For the online payment, your website used a pop-up. This does not indicate if it is a secure connection or not.

Please update the design or options so the security (or lack?) is visible.