Yes. If you are collecting user data, such as credit card details, it is essential your website has an SSL certificate installed.