Gomadrid.com Aerocity form (used to) send credit card details unencrypted

Update: Gomadrid.com promptly wrote in to say they've fixed it – see comments below.

Don't use the Aerocity shuttle online booking system from gomadrid.com – it would send your credit card data completely unencrypted over the internet. This is despite the form itself being hosted on an encrypted page, and a prominent, false statement about how your details are encrypted and “100% secure” – they're absolutely not, view source on the form and you can see that even though the page with the form is hosted on that secure server, it submits the form contents back to the insecure site at http://www.gomadrid.com/cgi-bin/aeromail.cgi. Since you need to give them your credit card details to book, that means your credit card details would be at risk. If you're using a good browser like Safari, it will by default warn you before doing this, but not all browsers would.