What action must a Floyds 99 franchisee take in the event of a data breach?

According to the 2025 Floyds 99 Franchise Disclosure Document, a franchisee must take immediate action in the event of a data breach. Specifically, the franchisee is required to notify Floyds 99 immediately if there is any actual or suspected data breach or cyber-attack at or in connection with their Floyds 99 shop and/or customer data.

In addition to immediate notification, the franchisee must comply with all investigation and remediation efforts related to the breach, consistent with Floyds 99's standards and specifications. The franchisee is also responsible for protecting customer data from cyberattacks or unauthorized access and waives any claims against Floyds 99 as a result of such attacks or unauthorized access.

Furthermore, the franchisee must adhere to all applicable federal, state, and local laws and regulations concerning the storage, handling, use, and protection of customer data. They must also comply with any data protection and breach response policies that Floyds 99 may periodically establish and must not use or disclose customer data in a manner that would violate Floyds 99's published privacy policy. These measures highlight the importance of data security and the franchisee's role in safeguarding customer information and maintaining the integrity of the Floyds 99 brand.