I bought mine via C-Cex, but one can also use Poloniex or Bittrex, there may be others too.
Best place to store them I guess is a local wallet. I might have mentioned I let my computer "mine" them too, as in do protein folding calculations for Rosetta and World Community Grid research projects, so having a local wallet is kind of essential, at least for me.