Just completing what Zaxo said:

-If you are going to use your own server to host the website:
-- Keep it safe and updated. To have a secure application you must have a secure OS.
- If you are hosting it somewhere else:
-- Choose a good company. Check to see if they have the right security practices.

Btw, avoid storing credit cards in your database.

-DBC