What safeguards has the CRS Supplier assured Camp Margaritaville it will maintain to protect Customer Confidential Information?

According to Camp Margaritaville's 2025 Franchise Disclosure Document, the CRS (Central Reservation System) Supplier has assured Camp Margaritaville that it will maintain certain safeguards to protect Customer Confidential Information, including Guest Information and Reservation Data. These safeguards are designed to ensure the security and integrity of this information and to protect against unauthorized access or use. This commitment is part of the terms of use between the CRS Supplier and Camp Margaritaville.

Specifically, the CRS Supplier has committed to implementing and maintaining appropriate administrative, technical, and physical safeguards. These safeguards are intended to provide a multi-layered approach to data protection, addressing various potential vulnerabilities. Administrative safeguards may include policies and procedures related to data handling and access control. Technical safeguards could involve encryption, firewalls, and intrusion detection systems. Physical safeguards might encompass measures like secure data centers and restricted access to hardware.

It is important to note that while the CRS Supplier has made these assurances to Camp Margaritaville, the franchisee is not a third-party beneficiary of any agreement between the CRS Supplier and Camp Margaritaville. This means that only Camp Margaritaville has a direct legal relationship with the CRS Supplier regarding these protections. However, Camp Margaritaville states that it will reasonably assist the franchisee with any issues or conflicts with the CRS Supplier, including enforcing the CRS Supplier's obligations in the event of a data security breach affecting the franchisee's customers.

Camp Margaritaville also requires franchisees to adhere to specific obligations when handling Guest Information and Reservation Data. Franchisees must collect, use, and store this data in accordance with the Branding Agreement, privacy laws, and other applicable regulations. They must also maintain the data in strict confidence and use it only for the purposes for which it was provided. Franchisees are responsible for the actions of their employees and representatives concerning the treatment of Guest Information and Reservation Data, as if those actions were their own.