To what email address must a Camp Margaritaville franchisee send written notice of a security incident?
Camp_Margaritaville Franchise · 2025 FDDAnswer from 2025 FDD Document
(ii) Security Incident Notification. In the event of a Security Incident, Franchisee shall: (i) promptly inform Franchisor in writing of such Security Incident, but by no later than twenty-four (24) hours from the date Franchisee obtains actual or constructive knowledge of the Security Incident; (ii) promptly investigate, correct, mitigate, remediate, and otherwise handle the Security Incident, including by identifying Guest Profile Data or Confidential Information that may have been accessed, acquired, disclosed, or used as a result of the Security Incident and taking sufficient steps to prevent the continuation and recurrence of the Security Incident; and (iii) immediately provide information, including artifacts required for incident response and forensics investigations, and assistance, such as preservation and retention of logs and data relevant to the evaluation, requested by Franchisor.
(iii) The written notice to the Franchisor required in the previous sentence must be sent to legal@margaritaville.com and shall include, at a minimum (if known, and to Franchisee's knowledge as of the time of the notice): (i) the type of Guest Profile Data or Confidential Information that may have been accessed, acquired, disclosed, or used as a result of the Security Incident, (ii) if any Personal Data may have been accessed, acquired, disclosed, or used, the type of personally identifiable data and the names and contact information of all individuals whose personally identifiable data may have been impacted by the Security Incident, (iii) Franchisee's plan for corrective actions to respond to the Security Incident; and (iv) steps taken to secure Guest Profile Data or Confidential Information and preserve information for any necessary investigation.
Franchisee shall not unreasonably delay its notification to Franchisor.
Additionally, Franchisee shall provide regular updates to Franchisor regarding the Security Incident and shall notify Franchisor promptly as new information becomes known, until the Security Incident is fully remediated to Franchisor's reasonable satisfaction.
- (iv) All information relating to the Security Incident must be retained by Franchisee until Franchisor has consented in writing to its destruction.
Source: Item 23 — RECEIPTS (FDD pages 72–406)
What This Means (2025 FDD)
According to Camp Margaritaville's 2025 Franchise Disclosure Document, a franchisee must send written notice of a security incident to legal@margaritaville.com. This notification must be done promptly, and no later than 24 hours from the date the franchisee gains knowledge of the security incident.
The written notice must include specific details, if known, such as the type of Guest Profile Data or Confidential Information that may have been accessed, acquired, disclosed, or used as a result of the Security Incident. If Personal Data may have been compromised, the notice should include the type of personally identifiable data and the contact information of all individuals affected by the incident. Additionally, the franchisee must provide their plan for corrective actions to respond to the Security Incident, as well as the steps taken to secure Guest Profile Data or Confidential Information and preserve information for any necessary investigation.
The franchisee is also obligated to provide regular updates to Camp Margaritaville regarding the Security Incident until it is fully resolved to the franchisor's satisfaction. All information related to the incident must be retained by the franchisee until Camp Margaritaville provides written consent for its destruction. This ensures that Camp Margaritaville is kept fully informed and has the necessary information to assist in managing and resolving the security breach.