Beauty supply store software in Baltimore: Maryland’s ingredient ban has penalties now, and the catalog has no ingredient list

On 1 July 2026 a Maryland law with a long name took effect: the Crown and Care Act – Protecting Communities From Harmful Hair Chemicals. It did not invent a new ban. It took one that had been on the books since 1 January 2025, a list of ingredients that no cosmetic sold in Maryland may contain, and gave it consequences. A violation is now an unfair, abusive or deceptive trade practice under the state’s Consumer Protection Act. A person harmed by a banned ingredient can sue, and a court may award three times their damages. And on a complaint, the Maryland Department of Health may enter a store, inspect it and take samples off the shelf.

The ban reaches anyone who “knowingly” manufactures, sells, delivers, holds or offers such a product for sale in the state, and that includes a beauty supply store on Pennsylvania Avenue as much as the factory that filled the jar. So the law now asks a beauty supply store a plain and slightly awkward question: what do you know about what is in the products you sell? In most stores the honest answer is that the box knows and the computer does not. Every cosmetic sold at retail must carry an ingredient list on its label. None of the point-of-sale systems marketed to this trade mentions a field for it, the hair brands we checked publish no product data feed at all, and of 10,060 cosmetic product listings we read on 21 independent beauty supply web stores across the country, 8.1% showed a full ingredient list.

That gap is the subject of this article, and the Maryland ban is only one of three places it matters. The second is the product description: under federal law the words a seller uses about a product help decide whether it is a cosmetic or a drug, so a hair oil described as growing hair, or a cream described as fading dark spots, can become an unapproved drug in the sentence you pasted from the manufacturer’s website. The third is your own label: a store that fills, mixes or relabels its own shea butter, braiding gel or hair oil and puts its name on the jar is, in the eyes of the 2022 federal cosmetics law, the “responsible person,” with duties of its own.

We build custom software for small businesses in Baltimore, so my interest here is practical. I am not a lawyer, and none of this is legal advice; if a product on your shelf worries you, ask the manufacturer, the distributor or a lawyer before you act on anything here. The question I want to answer is narrower: which facts written on a label does a beauty supply store’s point of sale and online store need to hold, and what does it cost to make them hold them?

What Baltimore’s beauty supply trade actually looks like

In the federal statistics a beauty supply store is NAICS 446120, Cosmetics, Beauty Supplies and Perfume Stores, a code it shares with the cosmetics chains and perfume shops. The Census Bureau’s County Business Patterns for 2023, the latest year published, counts the businesses in it that have at least one employee on the payroll.

The line that matters is Baltimore City’s. Of its 48 employer stores, 35 have fewer than five people on the payroll: 72.9%, against 44.2% for Maryland and 45.0% for the country. The average city store employs 4.9 people, less than half the state average of 10.5. That is the trade we mean in this article: a counter, an owner, a family member or two, a wall of braiding hair and shelves of small bottles, not a chain store with a planogram sent from head office.

The one-person businesses sit in a different file, the Census Bureau’s Nonemployer Statistics, which for 2023 counts 224 nonemployer businesses in Baltimore City in the same product line, with receipts of $3,349,000 between them, about $15,000 each, and 3,066 in Maryland, 97.8% of them sole proprietors. Read that number carefully. The nonemployer file uses the 2022 edition of the industry codes, which dropped the old line between store and nonstore retailers and now files online sellers and direct-sales consultants under the product they sell (Federal Register, 2 July 2021). Most of those 224 are not storefronts. Nationally the same code holds 159,172 nonemployer businesses, and 44.1% of them took in less than $5,000 in 2023; 81.2% took in less than $25,000. That is the other half of a beauty supply store’s online competition: not only Amazon and the chains, but a long tail of one-person sellers, most of them very small.

The customers are the third number, and the one that makes this trade different from a drugstore. The same nonemployer file counts 2,898 one-person hair, nail and skin care businesses in Baltimore City in 2023, with $62.6 million in receipts, and County Business Patterns adds 134 barbershops, beauty salons and nail salons with employees. That is more than three thousand working stylists, braiders, barbers and nail technicians in one city, about 63 for every employer beauty supply store, and every one of them needs supplies. A beauty supply store sells to the public and to the trade at the same time, usually without software that knows the difference.

Those are federal counts. Our own count, described in the e-commerce section below, found 90 independent beauty supply storefronts in Baltimore City and Baltimore County from open map data and web searches, 58 of them in the city. The two measure different things: the federal count includes the cosmetics chains and leaves out stores without a payroll, while ours leaves out the chains and includes any storefront we could confirm.

What the software costs, and what the meter counts

The first thing you notice when you shop for beauty supply software is that the big point-of-sale companies do not really sell it. We looked for a page written for beauty supply stores at Square, Shopify, Clover, KORONA, POS Nation, Hike, eHopper and Celerant, and found none; Square’s and Clover’s “beauty” pages are for salons, which need appointments rather than a wall of braiding hair, and Lightspeed’s is about cosmetics shades. The pages that rank in search for “beauty supply POS” come from smaller vendors and resellers. Here is what the ones that publish a price were charging when we checked on 26 September 2026.

Some of what ranks in this corner of search does not survive a second look. SumUp’s beauty supply page lists its Connect plans at $199 and $289 a month, while its own fees page lists the same plans at $269 and $349, and one “best beauty supply POS” list that ranks for the phrase still recommends Vend, which Lightspeed acquired in 2021. None of the ranking guides mentions wigs, braiding hair, platform limits or any ingredient rule.

