What is considered 'Card Data' that GIFT will maintain in a Database for Dq Treat?

According to the 2025 Dq Treat FDD, GIFT (First Data Resources, LLC) will maintain a database of card data, which is defined as the transaction record and current value of each card recorded in the database. This database is the information repository software owned and operated by GIFT or its suppliers.

For a Dq Treat franchisee, this means that GIFT is responsible for securely storing and managing the data related to gift card transactions. This includes tracking the transaction history and the remaining balance on each card. Franchisees do not have control over this database but rely on GIFT to accurately maintain this information.

The FDD also defines other types of card-related data, such as "Gift/Credit/Debit Card Data," which includes all data derived from EMV chips, Near Field Communication (NFC), Apple Pay, and magnetic stripe readers. However, this data is distinct from the "Card Data" that GIFT specifically maintains in its database for stored value card program purposes. Franchisees should be aware of the different categories of card data and their respective handling procedures to ensure compliance and security.

It is important for Dq Treat franchisees to understand the distinction between the card data managed by GIFT and other types of payment card information they may encounter. While GIFT handles the transaction records and card values, franchisees are responsible for securing other sensitive data and adhering to Payment Card Industry Data Security Standards (PCI-DSS) for their own networks and systems.