eCommerce PPC for Healthcare & Supplements: LegitScript, MHRA, GLP-1

Why healthcare + supplements is the most regulated eCommerce PPC vertical

In the broader landscape of digital advertising, most verticals operate under standard commercial guidelines. However, if you are running ads for healthcare or supplements, you are stepping into a territory where 'commercial' meets 'clinical'. The stakes are significantly higher. Google Ads, Meta, and Microsoft Advertising don't just view you as a merchant; they view you as a potential public health risk. This is why the healthcare and supplements vertical is, without question, the most regulated eCommerce PPC category in existence today.

When we talk about 'regulation' in this context, we aren't just referring to a single set of rules. We are talking about a multi-layered stack of oversight that includes national health regulators (MHRA), food standards authorities (FSA), advertising watchdogs (ASA/CAP), independent certification bodies (LegitScript), and Google's own internal healthcare policy team. For a UK merchant, this means your ad copy, your landing pages, and even your ingredients are under constant, automated, and human scrutiny.

The upside of this regulatory wall is what we call the 'Compliance Dividend'. Because the barrier to entry is so high, many competitors simply give up or operate on the fringes, constantly getting banned. For brands that invest in the proper certifications and follow the rules, the competitive field is remarkably thin. This is exactly how we achieved a 7× ROAS for our client, Biopreventative, in a category where others were struggling to maintain a 1.5× return. By being one of the few fully compliant players, they gained access to high-intent traffic that was previously restricted.

If you're coming from a different eCommerce vertical, such as fashion or consumer electronics, you may be used to agile testing of ad copy. In healthcare, that 'move fast and break things' mentality will get your Merchant Center account blacklisted. Every single word in your ad copy must be cross-referenced against the FSA health claims database or MHRA guidelines before it is ever uploaded to Google Ads.

LegitScript certification for pharmacies + supplements

LegitScript is the gold standard for healthcare eCommerce verification. While based in the US, they are the primary verification partner for Google Ads globally, including the UK. If you are operating an online pharmacy, selling prescription medications, or offering telehealth services, LegitScript certification is not an option - it is a requirement.

The process is rigorous. LegitScript doesn't just look at your website; they look at your business license, your pharmacists' credentials, your sourcing, and even your past legal history. For UK merchants, they verify GPhC (General Pharmaceutical Council) registration and ensure that you aren't selling unlicensed medicines disguised as supplements.

Even if you aren't a pharmacy, LegitScript has become essential for certain supplement categories through 2024 and 2025. Specifically, weight-loss supplements (especially those marketed as alternatives to GLP-1 drugs) now frequently require LegitScript certification to clear Google's 'unapproved pharmaceuticals' filters. We've found that even for standard supplements, having a LegitScript badge acts as a 'fast-pass' through Google's automated policy reviews, reducing false-positive ad disapprovals by up to 80%.

The application process involves a detailed questionnaire and a verification of your supply chain. Once LegitScript issues your certification, you must then submit that certificate to Google Ads via the 'Advanced Verification' portal. Only after Google links your LegitScript status to your CID (Customer ID) will your restricted ads begin to serve at full volume.

MHRA rules for UK unlicensed products

The MHRA (Medicines and Healthcare products Regulatory Agency) is the UK's version of the FDA, but with a specific focus on the distinction between food supplements and medicines. Their primary rule is simple but devastating for many advertisers: If a product claims to treat, prevent, or cure a disease, it is legally a medicine. If it is a medicine, it MUST have a Marketing Authorisation (license) from the MHRA.

Many supplement brands fall into the 'unlicensed medicine' trap by accident. You might be selling a high-quality Vitamin C supplement, but the moment your ad copy says 'Cures the common cold', that product is legally reclassified as an unlicensed medicine in the eyes of the MHRA. Google's algorithms are trained to scan for these medicinal keywords and will trigger an immediate suspension to avoid liability under the Human Medicines Regulations 2012.

Enforcement has ramped up significantly in 2025 and 2026. The MHRA now uses AI-driven tools to scrape eCommerce sites for non-compliant medicinal claims. They frequently refer cases to Trading Standards or the ASA for further action. For a detailed look at how to structure generic eCommerce campaigns that don't trigger these red flags, see our <Link to='/blog/google-ads-ecommerce-strategy' className='text-signal underline'>Google Ads eCommerce Framework</Link>.

