There's no excuse to be on http and not https in 2018. The certificates are literally there for free.
https://doesmysiteneedhttps.com/

If you don't have a sysadmin I even volunteer to do this for you