Apologies, I should have inspected more closely before flagging this. The cert is there. It doesn't redirect from http to https (a current best practice), and search engine results for "heritage owners club" return the http URL, so I expect that many people are hitting the http service, which is unencrypted.