Subtle Look logo

Our privacy policy


Last updated 28 March 2022.

This privacy policy sets out how (the website) and your health care professionals, Dr Tasanee Braithwaite or Professor Mariya Moosajee, trading under Subtle Look, comply with the General Data Protection Regulation 2018 (GDPR). You can access this privacy statement from the bottom of every page on our website by clicking the appropriate link. Any changes to this policy will be updated immediately and visible on the footer of each page.  ​

We are committed to protecting your privacy and ensuring that any information you choose to provide us during your visits to the website is collected and used in full compliance with the General Data Protection Regulation. All information is strictly confidential, and used only for the purpose described at the time of the submission.

This privacy statement discloses the types of information we gather, how we use it and how to correct or change it.

We endeavour to ensure that all data is: ​

  • Lawfully processed, in accordance with the subject’s rights
  • Securely held
  • Accurate at all times
  • Relevant and comprehensive without being excessive
  • Processed for limited purposes
  • Not kept longer than necessary
  • Not transferred to non-EEA countries without sufficient protection

What kind of data do we collect?

​ We only collect data that is relevant to the service that Dr Tasanee Braithwaite or Professor Mariya Moosajee provide to you.  This data may be collected via our website (, via email, over the telephone, via a video link, or face to face in our clinics and may include some or all of the following details: Your Name, Date of Birth, Address, Telephone number, Email address and some medical information.  We may, if you are booking a treatment, require your payment details. All data provided to Dr Tasanee Braithwaite or Professor Mariya Moosajee, either through our website, by telephone, by email, or in person in clinic is strictly confidential and is disclosed only at your discretion.

When you access our website, our web hosting company, Register365, may also collect information on your IP address for the purposes of security and in order to make it possible to deliver the service. In this case, our lawful basis for collecting this data is legitimate interests.

In order to deliver some of the features on our website, we check the “referrer” to our website. This “referrer” contains details of the website that led to you reaching this website. For example, if you clicked a link at “” to reach our website, this would be the referrer. This data processing is carried out on your device.

How do we use this data?

​ Any personal information provided by you is strictly confidential and is used only for the purposes of your relationship with your health care provider, Dr Tasanee Braithwaite or Professor Mariya Moosajee.  We will only keep this information for as long as is necessary for the performance of the original legitimate purpose for collecting the information.

​ We are required by law to retain certain personal data for a specific time period. We aim to comply with statutory and regulatory record keeping rules relating to patients. We ought to keep patients records for 7 years after the appointment date.

​ To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.    

Disclosure of Information

​ We may share your personal information with third parties required for the provision of our services. We may share such information with the following third parties, including but not limited to: ​

  • Google for contact and customer management purposes;
  • Google Workspace/G Suite for storage purposes;
  • SumUp for payment and invoicing purposes;
  • Google Analytics, Instagram, Twitter and Google+ for marketing and insight collection purposes

Where access to your data to supply products and services to you include: ​

  • Church Pharmacy, HealthXchange and Wigmore Medical
  • Analytics and search engine providers that assist us in the improvement and optimisation of the Site. ​

We may disclose your personal information to third parties: ​

  • If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Website Terms of Use and other agreements; or to protect the rights, property, or safety of the Company, our customers, or others.
  • Where a medical intervention is required as a direct result of having a service provided by us, then information about the treatment or products may, if required, be shared confidentially to the Medical Professional purely for the purposes of any medical treatment required. ​

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. ​

Where do we store your Data?

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the fulfilment of your enquiries, the processing of your payment details and/or the provision of support services.  By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated as securely as it would be within the EEA and under the GDPR. Such steps may include our entering into contracts with any third parties we engage and the use of EU-approved Model Contractual Arrangements. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We will notify you and any applicable regulator of a breach where we are legally required to do so. ​

All information you provide to us is stored on our supplier systems and we have put in place appropriate physical, electronic, and management procedures to safeguard and secure the data we collect. ​

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to the Site; any transmission is at your own risk.  Once we have received your information, we will use our reasonable endeavours to use procedures and security features to try to prevent unauthorised access including but not limited to the use of antivirus softwares, firewalls, password protection and encryption methods. ​

Dr Braithwaite and Professor Moosajee DO NOT sell, trade, loan or pass any personal information to any other party unless required to do so by law or any necessary medical requirements.  Information required by law or for medical reasons will have been consented by the client during their initial contact with these health care professionals, either via email, by telephone or videoconsultation, or face to face.  Clients refusing to offer legal or medical consent will not be permitted to engage with the health care professionals trading under Subtle Look in any capacity.   

Should you have any queries regarding the capture, storage and use of personal information by please contact us at the following address: ​ ​

Controlling your personal information

​ When you provide information to our health care providers, you certify that all such information is accurate and may be used as we see fit to improve the service we provide (in accordance with our Privacy Policy). You certify that you have read, understood, and consented in full to our Privacy Policy and Terms.

If any information about you, stored or held by Dr Braithwaite or Professor Moosajee is believed to be incorrect or changes, and which may affect the service we provide to you, then we would request you contact us to ensure that the records we hold are relevant and accurate.  You can contact us by email: 

  • Dr Tasanee Braithwaite
  • Professor Mariya Moosajee

Or in writing to: Dr Tas Braithwaite, Subtle Look, 22a Ravensdon Street, London, SE11 4AR.

You have the right to request a copy of any personal information we hold about you. We charge an administration fee of £10 for this service, which will also allow you to correct any inaccuracies present in said information. Please contact us for more details as above.

Your Rights

​ ​ We will get your express opt-in consent before we share your personal data with any third parties for marketing purposes. You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by contacting us at requesting your right to ‘opt-out’ or by unsubscribing using the links contained in any marketing emails. ​

The Site may, from time to time, contain links to and from the websites of our partner networks and affiliates or to websites shared by other users. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies.  Please check these policies before you submit any personal data to these websites.

UNDER THE GDPR, you have the right to:

​ REQUEST ACCESS deletion or correction to/of the information that we hold about you.

​ BE INFORMED of what data we hold and the purpose for processing the data as a whole or in parts and ask for a copy of that data.

​ ERASURE request to be forgotten (this is not an absolute right) by ourselves and our affiliates

​ RECTIFICATION have any information that we hold about you that is incorrect or incomplete be rectified by ourselves and affiliates.

​ RESTRICT PROCESSING of the information we hold about you (so that inaccuracies may be corrected etc).

​ OBJECT to the processing of your data.

​ DATA PORTABILITY you can obtain and reuse the information that we hold about you.

​ CHALLENGE any data we use for the purposes of automated decision-making and profiling, in certain circumstances.

​ COMPLAIN to a supervisory authority.

​​ You may revoke your consent for us to use your personal data as described in this privacy policy at any time by emailing us individually at or and we will delete your data from our systems. To enforce any of the above rights, please contact us using the details set out below.

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email. You will be deemed to have accepted the terms of the updated privacy policy on your first use of the Site following the alterations. Please check back frequently to see any updates or changes to our privacy policy.