. If you want to promote something, send it as a separate message to people who have agreed to receive it.

The same logic applies to your confirmations and cancellations. Our own appointment cancellation confirmation page shows the kind of plain transactional wording that stays on the right side of that line.

The Data Protection Commission describes valid consent as freely given, specific, informed, and an unambiguous indication of the person’s wishes, given by a clear affirmative action. Silence, inactivity and pre-ticked boxes are not valid, and the request for consent must be clearly distinguishable from other matters, per the same DPC consent guidance.

Here is what each word means at your reception desk or on your website.

Freely given

A client should not feel they must agree to texts to get their treatment. Do not make marketing consent a condition of booking a facial. Offer it as a separate choice.

Specific

Say what you will send. “Offers and news from [Salon name] by text” is clearer than “keep in touch”. If you also want to send email or WhatsApp marketing, ask for each channel separately so the client knows exactly what they said yes to.

Informed

The client should know who you are, what kind of messages they will get, and how to stop them. Put your business name next to the tick-box and add a short line about unsubscribing.

Unambiguous and affirmative

The client has to do something: tick an empty box, type “YES”, tap a button. A box that is already ticked does not count, and neither does assuming consent because someone did not object.

Distinguishable from other matters

Do not bury the text consent inside your terms and conditions, your privacy notice or your treatment consent form. Give it its own line, with its own box.

The DPC’s guidance for retailers issuing e-receipts is a good model even though it was written for shops. It recommends two separate, blank point-of-sale tick-boxes, one for an e-receipt and one for marketing by email, as set out in its retailer guidance. The principle carries over directly to a salon: keep the service and the marketing choice apart, and leave both boxes empty.

Your main collection points are likely to be:

Online booking form. Add an unticked box such as “Yes, text me offers and news from [Salon name]. You can opt out at any time.” Keep it visually separate from the booking confirmation.
New-client consultation form. Put marketing choices on their own line, away from medical history and treatment consent.
Reception tablet or paper card. Ask the question out loud, then record the answer.
Website enquiry form. A short form with a clear, separate marketing tick-box works well. If you want to tighten the rest of your form, these contact form best practices for Irish business websites cover how to give people a clear way to stop receiving marketing messages.
Lead ad forms. If you capture leads from social ads, the consent wording on the form matters as much as on your own site. See how we approach this in Facebook lead ads for clinics.

Here is a plain example for an unticked box:

“I would like to receive offers and news from [Business name] by text message. I can unsubscribe at any time by replying STOP.”

Then make sure replying STOP actually works, and that someone, or something, acts on it.

Can you text existing clients without asking again?

Sometimes, but the exception is narrow. According to the Data Protection Commission, you may market to existing customers without fresh consent if all of these hold:

You lawfully obtained their contact details during a sale.
The marketing is for your own similar products or services.
The client had a chance to opt out when you collected the details.
Every marketing message gives a simple way to opt out.

Think about what that means for a salon. A client who booked a blow-dry, gave you their number, and was offered an opt-out at that moment can receive texts about your other hair services. A client whose number came from a competition entry, a bought list or a friend’s referral does not meet the first condition.

Also watch the “similar” test. A hair salon that also opens a separate injectables clinic should be careful: promoting a very different service to hair clients may fall outside the exception. When in doubt, ask for explicit consent.

If you are sorting through an old database, the question to ask of each contact is: do I know how and when I got this number, and can I show they were offered an opt-out? If the answer is no, treat that contact as not consented and ask them properly.

We cover the equivalent test for email in our guide to GDPR email marketing for Irish salons and clinics, and the same thinking applies here.

If a client says “I never signed up for these”, you need to be able to show otherwise. Keep a record for each person that includes:

Their name and mobile number
The date and time they agreed
The channel they agreed to (SMS, email, WhatsApp)
Where they agreed (website form, front desk, lead ad)
The exact wording they saw at the time
Any later withdrawal, with its date

Store consent in a single place, such as your booking system or CRM, rather than across paper cards, spreadsheets and phone contacts. A paper card in a drawer is hard to search when someone withdraws. Also keep older versions of your consent wording, so you can show what a client saw when they signed up.

Handling opt-outs and withdrawal

The DPC is clear that if a person objects to direct marketing, you must stop processing their personal data for that purpose, and withdrawing consent must be as easy as giving it, as stated in its electronic direct marketing guidance.

