Privacy policy

Last Modified: August 21, 2026

Third Ave LLC, doing business as “Third Avenue” (“Third Avenue,” “we,” “us,” or “our”), values its customers, their information, their privacy, and their trust. This Privacy Policy (“Policy”) applies to Personal Information collected online from users of the Third Avenue website, thirdavenue.com (the “Site”), and explains how we collect, use, disclose, and protect that information. This Policy applies to our collection, use, processing, storage, and transfer of information through the Site. Unless otherwise noted, all references to the Site include email correspondence, our online forms, and other electronic messages between you and the Site.

Throughout this Policy, “Personal Information” means information that identifies, describes, is associated with, or could reasonably be linked to an individual or household, such as a name, date of birth, postal address, email address, telephone number, driver’s license number, Social Security number or other government-issued identification number, payment information, online identifiers, or other unique identifiers. Personal Information may include “Consumer Health Data” or similar health-related information protected by applicable state law.

“Protected Health Information” or “PHI” has the meaning assigned under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”). Information is not necessarily PHI merely because it relates to health or healthcare; HIPAA generally applies to individually identifiable health information maintained or transmitted by a HIPAA-covered entity or its business associate. Additional information concerning clinical records, HIPAA, and Consumer Health Data appears below.

Personal Information does not include anonymous or aggregated data that can no longer reasonably be used to identify a specific person, even if combined with other data. We may also collect information related to businesses or other entities rather than individuals (“Business Information”), such as a title, employer’s name, work email, work phone number, and work address. We do not consider Business Information to be Personal Information except where applicable law provides otherwise.

The products and services offered on this Site are intended for users who reside in the United States. If you visit our Site from a country outside the United States, please note that the data protection laws where you reside may differ from those in the United States. Information we collect from you in connection with your use of this Site will be processed in accordance with the federal and state laws of the United States.

Information We Collect and How We Use It

We collect information about you in several ways: (1) directly from you; (2) indirectly from you through your use of the Site; and (3) from third parties.

Information Collected Directly From You

When you contact us through our Site or online forms, we collect certain Personal Information so that we may verify your identity, respond to your inquiry, or assist you in purchasing products or accessing requested services. We collect information when you visit the Site, communicate with us, register with us, place an order, fill out a form, or use other features or resources we make available. We may collect your first and last name, email address, phone number, date of birth, shipping address, and the contents of any messages you send us. We may also collect limited health-related or treatment-interest information that you choose to provide through pre-screening, account-support, or customer-service interactions.

The information we collect and its associated purpose is summarized below:

Activity	Information Collected
Access the Site	Name, email address, phone number, physical address
Place an order	Name, email address, phone number, physical address, payment card information
Register with the Site	Name, email address, physical address
Sign up to receive communications	Contents of the form
Communicate through the Site	Name, email address, contents of your inquiry to us

The Personal Information we collect from you is used to provide you with our products and services in a timely manner.

Clinical intake information, medical history, diagnoses, treatment decisions, and medical records are collected and maintained by the independent medical group and licensed healthcare providers described in the “Handling of Health Information and Protected Health Information” section below. When you enter information directly into a clinical intake or patient portal operated for those providers, that information is collected under the applicable medical group’s privacy practices and Notice of Privacy Practices, not solely under this Policy.

Information Collected Indirectly From You

When you visit our Site, we may collect information about your visit and maintain it in our web server logs. The servers automatically capture and store this information electronically. Examples include: Internet Protocol (IP) address; browser type and language; Internet Service Provider (ISP); referring and exit sites and applications; pages viewed while on the Site; operating system; date/time stamp of activity; clickstream data; whether you are a first-time or returning user; links you clicked on while on the Site; and your navigation path through the Site. We use this information in a de-identified and aggregated fashion to help us administer the Site, analyze its usage, protect the Site and its content from inappropriate use, and improve your experience.

In some parts of our Site and in email messages, you will find a “click-through URL” linked to content on our Site. We track this click-through data to help us determine interest in particular topics and measure the effectiveness of our communications. If you prefer not to be tracked this way, you should not click such links in our email messages.