What the vendors promise for beauty supply is consistent: a matrix for shades and sizes, several price levels so a licensed stylist pays less than a walk-in customer, catalog import, and loyalty points. Only one page, EliteTeQ’s, names the attributes a wig is actually sold by: color, length, texture and inch count. Two mention lot numbers and expiry dates. Not one mentions ingredients, drug claims, labels or any compliance check at all. Two vendors that serve the trade advertise barcode databases of about 75,000 and 150,000 beauty supply items, which tells you how stores fill their catalogs today: by typing, or by borrowing someone else’s typing.

The subscription is the small number. The meter that matters in this trade is the card fee, and it is set per transaction as well as per dollar. Beauty supply tickets are small: a jar of edge control, two packs of braiding hair, a bonnet. At that size the fixed cents in a card rate weigh more than the percentage.

An $8 online order costs about 7% to take by card, before shipping. It helps explain why one of the two local beauty supply businesses with a real online catalog offers free shipping only above $59.99, and why the honest online strategy for most stores in this trade is not shipping $8 orders at all, but letting people order online and pick up at the counter, where the basket is bigger and the card is present. Neither of the two local stores with an online catalog offered that, which we come back to below.

The part no national platform models: the label is the product record

Every point-of-sale system in the previous section can ring up a jar of edge control. None of them knows what is in it, whether its description makes it a drug, or whose name is on its label, and in Maryland all three of those facts now carry legal weight. This is the section of the article worth your time, so I will go through them one at a time, with the law quoted where it matters.

Maryland’s list, and the word “knowingly”

The ban is section 21-259.2 of the Health-General Article. It was enacted as Chapter 490 of 2021 (House Bill 643, sponsored by Delegate Julie Palakovich Carr), became law without the governor’s signature on 30 May 2021, and took effect on 1 January 2025, the same day as California’s near-identical law. Its operative sentence is short.

Except as provided in subsection (c) of this section, a person may not knowingly manufacture, sell, deliver, hold, or offer for sale in the State a cosmetic product that contains any of the following intentionally added ingredients: …Md. Code, Health-General § 21-259.2(b)

Read the verbs again. A store that holds a banned product in its stockroom is covered, not only the factory that made it. The list itself names 24 substances: eleven by name and thirteen members of the PFAS family, the so-called forever chemicals. Here is where a beauty supply store is most likely to meet them.

Three details in the text matter more than they look. First, the only defense is for a “technically unavoidable trace quantity” of a listed ingredient, caused by an impurity, the manufacturing process, storage or packaging, in a product “manufactured through a process intended to comply.” There is no sell-through period and no grandfather clause for stock that was already on the shelf in December 2024. Second, the list is narrower than its reputation. It bans two parabens, not parabens; one formaldehyde releaser, quaternium-15, and not the others common in shampoos, such as DMDM hydantoin or diazolidinyl urea; and 13 specific PFAS, not the whole family. A “paraben-free” badge tells you nothing about compliance, and a product with methylparaben is not banned. Third, the word “knowingly” was not in the bill as introduced. A House committee amendment inserted it, and the Department of Legislative Services wrote in its fiscal note that “the number of affected manufacturers and/or sellers in the State, if any, is unknown.”

“Knowingly” sounds like protection for a retailer, and in a narrow sense it is. But think about what a store can know. Under federal law, 21 CFR 701.3, the label of every cosmetic sold at retail must declare its ingredients, so the information is sitting on every box that comes through the door. The FDA’s own advice to consumers buying hair smoothing products is to read that list: “If you’re purchasing a product on a retail basis, whether at a store or by mail order, including on the Internet, the product is required to have a list of the ingredients. If it doesn’t, we recommend that you do not purchase the product” (FDA). The same page notes that products “marketed only to salon professionals may not have a list of ingredients,” while the FDA’s labeling guide says that exemption does not apply if the products “are customarily also sold at retail, even if they were labeled ‘For professional use only.’” A beauty supply store that sells professional smoothing treatments over the counter is therefore selling exactly the category most likely to arrive without the list it needs.

Since 1 July 2026, the ban has a price

For its first eighteen months the ban had only the general penalties of Maryland’s food, drug and cosmetic law: a misdemeanor with a fine of up to $10,000 or a year in jail for a first conviction, a civil penalty of up to $5,000, and each day counted as a separate violation (§ 21-1215). Enforcement was assumed to be complaint-driven, and advocates told the legislature this spring that banned products were still on Maryland shelves. The General Assembly’s answer was the Crown and Care Act, passed as two cross-filed bills, Chapter 284 (House Bill 1533, Delegate Tiffany Alston) and Chapter 283 (Senate Bill 656, Senator Shaneka Henson), approved on 28 April and in force since 1 July 2026. It changed four things.

A violation of the ban is now an unfair, abusive or deceptive trade practice under the Consumer Protection Act, which brings the Attorney General’s Consumer Protection Division into it, with civil penalties of up to $10,000 for each violation and $25,000 for each repeat (Commercial Law § 13-410) and a private action for “injury or loss” under § 13-408. The ban itself gained a new subsection (d): a person who violates it is liable for civil damages for actual harm, the injured person has three years from discovering the cause, and a court may award treble damages, punitive damages if the violation was willful, and attorney’s fees. A new subsection (e) lets the Maryland Department of Health investigate any complaint, enter and inspect the premises, and take samples, and a business may not refuse or interfere. And Chapter 284, but not its Senate twin, added lead to the list; the legislature’s online code had not been updated to show it when we checked in September 2026.

