Consumer Health Data Privacy Policy

Last Modified: August 20, 2026

This Consumer Health Data Privacy Policy (“Consumer Health Data Policy”) describes how Third Ave LLC, doing business as “Third Avenue” (“Third Avenue,” “we,” “us,” or “our”), collects, uses, shares, and protects Consumer Health Data. It supplements our general Privacy Policy and is intended to satisfy the Washington My Health My Data Act, Nevada’s consumer-health-data law, the Connecticut Data Privacy Act provisions applicable to Consumer Health Data Controllers, and other applicable state laws protecting consumer health information outside HIPAA.

Scope and Definitions

“Consumer Health Data” means Personal Information that is linked or reasonably linkable to an individual and that identifies or may be used to infer the individual’s past, present, or future physical or mental health status, treatment, medication use, bodily measurements, reproductive or sexual health, or attempt to seek or receive healthcare services or products. The term includes information treated as consumer health data or an equivalent term under applicable state law.

Third Avenue is a nonclinical administrative and technology company. Third Avenue does not practice medicine, make clinical decisions, prescribe medication, or dispense prescription products.

Healthcare services are provided by independent licensed healthcare providers made available through MDI Medical Group PC and, where applicable, its affiliated professional entities (collectively, the “Medical Group”). Prescription fulfillment is provided by licensed dispensing pharmacies. Clinical information and medical records maintained by the Medical Group, its providers, or dispensing pharmacies may constitute Protected Health Information governed by HIPAA and the applicable entity’s Notice of Privacy Practices.

This Consumer Health Data Policy applies to Consumer Health Data controlled by Third Avenue and does not replace those entities’ HIPAA notices.

Categories of Consumer Health Data We Collect

Depending on how you interact with Third Avenue, we may collect the following categories of Consumer Health Data:

  • Identity, demographic, and contact information: Name, date of birth, age, telephone number, email address, state of residence, shipping address, and other information used to verify identity, determine service availability, or connect you with an appropriately licensed provider.

  • Requested-service and treatment-interest information: The healthcare program, treatment category, product, or service you request or express interest in receiving.

  • Limited health-related information: Measurements, health goals, treatment history, or other health-related details that you voluntarily provide through a pre-screening form, account-support request, or customer-service communication. Clinical-intake information entered directly into the Medical Group’s platform is collected and controlled by the Medical Group rather than Third Avenue.

  • Commercial and fulfillment information linked to healthcare: Order and subscription information, payment and refund status, limited prescription or treatment-request status, pharmacy-fulfillment status, shipment information, delivery tracking, and customer-support history.

  • Device, usage, and location-related information: IP address, device identifiers, approximate location inferred from an IP address, state of residence, and interactions with the Site that may identify or permit an inference that an individual is seeking a healthcare service. We do not intentionally collect precise geolocation for the purpose of identifying visits to healthcare facilities.

  • Inferences: Limited nonclinical inferences reasonably necessary to route a requested service, administer an account, prevent fraud, or provide customer support. Third Avenue does not use these inferences to make clinical eligibility, diagnosis, treatment, prescribing, or dispensing decisions.

Categories of Sources

We may collect Consumer Health Data from:

  • You, including information you submit through the Site, checkout, pre-screening, account, email, or customer-support communications;

  • Your browser or device through cookies, server logs, and similar technologies;

  • The Medical Group and licensed healthcare providers, which may provide limited administrative status information necessary to operate your account or coordinate requested services;

  • Licensed dispensing pharmacies, which may provide limited fulfillment, shipment, delivery, or order-status information;

  • Payment processors, identity-verification providers, shipping carriers, customer-support providers, and other service providers that assist with requested services; and

  • Other sources when you direct us to receive the information or when collection is permitted by law.

Purposes for Collecting and Using Consumer Health Data

We collect and use Consumer Health Data only as reasonably necessary to:

  • Provide or facilitate a healthcare product or service you request;

  • Verify identity, age, state of residence, service availability, and account information;

  • Route you to the Medical Group and an appropriately licensed healthcare provider;

  • Process payments, subscriptions, refunds, and billing inquiries;

  • Facilitate prescription fulfillment, shipping, delivery, and related customer support;

  • Communicate with you about a treatment request, account, order, renewal, or service issue;

  • Maintain the security and integrity of the Site and prevent fraud, abuse, and unauthorized transactions;

  • Comply with legal, regulatory, reporting, recordkeeping, and risk-management obligations; and

  • Establish, exercise, or defend legal claims.

We do not use Consumer Health Data for targeted advertising or to make clinical decisions.

Categories of Consumer Health Data We Share

We may share the categories of Consumer Health Data described above only as reasonably necessary for the purposes described in this Consumer Health Data Policy, including with the following categories of recipients:

  • The Medical Group and licensed healthcare providers: To initiate and facilitate healthcare services you request.

  • Licensed dispensing pharmacies: To facilitate fulfillment of a valid prescription, shipping, delivery, and pharmacy-related customer support.

  • Operational service providers: Providers of secure hosting, communications, customer support, identity verification, fraud prevention, payment processing, order administration, shipping, and security services.

