Somewhere in most spas' filing cabinets is a printed contract for their ten-session package deal—wording that hasn't changed since the day the printer first ran it off, years ago. It includes a line that's completely unremarkable in Thai retail: no refunds once purchased. Since January 24, 2026, that line has been illegal in a spa's package contract. Most coverage of Thailand's new Beauty Service Business regulation focused on clinics offering weight-loss and body-contouring procedures, the kind of high-ticket business the rule seems written for. It sounds like a law for a different, more medicalized corner of the beauty industry. It isn't—the regulation's own text names "massage" and "spa" treatments explicitly, alongside "other methods for cleanliness, beauty, or care of facial or body skin." This piece walks through what the Contract-Controlled Business designation actually requires, which clauses it bans outright, and how to check whether a package contract that's been sitting unchanged for years is quietly non-compliant.
Most spa package contracts were never written from scratch—they were copied from whatever template the printer had, which is exactly how a clause that's now illegal ends up sitting unnoticed in a business that's been open for years.
What "Contract-Controlled Business" Actually Means
The regulation's full name is the Notification on Prescribing the Beauty Service Business as a Contract-Controlled Business B.E. 2568 (2025), and it took effect on January 24, 2026—it's already in force. It applies to agreements that provide beauty services across a set number of sessions or a defined timeframe, which in practice means membership and package deals rather than a single treatment paid for and delivered the same day. In scope: massage and spa treatments, other methods for facial or body skin cleanliness and care, weight-control and body-shaping services, and services offered through electronic channels. Explicitly excluded: surgery, liposuction, and medical treatment delivered by licensed practitioners—the higher-risk medical end of the beauty industry that most people assumed this rule was really about.
The Boilerplate Trap: The Contract Clause Nobody Ever Rewrote
Call it the Boilerplate Trap: the risk isn't that a spa deliberately wrote an unfair contract—it's that most package and membership contracts were copied from a template years ago and never revisited, which means whatever standard clauses that template happened to include are still sitting there, untouched, regardless of whether they're now against the rules. The regulation prohibits several clause types that show up constantly in exactly this kind of boilerplate: language that limits or excludes liability for damages to life, body, health, mind, or property; terms that bind the customer to the operator's internal rules without their consent; clauses allowing the business to change services or fees unilaterally; termination without notice or cause; forfeiture of prepayments; "no-refund" policies; automatic contract renewal; and any use of customer data that violates Thailand's personal data protection law. A ten-session package sold with "no refunds, no exceptions" printed on the receipt—common enough to be unremarkable in most Thai retail—is now a textbook example of a prohibited clause once it applies to a Contract-Controlled Business. It's worth revisiting alongside the broader question of what actually makes a package pay off, since a package contract that's legally sound but never tracked for redemption is still leaving money and data on the table.
Picture a Spa Checking Its Own Contract Against the List
Picture a hypothetical business called Malee Beauty Spa, pulling out its standard ten-session package agreement to prepare for a slow-season promotion. The contract had been in use, word for word, for four years. Running it against the regulation's list, the owner found two problems: a "non-refundable once purchased" line at the bottom, and a renewal clause that automatically re-signed customers for another package unless they actively canceled. Neither clause had ever caused a complaint—but neither had ever been checked against a rule that didn't exist when the contract was first printed. The fix wasn't a legal battle; it was two sentences rewritten before the next customer signed. Malee's business also offers a body-contouring add-on alongside its massage packages, which puts that specific service doubly in scope, since weight-control and body-shaping services are named in the regulation on their own. This kind of contract review is easy to put off in a market that's still growing fast—see what Thailand's $42.7 billion wellness economy data actually shows about where that growth is concentrated—but a compliance problem doesn't wait for a slower quarter to surface.
The Boilerplate Trap Playbook
- Read Every Clause Against the List — pull your current package and membership contract and check each clause against the eight prohibited categories, not just the ones that feel obviously risky.
- Rewrite Refund Terms as Conditional, Not Absolute — "no refunds" as a blanket rule is now a liability; conditional, clearly stated refund terms are the compliant version of the same protection.
- Make Renewal Opt-In, Not Automatic — a customer should have to actively choose to renew a package, not be re-enrolled by default because they didn't cancel in time.
- Check the Formatting, Not Just the Wording — the regulation requires contracts to be in Thai, in readable text (minimum 2mm font, maximum 11 characters per inch)—fine print that technically satisfies a word count but fails a readability check is still a problem.
- Get a Lawyer to Review Before Your Next Package Sale — a contract review doesn't need to wait for a complaint; a Thai lawyer familiar with consumer-protection law can confirm compliance in less time than resolving a dispute later would take.
A language school selling twenty-lesson course packages runs into the same Boilerplate Trap in a completely different industry—an auto-renewal clause copied from an old template, sitting quietly in every enrollment contract until someone finally checks whether it still holds up.
Boilerplate: what this all comes down to
If there's one word for what this regulation actually targets, it's Boilerplate—not spas acting in bad faith, just contract language that was copied once, years ago, and never checked against a rule that didn't exist yet.
So here's the question worth sitting with: when was the last time anyone actually reread your spa's package contract line by line, rather than just handing over the same printed copy that's always been used?
FAQ
Does this regulation apply to single treatments, or only packages and memberships?
It specifically covers agreements that provide services across a set number of sessions or a defined timeframe—membership and package deals—rather than a single treatment paid for and delivered the same day.
Is weight-loss or body-shaping covered too, or just massage and spa treatments?
Both. The regulation explicitly names massage and spa treatments alongside weight-control and body-shaping services and other facial or body skin care methods, so a spa offering slimming or contouring add-ons alongside massage has both service types in scope.
What's excluded from this regulation?
Surgery, liposuction, and medical treatment delivered by licensed practitioners are explicitly excluded—the higher-risk medical end of the beauty industry that most coverage assumed the rule was really targeting.
What should a spa do if it finds a prohibited clause in its existing package contract?
Treat it as something to fix before the next contract is signed, not something to defend. A Thai lawyer familiar with consumer-protection law can confirm what needs to change and how to reword it correctly.
Does the contract need to be in Thai?
Yes—the regulation requires the contract to be provided in Thai, in readable text with a minimum font size and a maximum character density, so the terms are actually legible rather than printed as dense fine print.
What this looks like with NAWA Spa
NAWA Spa lets you set up services, packages, and promotional courses with real pricing logic, and keeps every customer's membership status and remaining sessions attached to their record—so what a customer actually purchased and what they're entitled to is always visible, not buried in a paper contract nobody's reread in years. That doesn't replace a legal review of your contract wording, but it does mean the terms you agree to are the ones your system actually enforces at redemption.
If you're not sure whether your current package terms would hold up against this list, talk to us about how your packages and membership terms are set up today—and pair that conversation with a review from a Thai lawyer for the contract wording itself.