FSA food-supplement health claim database compliance

While the MHRA tells you what you CAN'T say, the FSA (Food Standards Agency) tells you exactly what you CAN say. The FSA maintains a comprehensive database of 'Approved Health Claims'. If your supplement contains Vitamin D, there are exactly three or four approved phrases you are allowed to use to describe its benefit to the immune system. Deviating from this exact phrasing - even if your phrasing is scientifically accurate - is a breach of the Nutrition and Health Claims (England) Regulations.

At our agency, we maintain a claims matrix for every healthcare client. We map every ingredient in their product to the specific FSA-approved claim. This matrix then informs every piece of ad copy in our Google Ads campaigns. For example, 'Biotin contributes to the maintenance of normal hair' is a permitted claim. 'Biotin makes your hair grow faster' is NOT in the database and would be flagged by Google's automated reviewers during the ad approval process.

This level of precision is why healthcare PPC is often seen as 'boring' by traditional copywriters. However, in 2026, the brands winning on ROAS aren't the ones with the most creative copy - they are the ones with the most compliant copy. By using the exact FSA language, you signal to Google's 'Policy Bot' that your brand is low-risk, allowing your ads to reach a higher quality score and lower CPCs.

CAP Code health claim restrictions

The CAP Code (Committee of Advertising Practice) is the rulebook enforced by the ASA (Advertising Standards Authority) in the UK. It adds a final layer of restriction on top of the MHRA and FSA rules. Even if your claim is technically FSA-compliant, the CAP Code might still prohibit it based on the 'context' or the 'audience'.

Key CAP restrictions for 2026 include:

• No health claims in testimonials: You cannot use a customer quote that says 'This product cured my eczema' because the brand itself is not allowed to make that claim. The ASA treats customer testimonials as if they were written by the brand's own copywriter.
• Before and after imagery: Tightly restricted for weight loss or skin conditions. Any image used must be representative of a 'normal' result and must not imply a medicinal cure.
• Celebrity/Medical endorsements: You cannot use a doctor's image or name to endorse a supplement without extremely specific and verified documentation. 'Doctor Recommended' is a phrase that triggers manual review 100% of the time on Google Ads.

We recommend all healthcare merchants review the ASA's 'Rulings Archive' once a month. It functions as a form of 'case law' for UK PPC. If a competitor gets a ruling against them for a specific phrase, you should immediately scrub that phrase from your own account.

Google Ads healthcare policy tiers (2026 updated)

Google's internal policy engine doesn't treat all healthcare products equally. They categorise accounts into 'tiers' based on risk. Knowing which tier you fall into is critical for budgeting and expectation setting. In 2026, these tiers have been updated to reflect the rise of telehealth and specialized weight-loss treatments.

One of the biggest mistakes we see is brands trying to run Tier 3 products using a Tier 1 campaign structure. This inevitably leads to a 'Circumventing Systems' suspension, which is nearly impossible to appeal. You must align your campaign settings, targeting, and creative with the specific requirements of your tier. For fashion brands moving into the beauty/healthcare space, this is often a shocking transition. See our <Link to='/blog/ecommerce-ppc-fashion' className='text-signal underline'>Fashion PPC Guide</Link> for a comparison of how much simpler non-regulated verticals can be.

GLP-1 policy landscape (Ozempic/Wegovy/Mounjaro)

The explosion of GLP-1 receptor agonists like Ozempic, Wegovy, and Mounjaro has fundamentally changed the landscape of healthcare eCommerce. In 2024 and 2025, Google struggled to keep up with the surge of 'compounded' versions and natural alternatives. As we enter late 2026, the policy landscape has finally stabilized, but it is more restrictive than ever.

If you are selling prescription GLP-1s, you must be a LegitScript-certified pharmacy. There are no shortcuts. However, the most interesting 'battleground' is currently the 'GLP-1-adjacent' supplement market. These are natural supplements (like Berberine or specific probiotic strains) that are marketed as having similar effects to prescription weight-loss drugs.

Google's current stance is that any supplement making 'GLP-1-like' claims will be treated as a weight-loss drug. This means you must adhere to the weight-loss advertising policy, which prohibits 'before and after' imagery and requires a 'not for under 18s' setting in your campaign. Most importantly, it often triggers the need for LegitScript certification even if the product itself is just a food supplement.

The 2025 policy shifts also introduced a 'Telehealth-First' requirement. If your eCommerce model involves a customer filling out a form and then being 'prescribed' a product (even a high-dose supplement), Google treats you as a medical service. This requires you to prove that the prescribers are GPhC-registered and that the consultation is genuine. Many brands that were previously operating in a 'grey area' were wiped out in the mid-2025 updates.

