If you don't have SSL available to transmit data via HTTP you can still help protect that data during transit using a little jQuery magic.
Check out the jCryption library. It uses RSA public key technology along with jQuery to help obscure data. You can use key lengths up to 2048 bits, and the library also supports using Ajax to send the data.
Pretty slick stuff, and very handy for sites that don't have SSL enabled!