What is the Circle K franchisee's responsibility to represent and warrant that they will not retain, use, combine or disclose any Customer Information?
Circle_K Franchise · 2025 FDDAnswer from 2025 FDD Document
- (c) If any federal or state Privacy Law, including the California Consumer Privacy Act, as revised by the California Consumer Privacy Rights Act , Cal.
Civ.
Code § 1798.100, et seq. (collectively, "CCPA") and any related regulations, applies to the operation of the Store, whenever and to the extent Franchisee operates as a "Service Provider" or "Contractor" under the CCPA, a data processor, or in a similar capacity under any federal or state Privacy Law, Franchisee represents and warrants that:
(1) Except for the purpose of operating the Store and in accordance with the Business Systems Manuals, Franchisee will not retain, use, combine or disclose any Customer Information;
(2) Franchisee will not sell, share, make available or otherwise disclose any Customer Information to any third party for valuable consideration or for the purpose of performing cross-context behavioral advertising;
(3) Franchisee will not retain, use, or disclose Customer Information outside of the direct business relationship between Franchisee and Franchisor;
(4) Franchisee will delete any Customer Information upon Franchisor's request unless Franchisee can prove that such request is subject to an exception under applicable law;
(5) If Franchisee receives a Customer Information data request (e.g. a request to delete Customer Information) directly from a consumer (e.g., a California resident under the CCPA or CPRA, or a resident of another jurisdiction under other applicable Privacy Law), Franchisee shall inform Franchisor of that request within one business day and cooperate with Franchisor to ensure that the consumer receives an appropriate and timely acknowledgement and response;
(6) Franchisee will implement reasonable security procedures and practices appropriate to the Customer Information it collects, retains, uses or discloses, in order to protect it from unauthorized or illegal access, including following minimum requirements that may be set forth in the Business Systems Manuals;
Source: Item 22 — CONTRACTS (FDD page 100)
What This Means (2025 FDD)
According to Circle K's 2025 Franchise Disclosure Document, if any federal or state Privacy Law applies to the operation of the store, the franchisee acts as a 'Service Provider' or 'Contractor' under the CCPA, a data processor, or in a similar capacity under any federal or state Privacy Law. In this case, the franchisee represents and warrants several conditions regarding customer information.
Specifically, the franchisee must not retain, use, combine, or disclose any Customer Information except for the purpose of operating the store and in accordance with the Business Systems Manuals. They are prohibited from selling, sharing, or disclosing Customer Information to any third party for valuable consideration or for cross-context behavioral advertising. The franchisee also cannot retain, use, or disclose Customer Information outside of the direct business relationship between the franchisee and Circle K.
Furthermore, the franchisee must delete any Customer Information upon Circle K's request, unless they can prove that such a request is subject to an exception under applicable law. If the franchisee receives a Customer Information data request directly from a consumer, they must inform Circle K of that request within one business day and cooperate with Circle K to ensure the consumer receives an appropriate and timely response. Finally, the franchisee must implement reasonable security procedures and practices to protect Customer Information from unauthorized or illegal access, including following minimum requirements in the Business Systems Manuals.