Regulated-product feed setup on Merchant Center

Your Merchant Center feed is the foundation of your healthcare PPC. For regulated products, a standard feed isn't enough. You need to populate specific attributes that tell Google exactly what is inside your products. Failure to do so leads to 'Automatic Item Disapprovals' that can bring your entire Shopping or PMax engine to a halt.

We recommend using the following attributes for all healthcare feeds:

• product_details: Use this to list active ingredients and dosages. Google's AI reads this attribute to verify that you aren't selling prohibited substances (like DMAA or excessive melatonin).
• adult: Set this to 'true' for any products related to weight loss, sexual health, or clinical treatments to avoid serving ads to minors.
• excluded_destination: If a product is only compliant in the UK but not the US, ensure the US is excluded at the feed level to prevent global account suspensions.
• product_highlight: Use this for your core, FSA-approved claim. This often serves as the 'primary' copy in Shopping ads.

One contrarian view we hold is that you should NOT include every ingredient in your product title. While keyword stuffing is common in fashion, in healthcare, putting a restricted ingredient name (even a legal one) in a title can trigger sensitive-category filters. Keep titles clean and focus on the brand and the primary benefit (e.g., 'Biopreventative Immune Support - 60 Capsules').

Healthcare-specific campaign structure

When we manage healthcare accounts, we use a 'Tiered Campaign Isolation' structure. This is a strategy designed to prevent policy issues in one product line from affecting the whole account. Instead of one giant PMax campaign, we break the account down by regulatory risk.

For Performance Max, we use specific Asset Groups for each regulatory tier. Each Asset Group has its own set of 'Policy-Approved' imagery and copy. This prevents Google from 'mixing and matching' a clinical product image with a lifestyle supplement headline, which is a common cause of automated ad disapprovals. For a deeper dive into PMax structuring, see our <Link to='/blog/performance-max-ecommerce-guide' className='text-signal underline'>Performance Max Guide</Link>.

Biopreventative case reference (7× ROAS, LegitScript-certified)

Biopreventative is a UK-based health brand that specializes in high-performance longevity supplements. When they first approached us, they were struggling with constant ad disapprovals and a ROAS that fluctuated between 1.5× and 2.0×. Their products were high-quality, but their Google Ads account lacked the necessary regulatory 'trust signals'.

Our transformation strategy involved three key steps:

1. The Certification Sprint: We managed their LegitScript application from start to finish, ensuring their clinical data and pharmacist oversight were properly documented. This took 7 weeks but resulted in full Google Advanced Verification.
2. The FSA Claims Audit: We rewrote every product page and every ad headline to match the FSA health claims database exactly. We removed all 'medicinal-adjacent' language and replaced it with compliant, high-intent structure/function claims.
3. LADC Optimisation: Using our proprietary 'Large-Scale Asset & Data Cleaning' (LADC) methodology, we refined their Merchant Center feed to provide maximum transparency to Google's bots.

The result was immediate. Within 30 days of the new compliant structure going live, their ROAS jumped to 7×. Because their account was now 'Certified', Google's algorithms rewarded them with higher Impression Share and lower CPCs than their non-certified competitors. In 2026, they remain one of the most profitable brands in the longevity niche, despite the increasing regulatory pressure on the sector.

Common healthcare PPC mistakes

Even experienced eCommerce marketers often trip up when entering the healthcare space. Here are the 6 most common mistakes we see in 2026:

• Launching before LegitScript is issued: Many brands think they can 'test' the market while their application is pending. This almost always leads to a 'Permanent Suspension' that is extremely difficult to reverse.
• Paraphrasing FSA wording: Thinking 'Boosts Energy' sounds better than 'Contributes to the reduction of tiredness and fatigue'. Google's bots are programmed to look for the latter. Paraphrasing is seen as a policy bypass.
• Mixing regulatory tiers: Putting a prescription-adjacent product in the same campaign as a multivitamin. This creates a 'Cascade Risk' where a single-product flag pauses your entire budget.
• Using health claims in testimonials: This is the most common reason for ASA complaints in the UK. Testimonials must be scrubbed of any medicinal or non-FSA-approved claims.
• Applying pre-2025 GLP-1 tactics: Many brands are still using 'natural alternative' language that worked in 2023 but is now an immediate ban trigger in 2026.
• Ignoring Merchant Center attributes: Leaving the product_details or adult flags empty. This forces Google to 'guess' what's in your product, and in healthcare, Google always guesses on the side of caution (disapproval).

Frequently Asked Questions