Put that into practice:

Include an opt-out in every marketing text. “Reply STOP to unsubscribe” is the usual form.
Honor it quickly and everywhere. If a client replies STOP, remove them from SMS marketing across every list and tool you use, not just the one that sent the message.
Accept other routes. A client who tells the front desk “stop texting me” has objected. Train your team to log it the same day.
Keep a suppression list. Do not delete the number outright. Keep it on a do-not-contact list so it does not get re-imported from an old spreadsheet.
Do not make it hard. Do not ask people to log in, call during office hours or fill in a long form to stop receiving texts.

Stopping marketing does not mean you stop service messages. A client who opts out of offers can still get their appointment reminders, because those are not direct marketing.

What happens if you get it wrong

The stakes are not just reputational. The DPC states that sending direct electronic marketing to a person who objects is a criminal offence, per its guidance on consent for electronic direct marketing.

The regulator has also long observed that the businesses it finds in breach are usually simply unaware of the rules. In its Twenty-Third Annual Report, the DPC said it invariably found offending businesses unaware of the subscriber-consent and opt-out requirements. For a small salon, that is the real risk: not malice, but a bulk text sent from an old list because nobody checked.

Beyond the legal side, there are commercial costs. Clients who receive unwanted texts complain, block your number and leave bad reviews. For a business that lives on trust and word of mouth, that matters.

Use this before your next campaign:

Sort your messages. Mark each template as service or marketing. Keep reminders free of promotions.
Audit your list. For each contact, can you show explicit consent or that the existing-customer exception is met?
Fix your forms. Replace any pre-ticked boxes with empty ones, and separate marketing consent from treatment consent and terms.
Add the opt-out. Every marketing text should tell people how to stop.
Record consent centrally. Capture date, wording, channel and source.
Test STOP. Text your own number, reply STOP, and check that you are removed everywhere.
Train the team. Front desk staff should know how to log a verbal objection the same day.
Review twice a year. Clean the list, check wording, and confirm the process still works after any software change.

Where SMS fits in your wider marketing

Text messages work best for short, timely nudges: a last-minute gap in the diary, a rebooking prompt after six weeks, a seasonal offer to people who asked for them. They are a poor fit for long explanations or sensitive clinical information.

If you are building a whole client journey, SMS is one channel among several. Email suits longer content such as aftercare tips and win-back sequences, and our clinic winback email templates and salon welcome email flow show how to pair them with consent-aware messaging. For clinics looking at messaging apps, we explain the options in WhatsApp booking automation for salons and clinics. Med spas can see how we approach text campaigns in our guide to Irish med spa SMS marketing.

If your clinic advertises treatments, consent is only one of the rules to think about. Advertising content has its own requirements, which we cover in our guide to aesthetic advertising regulations in Ireland.

Our perspective

In our work with salons, aesthetic clinics and med spas, the consent problem is rarely about bad intent. It is about a booking system that was set up years ago, a spreadsheet of numbers nobody can trace, and a team that is busy with clients, not paperwork.

We take a simple view. A smaller list of people who said yes will outperform a large list of people who did not, because they open the message, they book, and they do not complain. Good consent practice is not a brake on growth. It is the base that makes text marketing worth doing.

So when we build enquiry handling, follow-ups and booking automation for a clinic, we start with the consent wording and the opt-out, and only then with the campaign. We would rather you send four well-timed texts to people who want them than forty to people who do not.

— Gerard

Get your enquiry and follow-up process built properly

Growth Reach Marketing is an Irish-based agency that works specifically with salons, aesthetic clinics and beauty brands. Our services include AI enquiry handling, follow-ups and booking automation, email marketing and customer reactivation, and lead generation and conversion optimization, all designed around the consent rules you have just read.

If you want a follow-up system that books appointments without putting your list at risk, see our services and get in touch.

FAQ

No marketing consent is needed for a plain reminder. The Data Protection Commission treats a hairdresser’s appointment reminder as not being direct marketing. Keep the message to the booking details, and do not add promotions.

Can I text clients who booked with me last year?

Possibly, if they meet the existing-customer exception. You must have obtained their details lawfully during a sale, be promoting your own similar services, and have offered an opt-out when collecting the number. Every message must also include a simple way to opt out. If any of that is missing, ask for consent first.

Is a pre-ticked box on my booking form acceptable?

No. Valid consent needs a clear affirmative action, and the DPC says silence, inactivity and pre-ticked boxes do not count. Use an empty box with its own wording, separate from your terms and your treatment consent.

What should I do when a client replies STOP?

Remove them from SMS marketing straight away, across every tool and list you use, and keep them on a suppression list. Sending direct electronic marketing to someone who objects is a criminal offence. They can still receive appointment reminders, which are not marketing.