Who pays for the data security and privacy audit of a Clean Your Dirty Face franchise?

According to Clean Your Dirty Face's 2025 Franchise Disclosure Document, the franchisee is responsible for covering the costs associated with data security and privacy audits. Clean Your Dirty Face retains the right, but not the obligation, to conduct these audits on a franchisee's business and computer systems to ensure compliance with their requirements.

This means that if Clean Your Dirty Face chooses to perform an audit, the franchisee will bear the financial burden of that audit. This could potentially add a significant and unexpected expense to the franchisee's operating costs. It is important for prospective franchisees to factor this potential cost into their financial planning.

Franchisees are also obligated to adhere to all applicable laws and regulations regarding personal information, assist Clean Your Dirty Face in meeting its compliance obligations, and promptly report any data breaches or communications related to personal information. Failing to comply with these obligations could trigger an audit, the cost of which the franchisee would have to pay.

This is a fairly standard practice in franchising, as franchisors need to ensure brand consistency and compliance across all locations. However, the financial responsibility placed on the franchisee for these audits highlights the importance of maintaining strict data security and privacy practices to avoid triggering an audit and incurring additional costs.