What is considered 'Customer Data' in the operation of a Learningrx Franchised Business?

According to Learningrx's 2025 Franchise Disclosure Document, Customer Data encompasses a broad range of information related to consumers and potential consumers. Specifically, Customer Data includes any information, records, lists, or data that contains Personal Information. Personal Information is defined as data that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with a particular consumer, potential consumer, individual, or household. This definition is subject to further clarification or amendment by applicable federal, state, and local statutes, regulations, ordinances, and requirements, including but not limited to, the California Consumer Privacy Act.

This definition means that Learningrx franchisees must be diligent in how they handle any information pertaining to their customers and potential customers. This includes not only obvious identifiers like names and addresses but also any data that could potentially be linked back to an individual. The collection, maintenance, and generation of Personal Information occur through various means, including the use of point-of-sale systems within the Learningrx franchised business.

For a prospective Learningrx franchisee, understanding the scope of Customer Data is crucial for compliance with privacy laws and the franchise agreement. Franchisees are obligated to adhere to data protection requirements outlined in the Operations Manual and the Franchise Agreement. They must also comply with all applicable Privacy Laws, including the California Consumer Privacy Act, and cooperate with Learningrx to ensure compliance. Furthermore, franchisees are required to promptly notify Learningrx of any Security Incident, which involves any unauthorized access to or disclosure of Customer Data. Franchisees must also give Learningrx the ability to delete, access, or copy Customer Data in the franchisee's possession or control, and notify Learningrx of any requests regarding Customer Data received from a consumer as defined by applicable Privacy Laws.

To ensure compliance, Learningrx franchisees must adopt and implement policies, procedures, and controls that enable them to respond promptly to rights requests made pursuant to applicable Privacy Laws, such as disclosure, deletion, or opt-out requests. Access to Customer Data should be limited to employees with a need-to-know based on their job function or role. Franchisees are also responsible for providing data privacy and security training to employees who handle Customer Data and ensuring they adhere to data confidentiality terms. Maintaining Customer Data in confidence is a key requirement, as outlined in the Franchise Agreement.