Using Contact Forms to Send Private Information [closed]

My first thoughts are to SSL the entire site due to the nature of the project.

There are also things you can do to forms to make them safer, when recently reading the Stripe payment gateway documentation they suggest not adding a name attribute to the fields in the form until the final second with some javascript.

SSL and no mixed content loading (which is making sure every asset is loaded over SSL too) should be sufficient though.