Unless you want your clients and potential clients to receive a "Not secure" notice when they try to access your website, it's time to get yourself an SSL certificate. It's not hard and many hosting companies include one as part of their packages. Ask your web developer...sooner rather than later. 

This is particularly good advice if you are a professional service provider (e.g., lawyer, accountant, health care provider).  Your client relationships are explicitly based on trust. Now imagine how a client or potential client feels when they arrive at your website and they see a "Not secure" warning. Doesn't really inspire confidence and trust, does it?