We use Stripe to collect payments, which is a system trusted by the biggest players in the industries. Stripe has been audited by a PCI-certified auditor, and is certified to PCI Service Provider Level 1. This is the most stringent level of certification available.