You might get better answers in the Business Catalyst Forum.
I don't know if regular BC forms are encrypted well enough to collect sensitive Credit Card data. I was under the impression that BC's e-commerce module passed customers off to PayPal or some other payment gateway to enter their sensitive CC info. But I may be wrong.
Nancy O.