If you are going to host your own order forms or accept credit card input from your customers, you will need, at a minimum, a valid SSL certificate.
Beyond that, every site and business is different and several factors come into play. Your payment processor may also have additional requirements.
This site explains it very well and in detail:
The following screenshot is a basic extract from the site: