Are Small Enterprises Protecting Customer Data?