Derrick is building a Web form to collect user data for a retail Web site. He will be collecting the users name e-mail address phone number, physical address and credit card information. What should he do to protect his users, when collecting this data?