I work in ecommerce consulting - most of my clients take CC info on their site, the forms on the checkout POST (over SSL) to the PSP who then return a token to the site, all future transactions use the token.
Most people don't want to bounce customers to a third party site for payment, it really hurts conversions.
Most people don't want to bounce customers to a third party site for payment, it really hurts conversions.