Med spas and aesthetics
Card on file for med spas: consent, storage and rebooking
Updated 10 September 2026 · 6 min read
A med spa can keep a card on file when the client gives written authorisation saying what may be charged. The card number is stored by Stripe under your own account and never sits in your practice, so staff charge a saved card without ever seeing the digits. Done properly it removes phone card-reading, speeds up rebooking and gives you a documented basis for cancellation fees.
Why phone card numbers have to go
Reading a card number aloud to a receptionist is the single riskiest habit left in most aesthetics practices. It leaves the number written somewhere, it has no authentication behind it, and it is close to indefensible when a client disputes the charge.
A saved card taken through a hosted checkout page carries the client's own authentication, an emailed receipt and a record of what they agreed to.
What consent needs to say
Written authorisation should name the practice, state what may be charged — deposits, remaining treatment balances, membership dues, cancellation fees — and say how the client withdraws it. Keep it on the intake form so it is signed once, at the start of the relationship.
Vague wording like 'charges as needed' is what loses disputes. Specific wording wins them.
Where the card actually lives
The card is stored by Stripe against a customer record in your own Stripe account. Your team sees a card brand and last four digits, nothing more. There is no number in a drawer, a booking system note or a staff phone.
That also means a saved card follows the client across deposits, packages and memberships without being re-entered.
Using it at rebooking
The most valuable moment for a card on file is the rebook at the end of a visit. The client is happy, they are standing there, and taking the deposit for the next appointment costs one tap rather than a phone call next week.
Always send a receipt on every charge. Clients rarely dispute a charge they were told about the moment it happened.
Frequently asked
- Can we charge a no-show fee to a card on file?
- Yes, when the signed authorisation says so and the client was shown the cancellation policy at booking.
- Does the practice ever see the card number?
- No. Stripe stores the card; staff see only the brand and last four digits.
- How does a client remove their card?
- They can ask the practice to delete it, and the saved payment method is removed from their customer record.
Start taking payments for your med spas and aesthetics
Create a free account, connect payments through Stripe, and take your first payment the same day. Enterprise Pay Gateway is software, not a bank or lender — Stripe processes payments under your own Stripe agreement and pays out to your bank.
Next in Med spa payments, month by month
Med spa POS: taking payment in the treatment room, not at the front desk
Why the front desk is the worst place to collect at a med spa, and how a QR or saved-card charge in the room closes the visit and the rebook together.