Thirty Madison Consumer State Privacy Notice

Consumer State Privacy Notice

Last Revised Date: May 22, 2025

Thirty Madison, Inc., d/b/a Keeps, Nurx, and Cove, and its subsidiaries and affiliates ("Company" or "we"), provide services to you (our “Service”) through our websites and mobile applications (collectively, the “Site”). Your access and use of the Site, including content, products or Services are subject to the Thirty Madison Online Privacy Policy (“Privacy Policy” or “Policy”). This Notice supplements the information contained in the Thirty Madison Online Privacy Policy and applies to the extent required by applicable state law with respect to Personal Data as defined by applicable law. For example, the Consumer State Privacy Notice does not apply to protected health information (PHI) subject to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or to certain data that we process as HIPAA-covered entities and business associates. Please refer to the HIPAA Notice of Privacy Practices which governs this data.

If you are a California resident the California Consumer Privacy Act (“CCPA”) requires us to provide you with additional information about your rights and how we process your personal information. Please click here to see our privacy information for California Residents.

The Privacy Policy describes how Thirty Madison collects, creates, uses, and shares information about you through the Services where the Privacy Policy is posted, including details about the categories of Personal Data processed, the purposes for processing, the categories of third parties with whom Personal Data may be shared and the categories of Personal Data shared, and the process by which we will notify you of material changes. This Notice supplements the Privacy Policy by explaining the additional rights provided to residents under applicable state law and how to exercise those rights, subject to exceptions.

YOUR CONSUMER RIGHTS

THE RIGHT OF ACCESS. Upon verifying your identity, you have the right to confirm whether we are processing Personal Data and to access or obtain a copy of your Personal Data. This right does not require us to disclose any trade secrets.

THE RIGHT TO DATA PORTABILITY. When exercising the Right of Access, you have the right to obtain your Personal Data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance.

THE RIGHT OF CORRECTION. You have the right to request that we correct inaccuracies in the Personal Data we collected and maintain about you, taking into account the nature of the data and the purposes for which it is processed. We may require documentation to verify the accuracy of requested corrections and may deny requests for certain reasons under state law. If denied, we will provide the reasons in our response.

THE RIGHT TO REQUEST DELETION. You have the right to request that we delete the Personal Data we have concerning you. Upon verifying your identity, we will delete (and direct our service providers to delete) your Personal Data, unless an exception applies. We may also have a reason under state laws to deny your deletion request, either in whole or in part. If so, we will explain the reason in our response.

THE RIGHT TO OPT-OUT. To the extent applicable, you have the right to opt-out of our processing of your Personal Data for the purposes of: (i) targeted advertising; (ii) the sale of your Personal Data; or (iii) profiling in furtherance of decisions that produce legal effects or similarly significant effects concerning consumers. Please note, however, that we do not process Personal Data for purposes of profiling as defined by most state laws.

THE RIGHT NOT TO RECEIVE DISCRIMINATORY TREATMENT. We will not discriminate against you, in violation of applicable state law, for exercising any of your consumer rights.

HOW TO EXERCISE YOUR RIGHTS.

To exercise your rights, you or your authorized agent may contact us at:

  • Cove: Phone (877) 456-2683; Email care@withcove.com
  • Keeps: Phone (833) 745-3377; Email help@keeps.com
  • Nurx: Phone (800) 321-NURX; Email nurx-support@thirtymadison.com

RESPONSE TIMING AND FORMAT

If we can verify your identity, we will try our best to respond to your request within forty-five (45) days of receipt. If we require more time (up to forty-five (45) additional days), we will inform you of the reason and extension period in writing.

We will provide information to you free of charge twice during any twelve (12)-month period. However, we reserve the right to charge a reasonable fee to process or respond to a third or subsequent identical request within the same twelve (12)-month period or if we determine that such request is excessive, repetitive, or manifestly unfounded. If we determine that your request warrants a fee, we will inform you of the reason for that decision and provide you with a cost estimate before completing your request.

RIGHT TO APPEAL

If we are unable to comply with all or a portion of your request, we will explain the reasons we cannot comply. We will inform you of any action taken or not taken in response to the request and explain the reasons for our decision within forty-five (45) days of receiving the request. You may appeal our decision by resubmitting your request and we will respond no later than sixty (60) days from receiving your appeal and inform you of any action taken or not taken in response to the appeal. If your appeal is denied, you may lodge a complaint with your state’s Attorney General.

RIGHT TO OPT-OUT OF SELLING PERSONAL DATA AND TARGETED ADVERTISING

We do not monetize your Personal Data. However, we may disclose certain types of Personal Data for non-monetary consideration, as set forth in the Thirty Madison Privacy Policy, which is treated as a “sale” of Personal Data under certain state laws. When you visit our websites, we provide you with a cookie banner and you have the right to opt-out of any “sale” of Personal Data. You also have the right to opt-out of the processing of your Personal Data for targeted advertising.

You may opt-out of the “sale” of your Personal Data and/or targeted advertising through:

  • The Manage Preferences banner;
  • Clicking Your Privacy Choices on the bottom of the Thirty Madison homepage, and then adjusting cookie settings under Storage Preferences by clicking the toggle next to Do Not Sell or Share My Personal Data (so the toggle is on) or Targeted Advertising (so the toggle is off); or
  • A Universal Opt-Out Mechanism. We recognize and honor universal opt-out mechanisms (UOOMs) to opt-out of the sale of Personal Data and targeted advertising.

QUESTIONS AND HOW TO CONTACT US

If you have any questions, concerns, or complaints regarding this Consumer Notice, please contact us at:

  • Cove: Phone (877) 456-2683; Email care@withcove.com
  • Keeps: Phone (833) 745-3377; Email help@keeps.com
  • Nurx: Phone (800) 321-NURX; Email nurx-support@thirtymadison.com

Or write to us at: Thirty Madison, Inc. 82 Nassau St #61392 New York, NY 10038