A business owner has a duty to use reasonable care to protect its customers against foreseeable risks about which the owner should have known.