Just serve the form and POST the data via SSL/https. You really don't even need to use https for the form itself, however, you want your site visitors to know that they're going to be using encryption, and it might help avoid warnings from the browser in certain configurations.