The form is submitted using an HTTPS form action. All sensitive data is encrypted before transmission and is never sent as clear-text.