Spa or Clinic? Which Services Need a Medical Spa License in the UAE

In the UAE, a beauty spa can offer cosmetic and wellness treatments such as facials, massage, waxing, manicures and body wraps, but anything classed as a medical act needs a licensed health facility and a qualified practitioner. Under Dubai Health Authority (DHA) rules, injectables and medical lasers are medical acts, so beauty therapists cannot inject, perform laser hair removal, IPL or microneedling. If you want to sell those treatments, you either need a medical spa license for a clinic or a proper partnership with one.

This guide is for spa owners who keep hearing the same question at reception: "Do you do Botox?" It is not legal advice. Rules differ by emirate and change over time, so confirm your own case with DHA in Dubai, DOH in Abu Dhabi, the health authority in your emirate, or a lawyer.

What counts as a "medical act" in a UAE spa?

The simplest test is this: does the treatment break the skin, inject something into the body, or use a device classed as medical? If yes, assume it belongs in a clinic until a regulator tells you otherwise.

DHA's position covers the treatments that tempt spas most:

• Injectables. Botulinum toxin, fillers, skin boosters and similar products are medical acts. Only qualified, licensed practitioners in licensed facilities can give them.
• Medical lasers and IPL. Laser hair removal and IPL sit on the medical side, even though many clients think of them as routine beauty services.
• Microneedling. Because it penetrates the skin, it is not a beauty therapist's job under DHA rules.

Clients don't see the line. A woman who has had laser in a clinic for years may expect her spa to offer it next to the pedicure, so your team needs a friendly answer ready.

What can a beauty spa offer without a medical licence?

Plenty. Most spas in Dubai, Sharjah or Abu Dhabi build a full menu without touching a needle:

• Classic and advanced facials using cosmetic products (not medical-grade peels)
• Massage, hammam, body scrubs and wraps
• Waxing, threading and sugaring
• Manicures, pedicures and nail art
• Lash and brow treatments within your licensed activity
• Hair services, if your licence covers them

Your licence lists the activities you are approved for. Stay inside that list, whatever the device supplier's certificate says.

Which services need a licensed health facility?

Treat these as clinic-only unless your regulator confirms otherwise:

1. Any injection, including toxins, fillers, skin boosters, PRP and vitamin shots
2. Laser hair removal and IPL
3. Microneedling and treatments that pierce the skin
4. Medical-grade chemical peels
5. Energy-based skin tightening done with medical devices
6. IV drips and anything involving prescription products

Product handling is part of this too. Toxins and fillers must be stored as the manufacturer specifies and under the regulator's rules. A spa fridge in the back room is not a substitute for a clinic's controlled storage and records.

Spa vs clinic: a side-by-side comparison

• Who regulates it?
  Beauty spa: Municipality and economic licensing, within licensed activities
  Licensed clinic / medical spa: Health authority (e.g. DHA, DOH) plus commercial licensing
• Who performs treatments?
  Beauty spa: Beauty therapists, nail techs, massage therapists
  Licensed clinic / medical spa: Licensed doctors, nurses and qualified practitioners
• Injectables (toxin, fillers)
  Beauty spa: Not allowed
  Licensed clinic / medical spa: Allowed for qualified practitioners
• Laser hair removal, IPL
  Beauty spa: Not allowed
  Licensed clinic / medical spa: Allowed with licensed devices and staff
• Microneedling
  Beauty spa: Not allowed
  Licensed clinic / medical spa: Allowed for qualified practitioners
• Facials, massage, waxing, nails
  Beauty spa: Core services
  Licensed clinic / medical spa: Possible, depending on licence
• Client records
  Beauty spa: Service history, preferences
  Licensed clinic / medical spa: Medical records, consent forms, health data rules
• Data rules
  Beauty spa: UAE PDPL for personal data
  Licensed clinic / medical spa: Health data stays in the UAE by default under Federal Law No. 2 of 2019

What are the risks of crossing the line?

