Google Ads Customer Match for Peptide and Health Brands: What Is Allowed

Customer Match is one of the few audience tools you control completely, because it starts from your own customer list. It is also one of the easiest to misuse in health. This guide summarises Google's Customer Match policy as published (we read the UK English version, which Google treats as official text). Rules differ by region and change over time, so confirm in your own account before you upload a list.

It sits beside our remarketing rules guide and our healthcare and medicines policy guide.

Eligibility

• Your account or manager account needs a good policy-compliance history and a good payment history.
• All policy-compliant advertisers can use Customer Match lists in the Observation setting and for Exclusions.
• Google says accounts with 90 days of history and more than USD 50,000 in lifetime spend can also use the Targeting setting and manual bid adjustments.
• Google can remove access if ads could harm users or create a poor experience.

Data Rules

• First-party only. Upload data you collected yourself, from your site, app, shops or customers who shared it directly.
• Privacy policy disclosure. Your policy must disclose that you share customer data with third parties to perform services on your behalf.
• Consent. Obtain it where required by law or Google policy.
• Approved upload routes. Use Google's approved interface or API.
• List size and age. Lists have a maximum membership duration of 540 days, and a list needs at least 100 members added or updated in that period to stay eligible.
• Under-13 data. Do not upload data about customers under 13.

Sensitive Categories: The Health Limits

For health brands, the key limits are these:

• You cannot use sensitive interest categories to target ads or promote products through remarketing or Customer Match.
• You cannot use Customer Match data to identify sensitive interest categories related to your customers.
• Ad content must not imply knowledge of personally identifiable or sensitive information about customers.
• The policy also bars advertising sensitive-information products, with pharmaceutical products given as an example. Check Google's page for the full wording.
• Lists that create an overly narrow audience are not allowed.

Safe Uses for Peptide and Health Brands

Uses to Avoid

• Building lists around a condition or treatment, such as customers who bought a product for a specific health issue.
• Writing ad copy that signals you know something about the viewer's health. See our personal attributes guide for the same principle on Meta.
• Uploading lists from third parties or purchased data.
• Sending a patient or clinic list if your business provides care. Review it first with counsel using our tracking and privacy guide.

A Safe Workflow

1. Confirm your account meets the eligibility conditions.
2. Collect and document consent, and update your privacy policy.
3. Build lists from commercial behaviour only.
4. Start with Exclusions and Observation.
5. Review ads against the sensitive-category rules before turning on Targeting.
6. Keep a log of each upload and its purpose.

Violations can lead to loss of Customer Match access or account suspension, and serious or repeated violations can lead to immediate suspension without notice. Keep your account safe with our audit checklist and our guide to advertiser verification.

Frequently Asked Questions

Who can use Customer Match in Google Ads?

Accounts need a good policy-compliance and payment history. Policy-compliant advertisers can use lists for Observation and Exclusions, and Google says accounts with 90 days of history and more than USD 50,000 lifetime spend can also use the Targeting setting.

Can I upload a list of customers who bought for a health condition?

No. Google bars using Customer Match to target sensitive interest categories or to identify them among your customers, so do not build lists around conditions.

What data can I upload?

Only first-party data you collected yourself, with the consent required by law or Google policy, and a privacy policy that discloses sharing with third parties that perform services for you.

What is a safe use of Customer Match for a peptide brand?

Excluding existing customers from acquisition campaigns, observing segments and suppressing recent purchasers are lower-risk uses, because they are based on commercial behaviour, not health.

What happens if I violate the policy?

Google may ask for corrective action, and failure to comply can lead to loss of Customer Match access or account suspension. Serious or repeated violations can lead to immediate suspension without notice.

Want This Handled for Your Brand?

We help peptide, supplement and clinic brands run compliant Google and Meta campaigns that scale without putting the account at risk.

Book a free 30-minute audit →