Cookies

We use technologies such as “cookies” to remember certain information about you, remember your preferences, and recognize you when you return to the Site. Cookies also help us compile aggregate data about Site traffic and interaction so we can improve and protect the Site. A cookie is a text file stored on your device; cookies cannot read information on your hard drive, run programs, or deliver viruses.

Most browsers are set to accept cookies automatically. You can set your browser to decline all cookies or to prompt you each time a cookie is offered. If you decline cookies, you may find that you cannot access all of our Site’s features. During your browsing session, we use “session” cookies to store information and monitor Site function; these are deleted when the browsing session ends. Our Site is hosted on Shopify, which sets the following cookies:

Cookie	Duration	Purpose
_ab	1 year	Used to control when the admin bar is shown on the storefront.
_abv	1 year	Persists the collapsed state of the admin bar.
_checkout_queue_token	1 year	Used when there is a queue during the checkout process.
_cmp_a	1 day	Used for managing customer privacy settings.
_identity_session	2 years	Contains the identity session identifier of the user.
_master_udr	Session	Permanent device identifier.
_pay_session	Session	The session cookie for Shopify Pay.
_secure_account_session_id	30 days	Used to track a customer’s session for new customer accounts.
_session_id	2 years	Used for providing reporting and analytics.
_shopify_country	30 minutes	Used to set pricing currency/country from GeoIP and avoid repeat lookups.
_shopify_essential	1 year	Contains essential information for store functionality such as session, checkout, and anti-tampering data.
_storefront_u	1 minute	Used to facilitate updating customer account information.
_tracking_consent	1 year	Stores a user’s preferences if privacy rules are set for the visitor’s region.
cart	2 weeks	Contains information related to the user’s cart.
cart_currency	2 weeks	Initializes a new empty cart with the same currency after checkout.
cart_sig	2 weeks	A hash of the contents of a cart used to verify its integrity.
checkout	21 days	Used in connection with checkout.
checkout_one_remember_me	1 year	Used to prefill checkout with details from a previous checkout.
device_fp_id / device_id	Session	Device identifiers used to help prevent fraud.
discount_code	Session	Stores a discount code for the next checkout.

We also use log files when you visit our Site. Log files track IP addresses, browser type, ISP identity, referring/exit pages, platform type, date/time stamp, and number of clicks. We use this information in our legitimate interest in administering the Site, preventing fraud, tracking Site navigation in the aggregate, and gathering broad demographic information for aggregate use.

Pixel Tracking

In addition to cookies, the Site may employ “pixel tracking,” a common process that may be used in connection with advertisements on other sites. Pixel tracking uses pixel tags that are not visible to the user and consist of a few lines of computer code. Pixel tags measure the effectiveness of advertisements and compile aggregate and specific usage statistics. We may use pixel data for marketing, research, and other activities, subject to applicable law and your privacy choices. We do not authorize pixels to collect information entered into clinical-intake forms, medical records, or Consumer Health Data, and we do not use Consumer Health Data for targeted advertising.

Site Analytics

We use third-party analytics software from providers such as Google Analytics to gather information that helps us understand how visitors use our Site, detect and defend against fraud and other security risks, and present general content and advertising of interest. These providers may collect information associated with the Site, such as information about your browser, network, and device, pages visited before and during your visit, and IP address. We do not authorize analytics providers to receive clinical-intake content, medical records, or Consumer Health Data for advertising. You may opt out of certain automated collection through our available cookie controls, legally recognized browser-based opt-out preference signals, or the relevant third party’s opt-out methods.

Information We Collect From Third Parties

We may collect information that others provide about you when you use the Site, or obtain information from other sources and combine it with information we collect through the Site.

Payment Processors. If you make a purchase through the Site, our payment processor, Stripe, may send us information such as your name, address, and contact information so we may complete your order. We do not receive your full payment card information.
Third-Party Services. If you link, connect, or log in to your account with a third-party service, such as Facebook, Google, or Instagram, that service may send us registration and profile information. This information varies and is controlled by that service or as authorized by you through your privacy settings there.
Other Sources. To the extent permitted by law, we may receive additional information about you, such as demographic data or fraud-detection information, from third-party service providers and partners, and combine it with information we have about you. For example, we may receive fraud warnings from identity-verification services or information from services used for fulfillment, email management, authentication, form processing, usage tracking, and database hosting.

