Does the Cicis Franchise Agreement outline requirements for 'Information Security'?
Cicis Franchise · 2025 FDDAnswer from 2025 FDD Document
You must maintain a secure technology infrastructure that meets our requirements from time to time. All technology used to support the Cicis Approved POS System must maintain the most current PCI DSS-compliance (compliance with the thencurrent regulations of the Payment Card Industry Data Security Standards council or its successor and other regulations and industry standards applicable to the protection of customer privacy and credit card information, including but not limited to the Fair and Accurate Credit Transaction Act (FACTA)) and must meet our requirements, which may change from time to time.
J. Branded E-mail. We reserve the right to require you to obtain from us and use an e-mail address associated with our registered domain name. If we require you to obtain and use an e-mail address, you must do so according to our then-current System Standards. You acknowledge and agree that we will have unrestricted access to all such e-mail accounts, and all documents, data, materials, and messages shared from or by such accounts. We may deactivate any such account or limit your or your users' access to it at any time. You acknowledge and agree that you will use such e-mail address only in connection with the operation of your Restaurant and in compliance with all Laws.
During the Term, we will provide you with access to our manuals applicable to the development and operation of Cicis Restaurants (collectively, the “Manuals”).
The Manuals may contain both mandatory specifications, standards, operating procedures and rules that we periodically prescribe for operating Cicis Restaurants and other specifications, standards and policies we may periodically suggest, and information on your other obligations under this Agreement (the “System Standards”), and other suggested specifications, standards and procedures.
The Manuals and any passwords and access credentials are part of our Confidential Information (defined below) and must be protected against improper use and disclosure.
You may disclose the Manuals to your employees who need to know its contents provided they are themselves bound by written obligations of confidentiality.
You may not at any time copy, duplicate, record, or otherwise reproduce, distribute or publish any part of the Manuals or use its contents in any other business.
Source: Item 22 — CONTRACTS (FDD pages 64–65)
What This Means (2025 FDD)
According to Cicis's 2025 Franchise Disclosure Document, the Franchise Agreement does address information security. Specifically, franchisees must maintain a secure technology infrastructure that adheres to Cicis's requirements, which may change over time. This infrastructure must comply with the most current PCI DSS standards, FACTA, and other regulations related to customer privacy and credit card information protection.
Cicis also reserves the right to require franchisees to use a company-associated email address. If mandated, Cicis has unrestricted access to these email accounts, including all documents, data, materials, and messages. Cicis can deactivate these accounts or limit access at any time. Franchisees must use the email address only for restaurant operations and in compliance with all laws.
Furthermore, Cicis provides access to its manuals, which contain System Standards and are considered confidential information. Franchisees must protect these manuals against improper use and disclosure and can only share them with employees who are bound by confidentiality obligations. Franchisees cannot copy, duplicate, or distribute any part of the manuals or use their contents in any other business.
These stipulations ensure that franchisees handle sensitive data and confidential information securely, protecting both Cicis's interests and customer data. Compliance with these requirements is essential for maintaining the integrity and security of the Cicis system.