It doesn't matter if the risk is low, the impact is high. Your customers will see you don't want to shell out 12 bucks for an SSL certificate to protect them.
You pay everywhere with your credit card. Everytime you buy something with your credit card number, the site you put it in can make a copy of it. Has the number any value at all?