Third-Party Use of Cookies and Other Tracking Technologies

Some content or applications, including advertisements, on the Site are served by third parties, including advertisers, ad networks and servers, content providers, and application providers. First-party or third-party cookies may be used alone or with web beacons or other tracking technologies to collect information about you when you use our Site. The information collected may be associated with your Personal Information or may be used to collect information about your online activities over time and across different sites.

Third parties may use this information to provide you with interest-based advertising or other targeted content, subject to applicable law and your privacy choices. We do not authorize advertising or analytics providers to receive clinical-intake content, medical records, or Consumer Health Data for targeted advertising. We also honor legally recognized browser-based opt-out preference signals as described below. If you have questions about an advertisement or other targeted content, you should contact the responsible provider directly.

Children’s Information

Our Site is not directed at children. We do not knowingly collect Personal Information from anyone under the age of 18. If you are a parent or guardian and believe your child has provided us with Personal Information without your consent, please contact us using the information in the “Contact and Complaints” section below, and we will take steps to remove such information from our systems.

How We Use Personal and Health Information

We use the information we collect about you or that you provide to us, including Personal Information, for one or more of the following purposes:

To present our Site and its contents to you;
To provide you with information and respond to your questions about services you request and about new services, discounts, special promotions, upcoming events, features, or offers we believe will interest you;
To provide you with customer support;
To deliver marketing communications and other materials that we believe may be of interest to you;
To improve and further develop the products and services we offer;
To protect and maintain the security and integrity of our Site and its infrastructure;
To authenticate information you provide to us;
To protect our rights and property and the rights and property of others;
To detect, prevent, and respond to fraud, intellectual property infringement, violations of our Terms and Conditions, violations of law, and any misuse of the Site or our products or services;
To comply with our legal obligations and to pursue legal remedies, limit our damages, and comply with judicial proceedings, court orders, or lawful requests from governmental authorities;
To process transaction payments, including product and service fees, refunds, and reimbursements, though we do not receive your full payment card number;
To provide notices about your account, including expiration and renewal notices, and to notify you about changes to our Site, policies, terms, or services;
To allow you to participate in interactive features and to provide access to restricted parts of our Site, such as areas accessible if you have a user account;
To notify you of data privacy incidents or provide legally required information; and
In any other way we describe and for which we obtain your consent when you provide the information.

We only use your Personal Information for the purposes for which it was given and to further our legitimate interests, such as providing information about our organization and services and communicating with Site visitors. We may use your information to send you requested information, personalize content, better understand user data and behavior, and detect, investigate, and prevent activities that may violate our policies or the law.

Our employees and agents may access your Personal Information to perform their jobs and address your needs on a need-to-know basis and subject to obligations to protect that information. We also provide Stripe, the third-party vendor that operates our payment system, with the Personal Information and transaction information reasonably necessary to process purchases, refunds, and authorized recurring charges. We do not intentionally provide Stripe with clinical-intake content or medical records.

If you do not wish to receive marketing communications, you may opt out or unsubscribe as described in the “Your Choices” and “Contact and Complaints” sections below.

Sensitive Information We Collect

Sensitive Personal Information	Method of Collection
Information about consumer health	Online forms or questions
Government-issued identification	When verifying identity

Disclosure of Your Information

We do not sell Personal Information for money, and we do not sell Consumer Health Data or disclose Consumer Health Data for targeted advertising. We may disclose certain identifiers, device information, and internet or network activity to analytics and advertising providers as described in this Policy. Depending on applicable state law, some of those disclosures may be considered a “sale,” “sharing,” or processing for “targeted advertising,” even when no money is exchanged. You may opt out of those activities as described in the “State Privacy Rights” section below.

We may disclose Personal Information:

To employees, contractors, agents, and vendors who may use it on our behalf or in connection with their relationship with us;
To our affiliates, service providers, and the third parties identified in this Policy, such as payment processors and analytics and advertising providers, for the purposes described herein;
To MDI Medical Group PC and, where applicable, its affiliated professional entities and licensed healthcare providers (collectively, the “Medical Group”) as necessary to facilitate healthcare services that you request;
To licensed dispensing pharmacies as necessary to fulfill a valid prescription, coordinate delivery, address fulfillment questions, or comply with law; and
To others, including law enforcement, if we believe release is reasonably necessary to comply with law or legal process; enforce our Terms and Conditions; protect our operations, members, or users; detect, prevent, or address fraud, security, or technical issues; protect the rights, property, or safety of others; or facilitate a transfer of our assets.

