Comment by roosmaa

The form is hosted on Typeform which is served over https. But since it is embedded via an iframe, the secure connection is not communicated to the user by the browser.

So your data is safe, however, I do agree that https for hashtagstartup.co would clear up the confusion.