There was a post asking about SSL necessity for GDPR and I didn't research the question properly.
If a website isn't payment orientated or doesn't hold sensitive information (Ex. email, credit cards, addresses, forum etc.) Why would you need to invest in SSL? Another?
How is the site coded? Ex. XHTML/HTML/CSS || Or CMS, PHP, JavaScript