Nonprofits are Not Immune to Maintaining Data Privacy