In the event of an insolvency, bankruptcy, or receivership, your Personal Information may be transferred as a business asset, subject to applicable restrictions on Consumer Health Data.

We may share aggregate, non-individual information that cannot identify a person with third parties for lawful purposes. We will disclose Personal Information only as described in this Policy, with your direction or consent, or as otherwise permitted or required by law.

Your Choices; Access and Consent

If you believe that the Personal Information we have collected about you is incomplete, inaccurate, or out of date, or if you would like to review, request changes to, or request deletion of that information, please use the contact information in the “Contact and Complaints” section below.

If you do not consent, or want to withdraw your consent, to our collection, use, or disclosure of Personal Information as described in this Policy, please contact us and identify the information at issue and the activity you wish to stop. Denying or withdrawing consent may prevent us from providing you with some or all of the products, services, or information you request.

You may opt out of receiving marketing-related emails, targeted advertising messages, or promotional offers from Third Avenue by clicking the “unsubscribe” link at the bottom of any marketing email or by emailing us at support@thirdavenue.com. If you opt out of marketing emails or text messages, we may still send you communications about your account and other matters. You can also opt out of receiving targeted ads from members of the Network Advertising Initiative through the NAI’s website.

State Privacy Rights

Depending on your state of residence and whether the applicable law applies to Third Avenue or the relevant processing activity, you may have one or more of the following rights regarding your Personal Information:

To confirm whether we process your Personal Information and to access or obtain a copy of that information;
To request correction of inaccurate Personal Information;
To request deletion of Personal Information, subject to applicable exceptions;
To obtain a portable copy of Personal Information you previously provided;
To request information concerning the categories or specific pieces of Personal Information collected, the categories of sources, the purposes for collection or use, and the categories or identities of third parties to which information was disclosed;
To opt out of the sale or sharing of Personal Information, targeted advertising, or certain profiling in furtherance of decisions producing legal or similarly significant effects;
To limit certain uses or disclosures of sensitive Personal Information where applicable;
To withdraw consent to future processing where processing is based on your consent; and
To exercise your rights without unlawful discrimination or retaliation.

You or, where permitted, your authorized agent may submit a privacy request by emailing support@thirdavenue.com with the subject line “Privacy Request” or by using the mailing address in the “Contact and Complaints” section. Please describe the right you wish to exercise and the information to which your request relates. We may take reasonable steps to verify your identity and authority before fulfilling a request. We will respond within the period required by applicable law.

If we deny a request and your state provides a right to appeal, you may appeal by emailing support@thirdavenue.com with the subject line “Privacy Appeal” and explaining why you believe the decision should be reconsidered. We will respond to an appeal within the period required by applicable law and, if the appeal is denied, provide information concerning how to contact the appropriate state regulator where required.

Where required by applicable law, we recognize Global Privacy Control and other legally recognized universal opt-out preference signals as requests to opt out of the sale or sharing of Personal Information and its use for targeted advertising for the browser and device transmitting the signal. You may also submit an opt-out request using the contact methods above. We will not require you to create an account or verify your identity beyond what applicable law permits for an opt-out request.

For California residents, the categories of Personal Information collected during the preceding twelve months include identifiers, customer-record information, characteristics you choose to provide, commercial information, internet or other electronic-network activity, approximate geolocation, sensitive Personal Information described in this Policy, and inferences concerning preferences or interests. We collect these categories from you, your device and browser, service providers, the Medical Group, licensed dispensing pharmacies, and the other sources described above. We use and disclose them for the business and commercial purposes and to the categories of recipients described in this Policy. We do not use or disclose sensitive Personal Information for purposes other than those reasonably necessary to provide requested services, maintain security and integrity, verify identity, process transactions, or as otherwise permitted by law.

Residents of Washington, Nevada, Connecticut, and other states with laws specifically protecting health-related information may have additional rights regarding Consumer Health Data. Please review our separate Consumer Health Data Privacy Policy, available through the Site.

