What is the Canopy Lawn Care franchisee's obligation regarding PCI industry and government requirements?
Canopy_Lawn_Care Franchise · 2025 FDDAnswer from 2025 FDD Document
You are required to use the credit card processing service we approve. Since you accept credit cards as a method of payment, you must comply with payment card infrastructure ("PCI") industry and government requirements. PCI security standards are technical and operational requirements designed to protect cardholder data. The standards apply to all organizations that store, process, or transmit cardholder data and cover technical and operational payment system components involving cardholder data. Notwithstanding the credit card processing requirement, we do not represent, nor certify to you or your customers that the credit card processing service approved or provided by us or an affiliate is compliant, whether or not certified as compliant, with PCI Data Security Standards. Your credit card processing provider should assist you with this compliance.
Source: Item 8 — RESTRICTIONS ON SOURCES OF PRODUCTS AND SERVICES (FDD pages 26–29)
What This Means (2025 FDD)
According to Canopy Lawn Care's 2025 Franchise Disclosure Document, franchisees are obligated to comply with Payment Card Industry (PCI) and government requirements because they accept credit cards as a method of payment. These PCI security standards are in place to protect cardholder data and apply to any organization that stores, processes, or transmits this data. The standards cover both technical and operational payment system components that involve cardholder data.
While Canopy Lawn Care requires franchisees to use an approved credit card processing service, it does not represent or certify that the service is PCI Data Security Standards compliant, even if the service claims to be compliant. This means the franchisee bears the ultimate responsibility for ensuring PCI compliance.
To assist with this compliance, Canopy Lawn Care advises franchisees to seek guidance from their credit card processing provider. This implies that franchisees need to actively engage with their provider to understand and implement the necessary security measures to protect cardholder data and meet PCI standards. Failing to comply with PCI standards can result in fines, penalties, and potential legal liabilities for the franchisee.