Owners usually cross it by accident. A therapist trained abroad says she can do microneedling. A supplier offers an IPL machine "for salons". A regular asks for lip filler from a visiting injector. Each carries real risk:

• Client harm. Burns, infections and bad filler outcomes happen even in skilled hands, and a spa has no medical team to manage a complication.
• Regulatory action. Health authorities can act against unlicensed medical practice, and your commercial licence can suffer too.
• Insurance. Your policy likely doesn't cover treatments outside your licensed activity.
• Reputation. One bad case shared in a WhatsApp group of mothers in Al Barsha travels faster than any Instagram campaign.

My honest view: the extra margin from one laser room is not worth the business you've built.

Should a spa partner with a clinic instead?

For many spas, yes. A partnership lets you keep the client relationship without carrying medical risk. Common models:

1. Referral partnership. You recommend a nearby licensed clinic for injectables or laser. Put the arrangement in writing.
2. Co-located clinic. A licensed clinic runs in its own licensed space in the same building. Two businesses, two licences, two sets of records.
3. Package collaboration. A bridal package pairs a spa day with a clinic consultation, and each business delivers and bills its own part.

Keep medical information on the clinic side. In Saudi Arabia, health data is sensitive under the PDPL and cannot be used for marketing. Share only what each side needs, with consent.

If you're weighing whether to open a clinic yourself, our guide to aesthetic clinic management and automation in the UAE, Saudi Arabia and Jordan covers what running the clinic side actually involves.

How should you word your spa menu?

Regulators, clients and Google all read your menu.

• Don't list "Botox", "fillers", "laser" or "IPL" on a spa menu, even as "coming soon".
• Avoid medical-sounding names for cosmetic services. "Hydrating facial" is clear; a vague "rejuvenation treatment" invites questions.
• If you have a partner clinic, put it in a separate section: "Aesthetic treatments by [Clinic name], a licensed medical facility." Link to their booking, not yours.
• Train reception with one script: "We don't offer injectables here because they're medical treatments. Our partner clinic next door does, and I can share their details."

Your booking site and social posts should match your licence exactly. With WAJ's no-code website builder and booking site, you can keep clinic services off your spa's menu entirely and list the partner as a separate link, so no one books a laser session by mistake.

Is it different in Saudi Arabia and the rest of the GCC?

The principle is similar across the region: medical procedures belong in licensed health facilities. The details differ, so check with the Ministry of Health and local regulators in each country.

• Saudi Arabia. Check MOH requirements for any aesthetic treatment. On data, the PDPL has been fully enforceable since 14 September 2024 and treats health data as sensitive.
• Kuwait. The Ministry of Health's 2025 Health Requirements Guide for salons bans chemical and acid peels in salons, and treatments such as tattoo, permanent makeup and cupping need special permits. Salons must not offer services beyond their licensed activity.
• Bahrain. A spa or massage centre needs extra approvals beyond a standard beauty licence. Confirm with the Ministry of Health.
• Qatar. Licensing for salons and spas has its own steps; see our guide on how to open a beauty salon or spa in Qatar.

With branches in more than one country, build each menu per licence. WAJ's multi-branch setup lets every location keep its own services and pricing.

FAQ

Can a beauty therapist do laser hair removal in Dubai?

No. Under DHA rules, medical lasers, including laser hair removal and IPL, are medical acts. They must be done by qualified practitioners in a licensed health facility.

Can my spa offer Botox if a doctor comes in to do it?

Not in a spa that isn't licensed as a health facility. The treatment must happen in a licensed clinic. A co-located clinic with its own licence is the usual route.

Is microneedling a beauty treatment or a medical one in the UAE?

DHA treats microneedling as outside a beauty therapist's scope because it penetrates the skin. Treat it as clinic-only.

Can a spa and a clinic share client records?

Keep them separate. Health data has strict rules in the UAE and Saudi Arabia, so share only what each side needs, with the client's consent.

Who do I ask to confirm what my spa can offer?

Your health authority (DHA in Dubai, DOH in Abu Dhabi, or your emirate's regulator) and the authority that issued your trade licence. A lawyer can help with partnership contracts.

Running a spa, a clinic, or both under one roof? WAJ keeps separate menus, branches and booking sites so each side stays inside its licence. Book a free WAJ demo: waj.ai/demo.