  • Governmental authorities and other legally authorized recipients: When required or permitted by law, legal process, or a valid regulatory request.

  • Transaction counterparties: In connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, or transfer of business assets, subject to applicable restrictions on Consumer Health Data.

Third Avenue does not currently share Consumer Health Data with any corporate affiliate for that affiliate’s independent use. If this practice changes, we will update this Consumer Health Data Policy and obtain consent where required before the new sharing occurs.

Consumer Health Data We Sell

Third Avenue does not sell Consumer Health Data. We will not sell Consumer Health Data without first obtaining the separate written authorization required by applicable law.

Advertising, Cross-Site Collection, and Geofencing

Third Avenue does not disclose Consumer Health Data for targeted advertising and does not authorize third parties to collect Consumer Health Data over time and across nonaffiliated websites or online services for profiling or advertising.

General analytics and advertising technologies may operate on public portions of the Site as described in our general Privacy Policy, but we do not authorize those technologies to receive clinical-intake content, medical records, or Consumer Health Data for advertising.

Third Avenue does not use a geofence around an entity providing in-person healthcare services to identify, track, collect data from, or send notifications or advertisements to individuals seeking or receiving healthcare services.

Consent and Withdrawal of Consent

We collect and share Consumer Health Data to the extent reasonably necessary to provide a product or service that you request. Where applicable law requires consent for a collection, use, or sharing activity that is not necessary to provide the requested product or service, we will request the required affirmative consent before the activity occurs. A consent request will describe the categories of Consumer Health Data involved, the purpose of the collection or sharing, the categories of recipients, and how consent may be withdrawn.

You may withdraw consent to future collection or sharing by contacting us as described below. Withdrawal will not affect processing that occurred before the withdrawal became effective and may prevent us from continuing to provide a requested product or service.

Your Consumer Health Data Rights

Subject to applicable law and exceptions, you may have the right to:

  • Confirm whether we collect, share, or process your Consumer Health Data;

  • Access the Consumer Health Data we maintain about you;

  • Obtain information concerning the categories of Consumer Health Data collected or shared, the categories of sources, and the categories of recipients;

  • Correct inaccurate Consumer Health Data;

  • Withdraw consent from future collection or sharing;

  • Request deletion of Consumer Health Data maintained by Third Avenue and, where required, have the deletion request communicated to processors, contractors, and other recipients;

  • Obtain a portable copy of Consumer Health Data you provided;

  • Appeal our refusal to act on a request; and

  • Exercise these rights without unlawful discrimination or retaliation.

A deletion request may be subject to legally permitted exceptions, including where retention is necessary to complete a transaction you requested, maintain security, prevent fraud, exercise or defend legal claims, or comply with law.

Clinical and dispensing records controlled by the Medical Group, a licensed provider, or a dispensing pharmacy must be requested from that entity and may be subject to separate medical-record retention requirements.

How to Exercise Your Rights

You may submit a request by emailing support@thirdavenue.com with the subject line “Consumer Health Data Request” or by writing to:

Third Ave LLC d/b/a THIRD AVENUE
1925 Lovering Avenue
Wilmington, Delaware 19806

Please describe the right you wish to exercise and the Consumer Health Data to which the request relates. We may take reasonable steps to verify your identity and authority while avoiding the collection of unnecessary additional information. We will respond within the period required by applicable law.

If we deny your request and applicable law provides a right to appeal, you may appeal by emailing support@thirdavenue.com with the subject line “Consumer Health Data Appeal.” Please explain why you believe the decision should be reconsidered. We will respond within the period required by applicable law and provide information concerning how to contact the appropriate state regulator if the appeal is denied and such disclosure is required.

Retention and Deletion

We retain Consumer Health Data only for as long as reasonably necessary to provide the requested service, operate your account, complete payment and fulfillment activities, resolve disputes, maintain security, enforce agreements, and satisfy legal, tax, accounting, and compliance obligations. We delete or deidentify Consumer Health Data when it is no longer reasonably necessary, subject to applicable law and permitted retention exceptions.

When applicable law requires deletion from archived or backup systems, we will use commercially reasonable efforts to complete that deletion in the manner and within the period required by law. Until deletion is completed, affected backup data will be isolated from ordinary processing except as necessary for security, integrity, or legal compliance.

Data Security

We restrict access to Consumer Health Data to personnel, contractors, and processors whose access is reasonably necessary for the purposes described above. We maintain administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of Consumer Health Data, taking into account its volume and sensitivity.

Changes to This Consumer Health Data Policy

We will post material changes to this Consumer Health Data Policy and update the “Last Modified” date. We will not collect, use, or share new categories of Consumer Health Data, or use previously collected Consumer Health Data for materially different purposes, without first providing any notice and obtaining any consent required by applicable law.

Contact Us

Questions or complaints concerning this Consumer Health Data Policy may be submitted to:

Third Ave LLC d/b/a THIRD AVENUE
1925 Lovering Avenue
Wilmington, Delaware 19806
Email: support@thirdavenue.com