What security standards must a Canopy Lawn Care franchisee comply with when accepting credit cards?
Canopy_Lawn_Care Franchise · 2025 FDDAnswer from 2025 FDD Document
You are required to use the credit card processing service we approve. Since you accept credit cards as a method of payment, you must comply with payment card infrastructure ("PCI") industry and government requirements. PCI security standards are technical and operational requirements designed to protect cardholder data. The standards apply to all organizations that store, process, or transmit cardholder data and cover technical and operational payment system components involving cardholder data. Notwithstanding the credit card processing requirement, we do not represent, nor certify to you or your customers that the credit card processing service approved or provided by us or an affiliate is compliant, whether or not certified as compliant, with PCI Data Security Standards. Your credit card processing provider should assist you with this compliance.
Source: Item 8 — RESTRICTIONS ON SOURCES OF PRODUCTS AND SERVICES (FDD pages 26–29)
What This Means (2025 FDD)
According to Canopy Lawn Care's 2025 Franchise Disclosure Document, franchisees are required to adhere to specific security standards when processing credit card payments. Canopy Lawn Care mandates that franchisees use an approved credit card processing service. As franchisees accept credit cards, they must comply with Payment Card Industry (PCI) standards and all relevant government requirements. PCI security standards include technical and operational requirements designed to protect cardholder data. These standards apply to all organizations that store, process, or transmit cardholder data, covering all payment system components that involve cardholder data.
While Canopy Lawn Care requires franchisees to use an approved credit card processing service, they do not represent or certify that the service is PCI Data Security Standards compliant. It is the franchisee's responsibility to ensure compliance with PCI standards with the assistance of their credit card processing provider. This means franchisees must take an active role in understanding and implementing the necessary security measures to protect customer data.
In practice, this means a prospective Canopy Lawn Care franchisee needs to budget time and potentially money to ensure they are compliant with PCI standards. They should discuss PCI compliance with Canopy Lawn Care during their due diligence and ask for a list of approved providers who can assist with compliance. While Canopy Lawn Care mandates the use of an approved provider, the onus of compliance ultimately falls on the franchisee, highlighting the importance of selecting a provider that offers robust security features and support.