A business can essentially do whateve they wish with their parking spaces, provided it does not interfere with handicap spaces and emergency vehicles. If the business elects to tow a vehicle, there are laws which regulate this, for both the protection of the vehicle owner and the property owner.
Section 22658 of the vehicle code covers private person towing, which you can read by clicking on the link below.
Sorrry for the late response to your question. We experienced a slight glitch in our software and are getting caught up!