If you're ordering directly from the website and not using the PayPal website for transactions, I'm pretty sure you need to purchase a secure certificate, once the certificate has been approved you'll need to reference any page links you want secured by using HTTPS instead of HTTP.