VIRGINIA RESIDENT PRIVACY NOTICE

Last Revised Date: March 13, 2024

This Virginia Resident Privacy Notice (“Virginia Notice”) provided by Thirty Madison, Inc., d/b/a Keeps, Cove, and Facet, and its subsidiaries and affiliates ("Company" or "We") supplements the information contained in the Thirty Madison Online Privacy Policy (“Privacy Policy” or “Policy”) and the State Privacy Law Addendum (“Addendum”) and applies solely to individual residents of the State of Virginia ("consumers" or "you").

For Cove and Facet Patients: The Virginia Consumer Data Protection Act, Va. Code §§ 59.1-575 through 59.1-584, as may be amended from time to time (the “VCDPA”) protects consumer health data that is not protected under HIPAA, such as consumer health data collected by your fitness trackers. For Cove and Facet patients, we protect your health information under HIPAA.
Please see our Notice of Privacy Practices for information about how we protect your health information, and the Thirty Madison Online Privacy Policy for information about how we protect other personal information about you.

For Keeps Patients: If you are a Virginia resident, the VCDPA, provides you with certain rights with respect to your Personal Data, as that term is defined under and subject to the VCDPA. This Virginia Notice describes your VCDPA rights with respect to your Personal Data and explains how to exercise those rights, subject to VCDPA exceptions. Any terms defined in the VCDPA have the same meaning when used in this Virginia Policy.

The Right to Confirm/Access/Data Portability You have the right to confirm whether we are using or disclosing your Personal Data and to access and obtain a copy of the Personal Data we have collected about you, upon verification of your identity. You have the right to obtain a copy of Personal Data we process in a portable and, to the extent technically feasible, readily usable format.