Graham

Not the shop, just the final "secure ordering page".

All that's needed is a message saying "we're now passing you over to our secure server handler to complete your transaction and take your credit card details etc" which is, frankly, no different from using Paypal etc.