Catching Misleading Testimonials Before a Regulator Ever Called

The situation

What kept Latif up at night was not a lawsuit. It was the thought of the company's online store simply disappearing, payment processing cut off, social media accounts flagged, with no warning and no clear path back. Latif founded a small skincare company in Kingston a few years earlier, selling a line of facial products online and at a handful of local markets, while still working part-time as an early childhood educator to cover the gap while the business found its footing. Revenue had grown steadily into six figures, enough that Latif finally had money to spend on marketing, and not enough that a single misstep could be easily absorbed.

Latif had brought on Jamal, a pharmacy technician who ran the company's social media accounts on the side for extra income, to build out a review and testimonial program. Jamal's approach was straightforward and, in Jamal's mind, completely normal for a small brand trying to compete online: send free product to anyone willing to post about it, encourage glowing language, and repost the best reviews on the company's own marketing without saying whether the reviewer had been paid or given free product to write it. Some posts also carried language borrowed from customer comments claiming the product 'cleared' certain skin conditions, phrasing nobody at the company had checked against anything.

The trigger for Latif's call to us was not a government letter. It was an email from Joost, who ran a competing skincare business and had clearly been watching the account closely. Joost's message was blunt: it accused the company of running paid reviews without disclosure and making health claims it could not back up, and it said, more or less, that Joost intended to file a complaint with the regulator that oversees misleading advertising unless something changed.

Latif's fear was concrete and specific. A regulatory inquiry into advertising practices, even one that never resulted in a formal order, could freeze the company's ability to advertise or sell while it was under review, and word of an investigation reaching customers or the markets the company sold through could do damage that no eventual vindication would undo. Latif wanted to know, before doing anything else, whether it was already too late to fix.

What the law actually said

The starting point was less dramatic than Latif feared, and also less forgiving than Jamal had assumed. Advertising rules in Canada generally require that claims made to consumers be truthful, not misleading in the overall impression they create, and capable of being supported by evidence the advertiser actually has on hand before making the claim, not evidence gathered afterward to justify it. A testimonial or review used in a company's own marketing is treated as the company's advertising, not as neutral third-party opinion, once the company chooses it, edits it, or pays for it in cash or product.

That last point mattered most. Reviews obtained by giving away free product, without disclosing that exchange to the audience reading the review, create a materially misleading impression: a reader assumes they are seeing an unprompted opinion, when in fact they are seeing content the company solicited and selected. The fix is not to stop using reviews. It is disclosure, in plain language, close to the review itself, saying the reviewer received free product or payment in exchange for an honest opinion.

The health-adjacent language was the more serious problem. Claims that a cosmetic product 'clears' a skin condition edge toward a therapeutic claim, the kind of statement that requires supporting evidence and can attract scrutiny from more than one regulator depending on how strongly it is worded. A general skincare company making that kind of claim without any testing or clinical basis behind it is taking on real risk, regardless of how the language originated.

None of this meant the company had already been caught. Joost's complaint had not yet been filed, and even once filed, most advertising complaints begin with a request for information and a chance to respond, not an immediate shutdown. But it did mean the company's current practices, left unchanged, would not have held up well if a regulator had actually looked closely, and that the fastest way to reduce risk was to fix the practices now rather than wait to see whether Joost followed through.

What we did

1. Gathered every post, reviewer arrangement, and Joost's complaint email itself before deciding on anything. Reading that email carefully turned out to matter more than expected: Joost, eager to make the strongest possible case, had listed specific posts and specific reviewers by name, effectively handing us a complete map of exactly which content was the problem, rather than leaving us to guess or audit the entire account from scratch. That early, aggressive move by a competitor became the turning point that let us move quickly instead of slowly.
2. Reviewed each flagged post against advertising rules on testimonials and substantiation, then sorted them into three groups. Some needed a disclosure statement added, some made claims that had to come down entirely because there was no way to support them, and a small number were fine as written. Separating those categories mattered, because treating every post the same, either taking down content that only needed disclosure or leaving up content that could not be salvaged, would have wasted effort or left real exposure standing.
3. Drafted a plain-language disclosure policy for Jamal to use going forward. It required any post using a free-product or paid reviewer to say so clearly, and required any health-adjacent claim to be checked against actual product testing before it went up rather than defended after the fact. Putting the rule in writing meant the correction would not depend on Jamal remembering a conversation from one stressful week months later.
4. Had Jamal go back through the account, add disclosures or remove content that disclosure alone could not fix, and keep a dated record of exactly what changed and when. That record mattered because the company's best defence, if a regulator ever opened a file, would be proof the correction happened before anyone asked for it, not a bare claim of good faith. We also drafted a short, non-defensive response to Joost noting the changes without conceding any prior post had been unlawful, an admission creating exposure for nothing.
5. Built the disclosure requirement into how Jamal recruited reviewers, not just into cleaning up old posts. The free-product arrangements were going to keep happening, because that was the company's entire marketing strategy, so a one-time cleanup would only have delayed the next violation. We drafted a short standard message for Jamal to send every new reviewer up front, explaining that any post using the free product had to disclose it, moving the compliance step to the start of the relationship instead of the end.
6. Checked the company's product labelling and website copy for the same unsupported claims found in the social posts. A regulator reviewing one marketing channel typically checks the others once a complaint raises a question, so leaving the same language live elsewhere would have undercut the correction. Two lines on the website used similar wording and came down at the same time, with a note in the company's files explaining why, so the correction read as comprehensive rather than limited to the exact posts Joost had named.

The outcome

Joost never filed the complaint. Whether that was because the company's quick, visible correction removed the incentive, or because Joost's own message had already served its purpose by prompting a competitor to clean up its marketing, Latif never found out and did not especially need to. No regulator ever opened a file, and the company's online store, payment processing and social accounts kept operating without interruption throughout.

The cost was mostly Jamal's time and Latif's attention over about three weeks, plus the loss of some review content that could not be salvaged with a disclosure and had to come down entirely, a small dent in the account's apparent popularity that Latif accepted without much argument once the reasoning was explained. No fine was paid, because none was ever assessed. The prevention here is real, but it is also unprovable in the way prevention always is: there is no way to know for certain what would have happened if Joost's complaint had gone forward under the company's old practices, only that the company was in a materially weaker position before the correction than after it.

Latif kept the disclosure policy in place going forward and now checks new marketing language against it before Jamal posts anything using a customer review or a health-adjacent claim. The relationship with Joost, unsurprisingly, did not become friendly, but it also did not escalate into anything further.

Latif later said the strangest part of the whole episode was realizing how close the company had come to a real problem without anyone inside it noticing anything was wrong. Jamal had not been acting in bad faith; free-product reviews and enthusiastic reposts are common practice across small brands online, and nobody had ever told Jamal that disclosure was a legal requirement rather than a courtesy. The correction cost the company some content and a few weeks of attention. Left uncorrected, it would have cost considerably more once a regulator, rather than a competitor, was the one reading the account.

What you can learn from this