The retail trade saw this coming and asked for something different. The Maryland Retailers Alliance testified in March that liability should fall on manufacturers, and proposed an actual-knowledge standard for retailers, a manufacturer certification, a defense for relying in good faith on that certification, and 60 days’ notice to cure before any lawsuit. None of it was adopted; the enacted text says “a person who violates this section.” The Alliance’s written testimony also made, in so many words, the point this article is about: that it would be an extremely arduous job for a retailer to review the ingredients of every product it buys from outside brands (testimony on SB 656, 31 March 2026).

It is arduous by hand. It is not arduous for a computer that has the ingredient lists, which is the whole point. A licensed cosmetologist who testified for the bill named the products the targeted chemicals turn up in, among them edge controls, lace glues, heat-resistant serums, relaxers, keratin treatments, hair color, smoothing balms, shampoos, conditioners, mascara and lipstick. That is most of a beauty supply store. The Attorney General’s office, for its part, estimated that enforcing the new provisions would cost $492,908 in the 2027 fiscal year for two assistant attorneys general and an investigator, a need the legislature’s analysts doubted (fiscal note), and the Act asks the Department of Health and the Attorney General to report by 1 December 2026 on a fund for research into and treatment of fibroids, uterine cancer and hair loss caused by harmful hair chemicals. The state is building its enforcement around this list. A store should be able to answer, in seconds, which of its products contain anything on it.

The sentence on the product page decides whether the jar is a drug

The second label fact is not an ingredient but a claim. Federal law defines a cosmetic by its purpose, cleansing, beautifying, promoting attractiveness or altering appearance, and a drug by a different one: an article intended to treat or prevent disease, or “to affect the structure or any function of the body” (FD&C Act § 201). The same jar can be either, and what usually decides it is what the seller says. The FDA’s explainer lists “claims stated on the product labeling, in advertising, on the Internet, or in other promotional materials” as evidence, and gives as examples of drug claims that a product will “restore hair growth” or “increase or decrease the production of melanin (pigment) in the skin” (FDA, “Is It a Cosmetic, a Drug, or Both?”). An anti-dandruff shampoo is both, which is why it carries a Drug Facts panel.

For a retailer the important line is the last sentence of the FDA’s intended-use rule, which makes the claim yours as soon as you make it.

If, for example, a packer, distributor, or seller intends an article for different uses than those intended by the person from whom he or she received the article, such packer, distributor, or seller is required to supply adequate labeling in accordance with the new intended uses.21 CFR 201.128

This is not theoretical. FDA warning letters routinely quote product pages and social media. A May 2026 letter to a skin-cream seller quoted its website’s own words, “Fades sunspots. Lightens underarms” (FDA). A 2024 letter to a maker of chemical peels quoted its Instagram posts (FDA). An April 2026 letter about an anti-dandruff shampoo cited its websites, including a beauty retail site, and called the phrase “made in an FDA registered facility” misleading (FDA). Maryland has its own version of the rule: a cosmetic is misbranded under § 21-231 if its labeling is “false or misleading in any way.”

Now think about how a beauty supply store’s product descriptions are written. Someone copies the manufacturer’s text, or the marketplace listing, or the back of the box, and adds a line of their own: grows your edges back, stops itchy scalp, clears bumps, fades dark spots. Each of those can read as a drug claim, and none of them passes through anything that would catch it. A claims check is the cheapest compliance tool in this article: a list of phrases, a person who reviews the matches, and a record that they did.

The cream that became an unapproved drug in September 2020

For decades, skin-fading creams with up to 2% hydroquinone were sold over the counter, including in beauty supply stores, while the FDA’s rules for them stayed in draft. The CARES Act of March 2020, which reformed how over-the-counter drugs are regulated, ended that: products covered by a proposed finding that they were not generally recognized as safe and effective became unapproved new drugs 180 days later, on 23 September 2020 (21 U.S.C. § 355h). The FDA put it plainly: “there are no FDA-approved or otherwise legally marketed OTC skin lightening products” (FDA). In April 2022 it sent warning letters to twelve companies selling them, and it has kept sending them since.

Mercury is the worse relative of the same product. Federal rules have long treated a cosmetic containing mercury as adulterated unless the mercury is an unavoidable trace under 1 part per million, apart from a narrow allowance for eye-area preservatives (21 CFR 700.13), and since 2025 Maryland bans it outright. Yet the FDA’s own table of skin-lightening products it has tested lists mercury at 47 to 27,762 parts per million in creams bought from eBay, Amazon, Walmart.com and Etsy, and hydroquinone in creams bought from at least two online beauty supply stores (FDA). The agency’s consumer warning says such products are “usually manufactured abroad” and “promoted online on social media sites and sold through mobile apps” (FDA).

For software, these two are the easy part, because they are identifiable: an ingredient (hydroquinone, mercury, calomel, mercurous chloride, “mercurio”), a claim (lightening, whitening, bleaching, fade) and often a supplier outside your usual distributors. A receiving step that matches the ingredient list against a short never-stock list, together with a check that flags whitening and bleaching language, would catch this whole category, including creams that do not declare their mercury, because so many of them carry “whitening,” “bleaching” or “dark spot” in their names.

Fill your own jars and your name is the responsible person

Many beauty supply stores sell something of their own: whipped shea butter, a hair growth oil, a braiding gel, a black soap cut from a block, a house brand of edge control made under contract. The Modernization of Cosmetics Regulation Act of 2022, the first major update of federal cosmetics law since 1938, gives whoever’s name is on that label a set of duties. It defines the “responsible person” as “the manufacturer, packer, or distributor of a cosmetic product whose name appears on the label” (21 U.S.C. § 364). Put your store’s name on the jar and it is you.

The duties are concrete. Since 29 December 2024 every cosmetic must bear “a domestic address, domestic phone number, or electronic contact information, which may include a website,” through which the responsible person receives adverse event reports (§ 364e(a)); the FDA’s guidance says a QR code or fax number alone is unlikely to do, and the separate name-and-place-of-business line still needs a street address, because “a post office box or website address is not adequate” for it. A serious adverse event must be reported to the FDA within 15 business days, with a copy of the label, and records kept for six years, or three for small businesses (§ 364a). A business whose cosmetic sales average under $1 million a year over three years is exempt from facility registration, product listing and the coming manufacturing-practice rules, but not from the label, the adverse event reports, safety substantiation or recalls, and the exemption disappears for products that regularly touch the eye, such as false-eyelash adhesive, products that are injected or used internally, and products meant to change appearance for more than 24 hours, such as some nail polishes and hair dyes.

There is also a quiet line in the definition of a “facility.” A retail store is excluded “unless such establishment manufactures or processes cosmetic products that are not sold directly to consumers at that location,” and the statute adds that filling a container with a cosmetic is not mere packaging. My reading, and it is only a reading, is that a store that fills jars and sells them over its own counter stays outside the registration rules, while the same store shipping those jars to online customers or to other shops may not. Maryland adds one more rule that turns on the label: its 2021 ban on cosmetics developed with animal testing binds the “manufacturer,” defined as “any person whose name appears on the label” (§ 21-259.3), with civil penalties of up to $5,000 for a first offense.

None of this is heavy, but all of it is a record: the formula and its version, the batch, the label version and the contact it carries, a log of complaints with a 15-business-day clock on the serious ones, and the retention period. If your house products live in a notebook, that notebook is now a regulated document. And be careful with the badge some makers print: the FDA does not issue registration certificates (it said so again on 9 September 2026), and it has called “made in an FDA registered facility” misleading on a label.

Formaldehyde: Maryland moved, and the FDA keeps rescheduling

Maryland’s ban on formaldehyde, paraformaldehyde and methylene glycol in cosmetics took effect in January 2025. The FDA’s proposed rule to ban formaldehyde and formaldehyde-releasing chemicals in hair smoothing and straightening products, regulatory identifier 0910-AI83, has not yet been published. Its target date in the federal government’s regulatory agenda has moved five times, from April 2024 to July 2024, September 2024, March 2025, December 2025 and now November 2026 (reginfo.gov). In the meantime the hair relaxer litigation in federal court in Chicago, which concerns chemical relaxers rather than smoothing treatments, had 12,129 cases pending on 1 September 2026, the fourth-largest pending multidistrict litigation in the country (Judicial Panel on Multidistrict Litigation). Selling hair chemicals is not illegal, and relaxers are not banned. But a store that sells them in Maryland is operating under a state rule stricter than the federal one, in a category that is being litigated at national scale, and the one thing it can control is knowing exactly what it sells.

Two smaller local rules

Baltimore City adds two rules that live in the same system. The first is the city’s 5-cent bag surcharge, which must be itemized on the receipt and reported monthly with the number of bags, with a $1,000 penalty for each month the records are not kept; we went through it in detail in our clothing boutique post. The second is newer. Ordinance 25-065, signed in December 2025, makes a “small-box discount store” of 5,000 to 12,000 square feet, selling mostly items of $5 or less, a conditional use that must sit at least 2,640 feet from the next one, and it excludes “a retail store where the majority of the products sold are personal hygiene products or cosmetics” (Zoning Code § 1-312). A store under 5,000 square feet never meets it. For a larger one, whether it is a discount store in the zoning code’s eyes depends on a question only its catalog can answer, and the code does not say whether “majority” means products or sales.

What 10,060 product listings on beauty supply web stores say

If the ingredient list is the record the law now turns on, the obvious question is how often a beauty supply store’s own product data carries it. Baltimore could not answer that, because, as the e-commerce section below shows, only two local independent beauty supply businesses have an online catalog at all. So we went national. We searched for independent, multi-brand beauty supply stores across the United States with online catalogs and found 119 candidates. Seventy ran on Shopify, whose stores publish a machine-readable product feed, and we read 21 of them before Shopify’s bot protection shut our crawler out, keeping only stores whose shelves looked like a beauty supply store’s: many brands, hair extensions and formulated products together. They are in twelve states, from Texas and Georgia to Oregon and New York. None is in Maryland. We read 20,136 of their product listings, every listing for six of the stores and the most recently updated 250 to 1,000 for the rest, and set aside the hair, tools and accessories, leaving 10,060 listings for things with ingredients: hair care, skin care, nails and makeup.

The headline is the third row of the chart. Only 810 of the 10,060 listings, 8.1%, carry a full ingredient list, and that average flatters the typical store: the median store shows one on 1.85% of its cosmetic listings, five stores show none at all, the best shows one on 20.8%, and not one store reaches half. If a Maryland inspector, a customer with an allergy or an AI assistant asked these stores what is in the products they sell online, nine times out of ten the store’s own data could not say.

