What organizational, physical, administrative, and technical measures must a Cinnabon franchisee employ to safeguard customer information?
Cinnabon Franchise · 2025 FDDAnswer from 2025 FDD Document
- A. Protection of Customer Information. You must comply with our Standards, other directions from us, and all applicable Laws regarding the organizational, physical, administrative and technical measures and security procedures to safeguard the confidentiality, integrity, and security of Customer Information on your Computer System or otherwise in your possession or control and, in any event, employ reasonable means to safeguard the confidentiality, integrity, and security of Customer Information. "Customer Information" means names, contact information, financial information, purchasing history, market research data, and other personal information of or relating to the customers and prospective customers of the Franchised Business.
- B. Access to Customer Information. All Customer Information that you or your thirdparty vendors collect from customers and potential customers in connection with your Franchised Business must be furnished to us at any time that we request it. In addition, we and our affiliates, through the Computer System or otherwise, have the right to independently access the Customer Information.
- C. Use of Customer Information. You must only use Customer Information to market Approved Products to customers in accordance with the policies that we may establish periodically and applicable Laws. You may not sell, transfer, or use Customer Information for any purpose other than marketing Approved Products and the Franchised Business. We and our affiliates may use Customer Information in any manner or for any purpose. You must secure from your customers, prospective customers, vendors, and others all consents and authorizations, and provide them all disclosures, that applicable Law requires to transmit Customer Information to us and our affiliates, and for us and our affiliates to use that Customer Information, in the manner that this Agreement contemplates.
Source: Item 23 — Receipts (FDD pages 114–399)
What This Means (2025 FDD)
According to Cinnabon's 2025 Franchise Disclosure Document, franchisees must adhere to specific standards, directions from Cinnabon, and all applicable laws to protect customer information. This includes implementing organizational, physical, administrative, and technical measures, as well as security procedures, to ensure the confidentiality, integrity, and security of customer information on their computer systems or within their control. Customer Information is defined as names, contact information, financial information, purchasing history, market research data, and other personal information related to customers and prospective customers of the Cinnabon franchised business.
Cinnabon franchisees are obligated to use reasonable means to safeguard customer information. All customer information collected by the franchisee or their third-party vendors must be provided to Cinnabon upon request. Furthermore, Cinnabon and its affiliates have the right to independently access this customer information through the computer system or other means.
Franchisees are permitted to use customer information only to market approved products to customers, following Cinnabon's established policies and applicable laws. Selling, transferring, or using customer information for any other purpose is prohibited. Franchisees must also obtain all necessary consents and authorizations from customers, prospective customers, vendors, and others, and provide all legally required disclosures to allow the transmission and use of customer information by Cinnabon and its affiliates as contemplated in the agreement. These measures ensure that customer data is handled responsibly and in compliance with privacy regulations.