Essential business documents every UK lash tech should have ready

TL;DR: A self-employed UK lash tech needs roughly eight core documents to run a professional, defensible business: a client consultation form (with patch-test record), an informed consent form, a treatment record template, a professional invoice, terms and conditions, a GDPR privacy notice, a contraindication and allergy reference guide, and an aftercare instruction document. None of these are bureaucracy for its own sake. Each one addresses a real-world scenario: an allergic reaction dispute, an insurance claim, a professional conduct question, or an ICO audit. Patch-test discipline sits at the centre of all of them — it appears in every client touchpoint because it genuinely matters.

If you work as a self-employed lash tech in the UK, you already know your craft. The paperwork side is where many independent lash artists operate less consistently than their technical skill warrants. A verbal consultation feels thorough in the moment. In an insurance dispute or a client complaint about an allergic reaction, it provides nothing.

Before we go further: treatments applied to the area around the eye carry a specific risk profile. Allergic reactions to lash adhesive and lash products can range from mild irritation to severe anaphylactic response in rare cases. Two things follow from this. First, a 24-48 hour patch test before a client's first appointment is mandatory best practice, not optional, and not something to skip because the client is in a hurry. Second, for any severe allergic reaction, the appropriate instruction to clients is to seek medical attention from their GP or, for severe reactions, A&E immediately. No document in this article should frame you as managing allergic reactions yourself.

The three categories of risk these documents cover:

1. Consent and reaction risk, what the client disclosed, what tests were completed, what they agreed to, and what you documented before and after each treatment.
2. Data and regulatory risk, UK GDPR for client records, ICO registration, and insurance requirements.
3. Commercial risk, pricing, cancellations, patch-test no-shows, and what happens when something goes wrong.

The first document in every new client relationship. It covers: the client's name and contact details, any known allergies (including adhesive, latex, fragrance, or specific materials), current eye conditions or recent eye surgery, contact lens use (relevant to aftercare), medications that may affect skin sensitivity, any prior lash treatments and reactions, and the date of patch test completion.

The patch-test record is not a separate document. it is a section of the consultation form, or at minimum attached to it. It should record: the date the patch test was applied, where it was applied (typically behind the ear or on the inner arm), which adhesive was used, the date of the client's check (usually 24-48 hours after application), and the client's reported response.

Every subsequent appointment (infills, removal, change of adhesive) should update the patch-test status. A client who has had no reaction for six months may still develop a sensitivity at any point. There are no "hypoallergenic guarantees" in lash work. "Hypoallergenic" is not a regulated term. Products marketed as hypoallergenic still carry reaction risk.

A signed consent form, completed before the first treatment, that confirms: the client understands the treatment involves applying materials close to the eye area, that patch testing was completed, the known risks (adhesive reaction, eye irritation, potential for lash damage if aftercare is not followed), that they agree to proceed, and that they understand the aftercare instructions.

Your professional indemnity insurance will require evidence of consent in the event of a claim. A verbal "yes" on the day is not sufficient evidence.

Per-appointment documentation. Date, treatment type (full set, infills, removal, lift and tint), lash style applied, adhesive used, any observations during the treatment (client comfort, eye irritation, any unusual response), retention notes, and next-appointment recommendation.

Brief but consistent. If a reaction is reported between appointments, the treatment record is the evidence of what was applied, when, and with what product.

A compliant UK invoice: your name and business address (or trading name), contact details, client name, invoice number, date, description of service (e.g. "classic lash full set, 90 minutes"), price, and payment due date. If you're VAT-registered, your VAT number and VAT shown separately.

If you use a deposits system (common for new clients requiring a patch test first), your invoice should clearly record the deposit paid, the date it was paid, and the balance due on the day. Deposit terms should also appear in your T&Cs.

The commercial framework for every client relationship. Cover: session pricing, deposits, what happens if the client cancels (especially relevant for patch-test appointments, where a no-show wastes adhesive and time), late-cancellation charges, no-show policy, your patch-test requirement (including what happens if a client declines to patch test, you should not proceed), what happens if a reaction occurs, what your reaction protocol directs clients to do (contact you, monitor, see their GP for any significant response, attend A&E for severe reactions), and the scope of your service (aesthetic enhancement, not a medical or clinical treatment).

Plain English throughout. Two pages covers everything a lash client needs to know.

Client records include health data (allergy history, eye conditions, medications), which is Special Category Data under UK GDPR. Your privacy notice must explain: what data you collect, why, how long you retain it (your professional indemnity insurer's guidance may specify a minimum retention period, often five or seven years), who you share it with (no one, in normal circumstances), and how clients can exercise their rights.

ICO registration is required for most lash techs processing client personal data. The annual fee is currently £40 for most sole traders.

A working document for your professional reference, not for clients, listing conditions where treatment is not appropriate (active eye infection, conjunctivitis, recent eye surgery within the advised healing period, severe allergic history to adhesive components) and conditions where treatment can proceed with caution and disclosure (controlled eczema away from the eye area, contact lens users who remove lenses before treatment).

This document supports your professional decision-making. You are not a clinician. this guide doesn't involve diagnosis. It is a reference for whether to proceed and what to document.

A printed or digital document given to the client after every treatment. It should cover: the first 24-48 hours (no water, steam, or mascara on the lashes), ongoing care (oil-free products around the eye area, gentle cleaning, not pulling or rubbing), how to recognise a developing reaction (redness, swelling, itching beyond 48 hours), and what to do if they suspect a reaction (contact you, and seek GP or A&E attention for any significant response: including any sign of anaphylaxis, which requires A&E immediately).

Aftercare documents protect clients and protect you. A client who loses their lash retention at two weeks because they used oil-based cleanser, and who says you "never told them," is a client you want to have a signed or date-stamped aftercare record for.

1. Start with the consultation form and consent form. No new client gets treated without both.
2. Build a consistent treatment record template. your record of every appointment.
3. Draft your T&Cs and make them part of your booking confirmation. Most booking platforms allow a PDF attachment or a policy link.
4. Prepare your aftercare document. Print a batch and hand one to every client at the end of every appointment.
5. Register with the ICO and draft your privacy notice if you haven't already.

If you do nothing else this month: the patch-test record in your consultation form. Most disputes and insurance claims in lash work can be traced to a missing record of whether a patch test was completed and what the result was. The worst route is no route.

For the tax record-keeping side of running a professional lash practice, see Making Tax Digital for lash techs: April 2026. Same professional discipline, different category.

LaunchKit makes a niche-specific business documents bundle for lash techs at £19.99 (Premium tier, interactive fillable PDFs and editable DOCX in one pack). The bundle includes client consultation form (with patch-test section), consent form, treatment record template, invoice template, T&Cs, aftercare instructions, and GDPR privacy notice, calibrated to UK lash work.

If you want to start lighter, the Standard tier is £11.99, same documents, fillable header on the PDFs only. Custom is £13.99 for browser-based personalisation of name and colours.

This article is general guidance, not legal advice. For any client allergic reaction, direct them to their GP for any significant reaction and to A&E immediately for severe reactions or any sign of anaphylaxis. For professional obligations, consult your insurance provider and your professional membership body.