The second finding is what travels instead. Almost exactly as many listings say what a product is free of, 1,022, as show any ingredient label, 1,026, and only 129 of those 1,022 listings, 12.6%, put a full list next to the claim that would let anyone check them. The most common are “sulfate-free” on 521 listings and “paraben-free” on 476, which is worth a moment given Maryland’s law: the state bans two parabens, not parabens, so “paraben-free” is a marketing claim, not a compliance statement. The same pattern holds for drug language. Hair-growth wording appears on 551 listings in 18 of the 21 stores, and 8 of them carry a Drug Facts panel or name an active ingredient. Sunscreen or SPF appears on 51 listings, one with Drug Facts. Dandruff does a little better: 15 of its 144 listings show Drug Facts, because anti-dandruff shampoos are sold as over-the-counter drugs and some sellers copy the panel into the description. Four listings in one store sell skin-lightening serums and creams stating 1.9% hydroquinone, none with a Drug Facts panel; as the rules section explains, no over-the-counter hydroquinone skin lightener has been legally marketed since September 2020.

Where ingredient lists do exist, Maryland’s banned list barely appears. Among the 1,132 listings with an ingredient label, across all categories, eight listings in two stores printed a banned ingredient: quaternium-15 in a shampoo, a medicated conditioner and a children’s scalp product, formaldehyde in a shampoo and a latex lash adhesive, and isobutylparaben with isopropylparaben in three hair and scalp oils. Another 141 listings in eight stores printed formaldehyde-releasing preservatives that Maryland does not ban, mostly DMDM hydantoin and diazolidinyl urea. These are listing texts, which may be old copy for a product since reformulated, not tested bottles, and none of these stores is in Maryland. But they show what a check would find if it had data to run on: rarely a banned ingredient, often nothing to check at all.

We report pooled numbers only and name no store. The sample is Shopify stores found by search, not a random draw; fifteen of the stores contributed only their most recently updated 250 to 1,000 listings because Shopify’s bot protection slowed our crawl, although their shares matched the fully crawled stores to within about a point and a half. Keyword rules decide the categories and the claims, so treat the claim counts as wording found, not violations found. And a listing is not a bottle: a product with nothing online may carry a perfect ingredient list on its box. That is exactly the gap this article is about.

The e-commerce half: a beauty supply store sells a grid, to two kinds of customer

The rules above decide what may be on the shelf. The online store has problems of its own, and three of them are specific to this trade.

One braid, forty colors

Braiding hair, wigs and extensions are sold by color code, length, texture and sometimes pack count, and customers search that way; “braiding hair color 4/30” is a real query. One braid style in 30 colors and three lengths is 90 variants. One wig in 40 colors, four lengths and two textures is 320. For most of its history Shopify capped a product at 100 variants; on 15 October 2025 its developer changelog announced that the limit is now 2,048 for all merchants, but a product may still have only three options, so a fourth attribute such as lace type or pack count has to become a separate product, and Shopify warns that apps not yet using its newer product API may give a degraded or broken experience above 100 (Shopify). BigCommerce allows 600 SKUs per product. Square’s catalog allows six options per item, and its sellers report that Square Online refuses items with more than 120 variations. WooCommerce has no hard cap, but its own documentation says the variation drop-downs stop narrowing the choices once a product has more than 30 variations (WooCommerce), and its source code limits the button that generates variations to 50 at a time. In practice the stores in our national census below rarely touch these limits, because they work around them: their 5,414 hair listings had a median of three variants, only 22 had fifty or more, and the usual pattern is one product per color, which sidesteps the caps but turns one braid style into dozens of separate products to price, photograph and restock.

The deeper problem is color. Brands share the familiar codes, 1, 1B, 4, 27, 30, 613, but add their own blends and names, and a customer shopping by color wants the 1B or the 613 across every brand at once. That is a color attribute with a normalized code on every hair product, which generic variant systems leave to you, and a color chart photographed once and reused, which the brands do not supply as data. The hair brands we checked publish catalogs and ordering portals, but none publishes a product feed a retailer could load, and one of the best-known, Outre, will not sell to online-only businesses at all: its dealer form asks for a business license, a physical storefront and a $3,000 minimum first order (Outre). The store that wants a real online catalog of hair builds it by hand, once, and should own the result.

The customer at the counter may hold a license

A beauty supply store sells to the public and to the trade in the same line at the register. Maryland’s Department of Labor had 92,910 individual cosmetology licenses on record in the 2025 fiscal year, including 52,279 cosmetologists, 19,362 nail technicians and 8,798 estheticians, plus 13,323 barber licenses, 11,242 salon permits and 2,422 barbershops (Board of Cosmetologists sunset report; Board of Barbers). Every professional price level in the vendor list above assumes you can tell who they are. One Maryland detail complicates that, and one helps. Hair braiders need no license at all: the practice of cosmetology excludes a service that puts “tension on hair strands or roots by twisting, wrapping, weaving, extending, locking, or braiding,” as long as no chemicals are applied, and it also excludes “the mere sale, fitting, or styling of wigs or hairpieces” (Business Occupations § 5-101(n)(2)). So some of your best professional customers can never show you a license. And the state’s online lookup can confirm an active cosmetologist or barber by name or license number, which is enough for a pro account with an expiry date and a yearly recheck.

Federal law adds a label rule on the product side. Since the 2022 cosmetics law, a product “intended to be used only by a professional,” meaning someone licensed in cosmetology, nail care, barbering or esthetics, must carry “a clear and prominent statement that the product shall be administered or used only by licensed professionals” (21 U.S.C. § 364e(c)); the FDA estimates that 402 companies use such labels. Nothing in that section stops a store from selling the product to the public, and whether a salon may sell professional brands online is a different question, which we covered in our salon post. But a store that decides to sell professional-only products to licensed customers only needs the license on the account and the flag on the product, and a record connecting the two.

