This piece for Links Beat collects the advice that holds up in practice.
Any business that accepts card payments is expected to protect card data according to industry security standards. For a small online store the simplest way to meet most of those requirements is to avoid handling card numbers at all. Using a reputable payment provider whose hosted checkout collects the details means the sensitive data never touches your own server.