What does The Standardx consider to be 'Cardholder Data'?

According to The Standardx's 2025 Franchise Disclosure Document, 'Cardholder Data' is defined as any information related to payment cards authorized by or bearing the logo of a member of the Payment Card Industry ("PCI") Security Standards Council (the "PCI SSC"), or any similar organization that The Standardx periodically specifies. It also includes data related to alternative technology or non-cash transaction methods relating to payment that The Standardx periodically specifies. This definition extends to any person to whom such a payment card or alternative technology has been issued.

For a prospective The Standardx franchisee, this definition is crucial because it sets the scope for data security and compliance obligations. Franchisees must understand what constitutes cardholder data to properly implement and maintain security measures as required by the PCI DSS (Payment Card Industry Data Security Standards). Failure to protect this data can lead to significant financial penalties, legal repercussions, and damage to the brand's reputation.

The Standardx franchisee is responsible for complying with standards and measures required under the PCI DSS regarding the collection, storage, use, processing, and transfer of Cardholder Data, as well as maintaining the confidentiality and security of that Cardholder Data. This includes implementing appropriate security protocols, regularly updating systems, and training staff to handle cardholder data securely. The franchisor, The Standardx, also warrants that it will maintain compliance with the PCI DSS for the Hosted System, including the security of Cardholder Data that it stores, processes, or transmits on behalf of the franchisee, indicating a shared responsibility for data security.

Given the importance of data security, prospective franchisees should carefully review the specific requirements outlined in the Franchise Agreement and related documents. They should also seek clarification from The Standardx regarding any uncertainties related to data handling and security protocols. Understanding these obligations is essential for the successful and compliant operation of a The Standardx franchise.