PCI Compliance is in place to help protect the buyer from any size business big or small.
All businesses that accept card payments must follow these guidelines but they are very basic.
We have to follow the rules in our company where we basically have to say we don't store card details on our system, if we did we would have to use a PCI compliant host to store the card details.
We have to confirm we never write down any card details or take card details over the phone.
Doing this means we have a very basic compliance and our card processing company can feel assured we are doing our part to ensure the customer is safe.

I hope that makes sense I'm about 9 beers in at this point tonight.