Hi,
yes it is just the small 's' that makes all the difference.
And yes, there are probably thousands of small businesses where the credit card data is sent to the server via a secure channel - and then emailed to the shop in the plain.
If you have a real mail account with the same company that hosts your site, you can probably retrieve your mails via a secure channel.
Also you should consider using some online card processing service, so the card details are never sent to your site - you get the client's address if required and a message from the service that the money has been collected.
Musicman