Machines read the description, not the label

A map app or an AI assistant can only recommend a store it can read, and both read what is written about the store online, not what is on its shelves. We tried to find every independent beauty supply storefront in Baltimore City and Baltimore County from open data, starting with OpenStreetMap, the open map that many apps draw on, and then searching the web for each store. We identified 90 storefronts, 58 in the city and 32 in the county. Only 11 had a working website, which turned out to be five distinct sites, because two local groups share one site across several stores. Four storefronts, belonging to two businesses, had an online catalog with prices and a checkout. Sixty-one had no website we could find anywhere. Of the 18 storefronts with a store-specific web address listed in a directory, on the map or in search results, 13 pointed to a domain that was dead, parked, for sale or taken over by something else, including all six addresses stored in OpenStreetMap.

The map itself is part of the problem. Of the 50 stores OpenStreetMap does have, 42 are tagged as salons or with no type at all, and only eight carry a retail tag such as cosmetics, wigs or hairdresser supply. Software that looks for stores selling beauty supplies by reading those tags would find about eight of our 90. The fix costs nothing but attention: a working domain, a correct category on the map and in the business listings, and opening hours that are true.

The catalogs that do exist say little about what is in the products. None of the 250 product descriptions on the one local Shopify store we could read contained the word “ingredient.” The feed format ChatGPT asks merchants to submit has nine required fields, and a factual product description is one of them; there is no field for ingredients (OpenAI). Schema.org, the vocabulary search engines read from product pages, has no ingredients property for products either, though its current release lists a property for “a substance of concern” and another for “a consumer notice, such as a safety warning or mandatory information” (schema.org). So an assistant knows what your description says, which is the same place a drug claim lives, and nothing about what your label says unless you put it in writing. A product page that carries the full ingredient list, the size, the brand’s contact line and a plain description is better for customers, better for search and better for the law, which is a rare combination.

Returns, points and the other records

Two more records deserve a line each. Opened hair and cosmetics are usually final sale for hygiene reasons, and when a store gives credit instead of cash, Maryland treats that credit like a gift certificate that must stay valid for at least four years, which we explained in the clothing boutique post. And a loyalty program is a database of customers’ purchases, which in a beauty store can say a lot about a person; Maryland’s privacy law and its thresholds are in our guide to the Maryland Online Data Privacy Act.

A note for readers in Lithuania

We write mostly for Baltimore, but part of our team and many of our readers are in Lithuania, and in this trade the two places are closer than they look. Maryland’s 2021 ban says so itself: an uncodified section of Chapter 490 states the legislature’s intent that it be read consistently with the European Union’s Cosmetics Regulation, Regulation (EC) No 1223/2009. The difference is scale. Maryland’s list has 24 entries, 25 with lead; the EU’s list of prohibited substances, Annex II, now runs to entry number 1766.

The EU also shows what an ingredient ban looks like when it lands on a shop. Commission Regulation (EU) 2025/877, adopted on 12 May 2025, moved trimethylbenzoyl diphenylphosphine oxide, known as TPO, from the list of restricted substances, where it was allowed at up to 5% in professional nail systems, to Annex II, entry 1731, from 1 September 2025. TPO is a photoinitiator that helps gel nail polish cure under a UV or LED lamp. There was no sell-through period. The National Public Health Center (NVSC) told distributors in July that „likusių atsargų realizavimas po šios datos bus neteisėtas“, selling off remaining stock after that date would be unlawful (NVSC, July 2025), and its question-and-answer page added that this applied to products „kurie jau yra sandėlyje“, already in stock (NVSC, August 2025). The salons felt it. LRT reported that the beauty specialists’ association had asked for time to use up stock and been refused, and one salon owner, Aušra Vitkuvienė, summed up the timetable: „Gauname nutarimą ir per mėnesį ar du turime susitvarkyti likučius“ (“We get a ruling, and within a month or two we have to deal with the leftover stock”).

Lithuania is also explicit about who holds the data. Under the EU regulation a distributor must check, before selling, that the label carries the ingredient list and the responsible person’s address. For online sales, the State Consumer Rights Protection Authority (VVTAT), which supervises shops, divides the job in a presentation published by NVSC in July 2026: the brand’s responsible person supplies the information and keeps it „nuolatinį atnaujinimą“, continuously updated, while „mažmenininkas yra atsakingas už informacijos nurodymą/parodymą internetinėje arba nuotolinės prekybos vietoje“, the retailer is responsible for showing it at the online point of sale (NVSC and VVTAT, 2026). Lithuanian shops mostly do it: the product pages we checked at a perfumery chain and a pharmacy chain show the full ingredient list, and the pharmacy splits warnings, ingredients and manufacturer details into separate fields. But the data drifts. On 26 September 2026, a year after the ban, a large online beauty retailer’s page for a gel polish, out of stock and marked for professionals only, still listed TPO in its full ingredient list. That is not evidence that anyone sold it. It is evidence that a catalog keeps whatever it was last told, which is the whole problem in one product page.

