Posts & photos
Posting Customer Photos on Google, Instagram and WhatsApp: Consent, Privacy and What's Safe
Salons post before-and-after photos, restaurants share happy diners, clinics show results, gyms post transformations and coaching centres celebrate toppers. Learn when you need customers' consent, how to ask and record it, special care for children, patients and women's services, Google's photo rules, India's data protection law, and how to handle requests to remove photos.
By Chamko Research Team Updated 5 min read
Quick answer
Always ask before posting a photo or video in which a customer can be identified, and keep a simple record of their consent. Be especially careful with children (ask parents), patients (health information is sensitive), and services like bridal makeup, spas or gyms where people may not want to be shown. Avoid showing faces, names, phone numbers or bills unless clearly agreed. If someone asks you to remove a photo, do it promptly everywhere. India's Digital Personal Data Protection Act makes consent and purpose limitation important for businesses handling personal data.
Quick answer: Always ask before posting a photo or video in which a customer can be identified, and keep a simple record of their consent. Be especially careful with children (ask parents), patients (health information is sensitive), and services like bridal makeup, spas or gyms where people may not want to be shown. Avoid showing faces, names, phone numbers or bills unless clearly agreed. If someone asks you to remove a photo, do it promptly everywhere. India's Digital Personal Data Protection Act makes consent and purpose limitation important for businesses handling personal data.
Real customer photos build trust far better than stock images. But posting someone's face without permission can upset customers, damage your reputation and create legal risk.
When you need consent
- Identifiable faces in photos or videos.
- Names, phone numbers, addresses shown in posts or screenshots.
- Before-and-after photos of hair, skin, body or dental treatments.
- Children — always from a parent or guardian.
- Testimonials quoting a customer by name.
Photos of your products, premises (without identifiable customers) and team (with staff consent) don't need customer consent.
How to ask
Ask simply, before taking the photo:
"Can we take a photo of your new look for our Instagram and Google page? We'll show your face — is that okay, or would you prefer we crop it?"
Offer options: full face, cropped, back view, or no photo.
Record consent
- A short consent line on a form or booking sheet: "I agree that [Business] may post photos of my service on its social media and Google profile."
- Or a WhatsApp confirmation: "Yes, you can post it."
- Keep the record with the date (Google Forms for business).
Special care categories
Clinics and healthcare
Treatment photos reveal health information. Get explicit written consent, avoid faces where possible and never include names or medical details (clinic reviews and privacy).
Children
Coaching centres, schools, playschools and kids' activities must get parental consent. Avoid full names with photos (coaching reviews).
Salons, spas, gyms and bridal services
Many clients don't want their photos public, especially women clients and transformation photos. Always ask, and respect "no" (salon reviews).
Restaurants and events
Group photos of diners or event guests need consent from those clearly visible. Photos of the space with blurred background people are safer.
Google photo rules
Photos on your Google profile must represent your business and follow Google's content policies — no photos of people who haven't consented, no private information, no misleading images (photos guide, AI photo rules).
Data protection law
India's Digital Personal Data Protection Act, 2023 requires businesses to collect personal data with consent for a clear purpose and to honour withdrawal of consent. Photos identifying a person can be personal data. Have a simple privacy notice and consent process (privacy policy and DPDP Act).
Removing photos on request
If a customer asks you to remove their photo:
- Remove it from Google, Instagram, Facebook, WhatsApp status and website promptly.
- Confirm to them that it's done.
- Don't argue, even if they agreed earlier.
Quick removal keeps goodwill and reduces risk.
Customer-uploaded photos
Photos customers upload to your Google profile are theirs. If a customer's photo shows other people or private information, you can report it (manage customer photos, remove photos).
Safe alternatives
- Hands, back of head or cropped shots.
- Product close-ups.
- Before-and-after of hair or nails without faces.
- Staff modelling services (with staff consent).
- Customer quotes without names ("— a happy bride, Ahmedabad").
Staff photos
Staff also need to agree, especially for promotional posts. When staff leave, update or remove posts that feature them if they ask (staff left).
Example: a salon
A salon added a consent tick box to its booking form and asked each client before photos. It posted transformations only with consent and cropped faces for clients who preferred privacy. Clients appreciated the respect, and posts still performed well.
Example: a coaching centre
A coaching centre posted toppers' photos and marks without asking. A parent complained. The centre removed the post, began collecting parental consent and now shares results with first names only.
Checklist
- Ask before photographing identifiable customers
- Offer cropped or no-face options
- Record consent
- Parental consent for children
- Extra care for health and personal services
- Remove photos promptly on request
- Simple privacy notice
Key takeaways
- Real photos build trust — with consent.
- Be extra careful with children, patients and personal services.
- Remove photos quickly when asked.
Sources and further reading
- Digital Personal Data Protection Act, 2023: meity.gov.in
- Google Business Profile Help — photo and video policies: support.google.com/business
A simple consent card
Print a small card or add a section to your booking form:
"We love sharing our work. May we post photos of your service on our Instagram, Facebook, WhatsApp and Google page? ☐ Yes, with my face ☐ Yes, without my face ☐ No photos please Name: ______ Date: ______"
Keep the cards in a file or photograph them. A tick box takes the customer ten seconds and protects you for years.
Group photos and events
At events, workshops and celebrations, put up a small notice: "Photos may be taken for our social media. Please tell our staff if you'd prefer not to appear." Still ask clearly visible people individually before posting close-ups, and blur or crop anyone who says no.
When a customer tags you
When a customer posts a photo and tags your business, they've chosen to share it. Resharing it to your story is usually fine. For posting it on your permanent feed, Google profile or ads, ask first: "We loved your post. May we share it on our page?"
Frequently asked questions
Do I need consent to post a customer's photo?
Yes, if they're identifiable.
Is WhatsApp consent enough?
A clear written "yes" with a date is a reasonable record.
Can I post children's photos?
Only with parental consent.
Can clinics post before-and-after photos?
Only with explicit consent, avoiding identifying details.
What if a customer later asks to remove a photo?
Remove it everywhere promptly.
Are product photos fine?
Yes — they don't need customer consent.