A customer taps the button in your email and, before your store loads, the browser flashes a Not secure warning. Some back out. Some tap again. Either way the email looks like it's up to something, which a peptide brand can't afford.
What's going on
To count clicks, email platforms rewrite every link so it passes through a tracking address on your sending domain first, something like email.send.yourbrand.com, and then redirects to the real page. If that tracking address only answers over plain http with no security certificate, the browser warns on that first hop, even though your store itself is secure.
How to fix it
- Turn on HTTPS for the tracking domain in your sending provider, and wait for it to issue a certificate.
- Check with a real click from a real send. Test emails often skip click tracking, so they won't show the problem.
- Until the certificate is active, turn click tracking off instead of sending insecure links. You can still tie sales to emails with your own link tags.
We caught this on a live account when a recipient tapped, hit the warning, went back and tapped again. Now every brand's tracking domain has to have an active certificate before click tracking goes on.