Who is authorized to conduct data security and compliance audits for a Floyds 99 franchise?

According to the 2025 Floyds 99 Franchise Disclosure Document, vendors designated or approved by Floyds 99 are authorized to conduct periodic data security and compliance audits for a franchisee. Alternatively, the franchisee can provide proof of compliance to Floyds 99. This authorization is part of the broader requirement that franchisees comply with Floyds 99's standards and specifications, including using their designated credit card processing service and adhering to PCI Security Standards.

This means that as a Floyds 99 franchisee, you may be subject to audits by third-party vendors chosen by Floyds 99 to ensure your shop's data security and compliance. These audits are designed to protect customer data and maintain the integrity of the Floyds 99 system. If a franchisee prefers to use a different vendor, they must still provide proof of compliance to Floyds 99, ensuring that all data security standards are met.

It is important to note that if a data security breach occurs, the franchisee is obligated to immediately notify Floyds 99 and cooperate with all investigation and remediation efforts. Furthermore, franchisees are responsible for protecting customer data from cyberattacks and unauthorized access. Floyds 99 also retains ownership of all customer data and can access it at the franchisee's location to audit compliance. This highlights the importance of maintaining robust data security measures and adhering to Floyds 99's data protection policies.

In the event that a franchisee fails to maintain the required services or equipment to meet Floyds 99's standards, Floyds 99 reserves the right to purchase these items on the franchisee's behalf, with the franchisee responsible for reimbursement. This ensures that all locations adhere to the necessary security protocols, safeguarding both the customer data and the reputation of the Floyds 99 brand.