The last Lithuanian detail is a warning about imports. By our count of the EU’s public Safety Gate portal, it published 57 alerts in 2025 about cosmetics that mention mercury or hydroquinone, mostly skin lighteners, against 4 in 2024; Sweden filed 35 of them. Lithuania has filed none of the 212 such alerts since 2017, although an NVSC official told the Klaipėda daily VE.lt that nail technicians also buy these products from online shops outside the EU. For a shop in Vilnius or Kaunas the practical question is the same as in Baltimore: when a product arrives from a supplier you do not know, who reads the ingredient list before it goes on the shelf, and where is that written down?

What custom actually costs, and when it pays

We price every project at a fixed fee, agreed before we start, and publish the starting points on our pricing page. For a beauty supply store they map onto the problems in this article like this.

Most of our projects land between $6,000 and $30,000, and none of them needs you to drop a point-of-sale system that works; the demos page shows what finished work looks like. If you are in Maryland, remember that the state’s 3% tax on software and IT services applies to a custom build, which we explained in a separate post.

The honest case for building is not that point-of-sale software is expensive; for a single store it is one of the cheaper lines in the budget. The case is that the work in this article is a data problem, and data problems get cheaper when they are done once and kept. Take the ingredient check, with every assumption stated. Suppose a store carries 3,000 formulated products, the creams, gels, oils, relaxers and polishes, not the hair or the tools, and that finding a box, reading its ingredient list and typing it takes three minutes. That is 150 hours, close to four working weeks, before a single product has been checked, and it starts again with every new product and every reformulation. A receiving screen that reads the list from a photo of the box, keeps it on the product record and checks it against the state list turns that into a few seconds per product and a short queue for a person to confirm. The same record then fills the product page, feeds the claims check and answers the inspector. Change the assumptions and the hours move, but the shape does not: done by hand, the check is the job nobody has time for; done at receiving, it is a field.

What we would build for a Baltimore beauty supply store

If an independent beauty supply store in Baltimore asked us to fix the problems in this article without replacing anything that already works, this is what we would build, roughly in this order.

• An ingredient field on every formulated product, filled at receiving. When a new product arrives, the counter tool asks for the ingredient list, from a photo of the box if nothing better exists, and matches it against Maryland’s list, lead included, and a short never-stock list of mercury compounds and hydroquinone. A match stops the product before it reaches the shelf and records who checked and when.
• A claims check before a description goes live. Every product description, on the website and on shelf cards, is scanned for wording that reads like a drug claim: hair growth, regrowth, dandruff, acne, eczema, lightening, fading, healing. A person reviews each match, and the decision is kept.
• Records for anything with your name on the label. The formula and its version, the batch, the label version with its contact line, and a complaint log with a 15-business-day clock on the serious ones, so a house brand of shea butter has the paperwork the 2022 federal law expects.
• A hair catalog that works the way hair is sold. One product per style, a normalized color code across brands, length and texture as attributes, a reusable color chart, and stock by color so reorders go by what actually sold.
• A pro account for the trade. A license number and expiry checked against the state lookup for cosmetologists and barbers, a separate path for braiders who hold no license, a price level, and a record of which products are sold to licensed customers only.
• An online store built for pickup. Order online, pay online or at the counter, collect the same day, with product pages that carry the ingredient list, the brand’s contact line and a plain description that search engines and AI assistants can read.

None of that is exotic engineering. It is a text field, a list, a phrase search, a few records with dates and a catalog shaped like the shelf. That is also why, as far as we could find, nobody sells it: the platforms are built for every kind of retail at once, and this is one trade in one state with one list. We found no app on the Shopify App Store or in the WordPress plugin directory that checks a product’s ingredients against any US state’s banned list; the closest checks only EU rules, and the three that flag drug claims in descriptions all launched in 2026 and had no reviews when we looked.

Build, buy, or leave it alone

Most Baltimore beauty supply stores should buy their point of sale, and several of the products in this article are good at it. If you run one store, sell almost nothing online and your regulars know where everything is, a retail POS with a decent matrix inventory will ring up braiding hair by color, scan the bottles and print the receipt, and nothing we could build would be a better use of your money. Keep it. Before the end of the year, do three things by hand: pull every skin-lightening, smoothing and hair-growth product off the shelf and read its label against this article, write down which products you fill, mix or relabel yourself, and read your own product descriptions the way the FDA would, one sentence at a time.

If you run two or three stores, sell to a lot of stylists and braiders, or have a website that takes real orders, the question is different. Your problem is no longer ringing up a sale. It is keeping one catalog true in several places: the ingredient lists your distributors never send, the descriptions copied from a manufacturer’s site, the house-brand jars with your name on the label, the color grid that outgrew the platform, and the pro customers who expect the counter price online. Do not migrate. Add what is missing around the system you have, and only replace the storefront if the storefront is what is losing you orders.

Leave alone what is cheap and works: the card terminal your customers trust, the distributor portals you already order from, the accounting package and the marketplace listings that bring you people who would never have walked in. Build the few things nobody sells in this trade, which are the ingredient field and the check against the state list, the claims review, the records for your own label and the catalog that handles hair the way hair is sold. And if you are not sure which of those is costing you money, a one-week prototype run against your own product list is the cheapest way to find out.

Questions beauty supply owners ask us

How much does beauty supply store POS software cost in 2026?

When we checked on 26 September 2026, Square for Retail cost $0, $49 or $149 a month per location, with in-person card rates of 2.6%, 2.5% or 2.4% plus 15 cents. Shopify cost $39, $105 or $399 a month plus $89 per retail location for POS Pro, with in-person rates of 2.6%, 2.5% or 2.4% plus 10 cents. KORONA POS charged $59 to $99 a month per terminal, Lightspeed Retail $89 to $289 a month billed annually, MicroBiz $65 or $95 a month per store, and RetailEdge $495 once plus $45 a month for support. On small beauty supply tickets the card fee is the bigger cost: an $8 sale costs 28 to 36 cents in person and 53 to 56 cents online.