Security of Your Information

We implement a variety of security measures to help protect your Personal Information from unauthorized access, disclosure, alteration, and destruction, including holding your information on a secured network with limited access.

Although we use commercially reasonable efforts to ensure the security and confidentiality of your Personal Information, no data transmission can be guaranteed to be 100% secure. We therefore cannot guarantee or warrant the security of any information you transmit to us, and you do so at your own risk. You should only access our Site within a secure environment, and you remain solely responsible for the security of your device. To safeguard information transmitted to us, we use encryption such as the Secure Sockets Layer protocol.

Links to Other Sites

Our Site may contain links to, or advertisements about, non-Third Avenue sites, and other sites may reference, advertise, or link to our Site. These third-party sites may have privacy policies and terms of use that differ from ours. We are not responsible for the availability, accuracy, content, products, services, actions, or policies of such third parties. Please carefully review their policies.

Retention and Accuracy of Information

We do our best to ensure that the information we hold and use is accurate, and we rely on the individuals we do business with to disclose relevant information and inform us of changes.

We keep your information only for as long as reasonably necessary to fulfill the purposes outlined in this Policy, meet operational requirements, resolve disputes, enforce agreements, or satisfy legal, tax, accounting, and compliance obligations. We apply additional minimization and deletion requirements to Consumer Health Data where required by state law.

When we have no legitimate business need to process Personal Information, we will delete or anonymize it or, if immediate deletion is not reasonably possible because the information is stored in backup archives, securely isolate it from further processing until deletion is possible.

The retention criteria applied to the principal categories of Personal Information include:

Account and contact information: For the duration of the customer relationship and thereafter as reasonably necessary to administer the account, respond to requests, resolve disputes, and comply with law.
Transaction, subscription, and payment records: For the period necessary to complete transactions and satisfy tax, accounting, fraud-prevention, chargeback, audit, and legal obligations.
Customer-service communications: For the period necessary to resolve the request, maintain service history, improve support, and establish or defend legal claims.
Identity-verification information: Only for as long as reasonably necessary to complete verification, prevent fraud, and satisfy applicable legal obligations.
Cookie, device, and Site-usage information: For the periods described in this Policy, reflected in the applicable cookie or analytics setting, or otherwise reasonably necessary for security, analytics, and lawful marketing.
Consumer Health Data: According to the additional criteria and deletion requirements stated in our separate Consumer Health Data Privacy Policy.

Changes to This Policy

From time to time, we may change this Policy and will notify you of material changes by posting the changed or modified Policy on our Site and updating the “Last Modified” date. Where required by applicable law, we will provide additional notice and obtain consent before collecting, using, or sharing new categories of sensitive Personal Information or Consumer Health Data, or before using such information for materially different purposes. Changes will be effective upon posting unless otherwise specified or applicable law requires a different effective date.

A Note to Parents Regarding the Children’s Online Privacy Protection Act

Our Site is a general-audience site that is neither designed nor intended to collect Personal Information from children. Third Avenue cares about the safety and privacy of children online and complies with the Children’s Online Privacy Protection Act of 1998.

Children under the age of 13 should not send us any Personal Information, including their email address. If you are under the age of 13 and would like to contact us, please ask your parent or legal guardian to contact us on your behalf. If we become aware that we have received Personal Information from a person under 13, we will promptly attempt to obtain parental consent or delete the information from our servers.

To notify us of our potential receipt of information from a child under 13, please email us at support@thirdavenue.com.

Handling of Health Information and Protected Health Information (PHI)

Third Avenue is a nonclinical administrative and technology company. Third Avenue is not a healthcare provider or pharmacy, does not practice medicine, and does not make decisions concerning diagnosis, treatment, prescribing, medical necessity, or dispensing.

Healthcare services accessed through the Site are provided by independent licensed healthcare providers made available through the Medical Group. Prescription fulfillment is provided by licensed dispensing pharmacies. The Medical Group, individual providers, and dispensing pharmacies maintain their own records and privacy practices.

