Hi Zoe,
We're shortly going to start using PCIPal to process our credit card payments. PCIPal takes people's credit card details in a way which isn't visible to the person booking the tickets and so payments are taken in a PCI compliant way as we never get to see or hear people's credit card details. Not only does that take all payments taken over the phone out of PCI scope, but also means payments can be processed by someone working from home.
Happy to answer any questions you might have about PCIPal.
Grae