What ingredients are banned in cosmetics in Maryland?

Since 1 January 2025, Health-General § 21-259.2 has barred anyone from knowingly manufacturing, selling, delivering, holding or offering for sale in Maryland a cosmetic with any of these intentionally added ingredients: dibutyl phthalate, diethylhexyl phthalate, formaldehyde, paraformaldehyde, methylene glycol, quaternium-15, mercury, isobutylparaben, isopropylparaben, m-phenylenediamine, o-phenylenediamine and 13 named PFAS, plus lead since Chapter 284 of 2026. The only defense is a technically unavoidable trace. Most parabens, PPD hair dye and formaldehyde releasers other than quaternium-15 are not on the list.

What is Maryland’s Crown and Care Act?

It is the 2026 law, Chapters 283 and 284, in force since 1 July 2026, that gave Maryland’s cosmetic ingredient ban its enforcement. A violation is now an unfair, abusive or deceptive trade practice under the Consumer Protection Act, with civil penalties of up to $10,000 per violation and $25,000 per repeat. A person harmed can sue within three years of discovering the cause, and a court may award treble damages, punitive damages if the violation was willful, and attorney’s fees. The Maryland Department of Health may investigate complaints, inspect premises and take samples. Chapter 284 also added lead to the banned list.

Is hydroquinone legal to sell over the counter in the United States?

No. Under the CARES Act’s reform of over-the-counter drugs, skin-lightening products with hydroquinone became unapproved new drugs on 23 September 2020, and the FDA says there are no FDA-approved or otherwise legally marketed over-the-counter skin lightening products. The only approved hydroquinone drug is a prescription cream. The FDA sent warning letters to twelve companies in April 2022 and has sent more since. Creams containing mercury are separately adulterated under federal rules and banned outright in Maryland.

Can a hair oil say it grows hair?

Not as a cosmetic. Under federal law a product intended to affect the structure or function of the body is a drug, and the FDA gives claims that a product will “restore hair growth” as an example of a drug claim. The claim can be on the label, in advertising, on a website or on social media, and under 21 CFR 201.128 a seller who presents a product for a new use is responsible for that labeling. A hair oil may say it moisturizes, softens or adds shine. Claims about growth, regrowth, dandruff or healing need a closer look.

Does the federal cosmetics law apply to a small beauty supply store?

If the store puts its own name on a product, yes. The Modernization of Cosmetics Regulation Act of 2022 makes the company named on the label the “responsible person,” who must print a domestic contact for adverse event reports on the label, report serious adverse events within 15 business days and keep records. A business averaging under $1 million a year in cosmetic sales over three years is exempt only from facility registration, product listing and manufacturing-practice rules, and loses even that for products that touch the eye or are meant to last more than 24 hours.

Do cosmetics sold online have to show an ingredient list?

Federal law requires the ingredient list on the package label of cosmetics sold at retail, including by mail order and on the internet, but no federal rule we found requires the list to appear on the web page. In practice a store needs the list anyway, because Maryland’s ban turns on what a product contains, and publishing it on the product page helps customers, search engines and AI shopping assistants. In the EU the rules on online selling require the manufacturer’s details and warnings, and Lithuanian shops usually show the full list too.

Is formaldehyde banned in hair straighteners?

In Maryland, yes: formaldehyde, paraformaldehyde and methylene glycol (which the FDA says is another name for formaldehyde in hair smoothing products) have been banned in all cosmetics since January 2025. Federally, the FDA’s proposed rule to ban formaldehyde and formaldehyde-releasing chemicals in hair smoothing and straightening products has not been published; its target date has moved five times and now reads November 2026. Relaxers are a separate category and are not banned, although 12,129 lawsuits over relaxers were pending in federal court on 1 September 2026.

Can Shopify handle wigs and braiding hair in many colors?

Mostly. Since 15 October 2025 Shopify allows up to 2,048 variants per product, up from 100, but still only three options, so a style sold by color, length and texture fits and a fourth attribute does not. Apps built on Shopify’s older product API may misbehave above 100 variants. BigCommerce allows 600 SKUs per product; Square allows six options per item, and sellers report that Square Online limits items to about 120 variations. WooCommerce has no cap, but its variation menus stop filtering above 30 variations.

How many beauty supply stores are there in Baltimore?

County Business Patterns counts 48 cosmetics, beauty supply and perfume stores with employees in Baltimore City in 2023, 35 of them with fewer than five employees, and 180 in the Baltimore metro area. The Census Bureau’s nonemployer file adds 224 one-person businesses in the city in the same product line, a count that since 2022 also includes online sellers and direct-sales consultants. Our own count from open map data and web searches found 90 independent beauty supply storefronts in Baltimore City and Baltimore County, of which 11 had a working website and 4 had an online checkout.

Should a Baltimore beauty supply store build custom software?

Usually not the point of sale. A single store with a good retail POS should keep it, and spend an afternoon checking its shelves against Maryland’s ingredient list and its descriptions for drug claims. Building starts to pay when a store has several locations, a large professional clientele, a house brand with its own label or a website that takes real orders, because then the missing pieces are records: ingredient lists, claims reviews, label files, pro accounts and a hair catalog. Those can be added around the system you already have.