When you proceed to clinical intake, you may be directed to a secure clinical platform operated for the Medical Group. The Medical Group and its licensed providers collect and maintain clinical-intake information, medical histories, diagnoses, treatment decisions, prescriptions, and other medical records. Those records are governed by the Medical Group’s or applicable provider’s Notice of Privacy Practices. Dispensing pharmacies separately maintain prescription and dispensing records under their own legal and privacy obligations.

Third Avenue independently collects and maintains nonclinical commercial and administrative information, such as account information, payment and subscription information, customer-service records, marketing attribution, website analytics, requested program information, and limited order, prescription-status, fulfillment, and delivery information needed to administer the services. Third Avenue may also receive limited health-related information that you voluntarily include in pre-screening or customer-support communications.

Health-related information maintained independently by Third Avenue is not automatically PHI merely because it concerns a healthcare service. It may, however, constitute Consumer Health Data or sensitive Personal Information protected by applicable state law.

Under Third Avenue’s current relationship with MDI Medical Group PC, Third Avenue does not maintain the Medical Group’s designated medical-record set and is not acting as the Medical Group’s business associate with respect to Third Avenue’s independently collected commercial and administrative information. Information you direct us to provide to the Medical Group may be transmitted as necessary to initiate healthcare services you request. Third Avenue may receive limited administrative status or fulfillment information necessary to operate your account, process payment, provide customer support, and coordinate requested services.

Third Avenue does not sell PHI or Consumer Health Data and does not use or disclose PHI or Consumer Health Data for targeted advertising. We maintain administrative, technical, and physical safeguards appropriate to the nature and sensitivity of the Personal Information under our control.

Patient Rights Under HIPAA

With respect to PHI maintained by the Medical Group, a licensed provider, or a dispensing pharmacy, HIPAA may provide you with rights that include:

Right to Access: You may request copies of your PHI.
Right to Request Amendments: You may ask the HIPAA-covered entity to correct PHI you believe is incorrect.
Right to an Accounting of Disclosures: You may request an accounting of certain disclosures of your PHI.
Right to Request Restrictions: You may ask the HIPAA-covered entity to limit certain uses or disclosures of your PHI.
Right to Confidential Communications: You may request communications through a specific method or at a specific location.

Requests concerning a clinical or dispensing record should be submitted directly to the Medical Group, provider, or pharmacy identified in the applicable Notice of Privacy Practices. If Third Avenue receives a request that relates to a record controlled by one of those entities, we may assist in routing the request to the appropriate entity but cannot independently amend or delete that entity’s medical or dispensing record.

Breach Notification

Third Avenue will provide notification of a breach affecting Personal Information under its control as required by applicable federal and state law. The Medical Group, licensed providers, and dispensing pharmacies are separately responsible for providing notices required under HIPAA or other law for PHI and records under their respective control.

Service Providers and HIPAA-Regulated Entities

Third Avenue works with service providers that assist with functions such as hosting, security, communications, identity verification, payment processing, analytics, customer support, and fulfillment coordination. We require service providers to protect Personal Information in a manner appropriate to the services they perform and the information they process.

Not every service provider, healthcare provider, or pharmacy is a “business associate” under HIPAA. Where HIPAA requires a covered entity or business associate to enter into a Business Associate Agreement for a particular service involving PHI, the responsible parties must enter into the required agreement. Nothing in this Policy is intended to characterize every independent provider, pharmacy, contractor, or vendor as a business associate of Third Avenue or the Medical Group.

Contact and Complaints

For any questions or concerns regarding this Privacy Policy or our information and data collection and use practices, please contact:

Third Ave LLC d/b/a THIRD AVENUE
1925 Lovering Avenue
Wilmington, Delaware 19806
Email: support@thirdavenue.com

You may also request, at any time, that we review, change, or delete your Personal Information or your preferences to receive emails, products, or services from us. To do so, please send us a written request as set forth above.

If your concern relates to Third Avenue’s collection or use of Personal Information, you may submit a complaint using the contact information above. If you believe your HIPAA rights concerning a clinical or dispensing record have been violated, you should contact the Medical Group, licensed provider, or dispensing pharmacy identified in the applicable Notice of Privacy Practices. You may also file a complaint with the U.S. Department of Health and Human Services.

We will not retaliate against you for exercising an applicable privacy right or submitting a complaint. Information about submitting a HIPAA complaint is available at https://www.hhs.gov/hipaa.